Every CVE Search/ Get API key

CVE-2022-3303

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It...

4.7 MediumFix available

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.32%Down 0.6 points since Sep 28, 2022
90%50%10%1%

What each source reports

NVD Score used 4.7

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition

Record
CVE-2022-3303
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-667, CWE-362
Updated
2026-11-02
CVE List 4.7

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition

Record
CVE-2022-3303
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-667
Updated
2026-11-02
EUVDEUVD-2022-42693 4.7

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition

Record
EUVD-2022-42693
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-833h-m63r-586v 4.7

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It...

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition

Record
GHSA-833h-m63r-586v
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-362, CWE-667
Updated
2026-11-02
OSVAZL-11048 4.7

CVE-2022-3303 affecting package kernel for versions less than 5.15.70.1-1

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition

Record
AZL-11048
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2022-3303 4.7

CVE-2022-3303 does not affect BellSoft software

Record
BELL-CVE-2022-3303
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 46 moreShow less
OSV 4.7

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition

Record
CVE-2022-3303
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-667
Updated
2026-11-02
OSVDEBIAN-CVE-2022-3303 4.7

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition

Record
DEBIAN-CVE-2022-3303
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVOESA-2022-1985 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.(CVE-2022-1184)

An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur.(CVE-2022-39842)

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition(CVE-2022-3303)

An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured.(CVE-2022-2663)

Record
OESA-2022-1985
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2022-1991 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.(CVE-2022-1184)

An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur.(CVE-2022-39842)

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition(CVE-2022-3303)

An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured.(CVE-2022-2663)

Record
OESA-2022-1991
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2022-2015 8.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.(CVE-2022-1184)

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition(CVE-2022-3303)

drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open(), aka a race condition between ufx_ops_open and ufx_usb_disconnect.(CVE-2022-41849)

In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel(CVE-2022-20421)

In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237540956References: Upstream kernel(CVE-2022-20422)

A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the file net/ipv4/fib_semantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-210357 was assigned to this vulnerability.(CVE-2022-3435)

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac80211/scan.c.(CVE-2022-41674)

roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a report is received while copying a report->value is in progress.(CVE-2022-41850)

mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.(CVE-2022-42703)

A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.(CVE-2022-42719)

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.(CVE-2022-42720)

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.(CVE-2022-42721)

Record
OESA-2022-2015
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-3303 5.7

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition

Record
UBUNTU-CVE-2022-3303
CVSS 4.0
5.7 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
4.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-06
OSVCLSA-2023-1682604577 No score

Fix of 54 CVEs

  • CVE-2022-1198
    • drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
  • Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // CVE-2020-36516
    • ipv4: avoid using shared IP generator for connected sockets
  • CVE-2022-36879
    • xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup()
  • CVE-2022-3061
    • video: fbdev: i740fb: Error out if 'pixclock' equals zero
  • CVE-2022-1516
    • net/x25: Fix null-ptr-deref caused by x25_disconnect
  • CVE-2022-1205
    • ax25: Fix NULL pointer dereferences in ax25 timers
    • ax25: Fix UAF bugs in ax25 timers
  • CVE-2022-2318
    • net: rose: fix UAF bugs caused by timer handler
  • CVE-2022-1195
    • hamradio: defer 6pack kfree after unregister_netdev
    • hamradio: defer ax25 kfree after unregister_netdev
    • hamradio: improve the incomplete fix to avoid NPD
  • CVE-2022-0494
    • block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
  • CVE-2021-26401
    • x86/speculation: Use generic retpoline by default on AMD
  • Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) // CVE-2022-39188
    • mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
  • Bionic update: upstream stable patchset 2022-10-06 (LP: #1992112) // CVE-2022-39188
    • mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()
  • CVE-2022-45934
    • Bluetooth: L2CAP: Fix u8 overflow
  • Bionic update: upstream stable patchset 2022-06-21 (LP: #1979355) // CVE-2022-2991
    • lightnvm: disable the subsystem
  • Bionic update: upstream stable patchset 2021-11-02 (LP: #1949512) // CVE-2021-4203
    • af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
  • Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479) // CVE-2021-3772
    • sctp: fix the processing for INIT chunk
    • sctp: fix the processing for INIT_ACK chunk
  • Bionic update: upstream stable patchset 2021-12-03 (LP: #1953202) // CVE-2021-3772
    • sctp: use init_tag from inithdr for ABORT chunk
    • sctp: fix the processing for COOKIE_ECHO chunk
    • sctp: add vtag check in sctp_sf_violation
    • sctp: add vtag check in sctp_sf_do_8_5_1_E_sa
    • sctp: add vtag check in sctp_sf_ootb
  • CVE-2022-3303
    • ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
  • Bionic update: upstream stable patchset 2022-09-21 (LP: #1990434) // CVE-2022-1462
    • tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()
    • tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()
  • CVE-2022-1462
    • tty: fix deadlock caused by calling printk() under tty_port->lock
  • Bionic update: upstream stable patchset 2020-11-10 (LP: #1903768) // CVE-2022-1462
    • pty: do tty_flip_buffer_push without port->lock in pty_write
  • Bionic update: upstream stable patchset 2019-02-08 (LP: #1815234) // CVE-2022-1462
    • tty: Fix data race in tty_insert_flip_string_fixed_flag
  • Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) // CVE-2022-4662
    • USB: core: Prevent nested device-reset calls
  • Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // CVE-2022-0617
    • udf: Restore i_lenAlloc when inode expansion fails
    • udf: Fix NULL ptr deref when converting from inline format
  • Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479) // CVE-2022-1016
    • netfilter: nf_tables: initialize registers in nft_do_chain()
  • Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) // CVE-2022-2380
    • video: fbdev: sm712fb: Fix crash in smtcfb_read()
  • Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) // CVE-2022-3111
    • power: supply: wm8350-power: Add missing free in free_charger_irq
  • CVE-2022-3628
    • wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()
  • Bionic update:…
Record
CLSA-2023-1682604577
Updated
2026-11-02
OSVCLSA-2023-1682605601 No score

Fix of 53 CVEs

  • CVE-2022-1198
    • drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
  • Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // CVE-2020-36516
    • ipv4: avoid using shared IP generator for connected sockets
  • CVE-2022-36879
    • xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup()
  • CVE-2022-3061
    • video: fbdev: i740fb: Error out if 'pixclock' equals zero
  • CVE-2022-1516
    • net/x25: Fix null-ptr-deref caused by x25_disconnect
  • CVE-2022-1205
    • ax25: Fix NULL pointer dereferences in ax25 timers
    • ax25: Fix UAF bugs in ax25 timers
  • CVE-2022-2318
    • net: rose: fix UAF bugs caused by timer handler
  • CVE-2022-1195
    • hamradio: defer 6pack kfree after unregister_netdev
    • hamradio: defer ax25 kfree after unregister_netdev
    • hamradio: improve the incomplete fix to avoid NPD
  • CVE-2022-0494
    • block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
  • CVE-2021-26401
    • x86/speculation: Use generic retpoline by default on AMD
  • Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) // CVE-2022-39188
    • mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
  • Bionic update: upstream stable patchset 2022-10-06 (LP: #1992112) // CVE-2022-39188
    • mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()
  • CVE-2022-45934
    • Bluetooth: L2CAP: Fix u8 overflow
  • Bionic update: upstream stable patchset 2022-06-21 (LP: #1979355) // CVE-2022-2991
    • lightnvm: disable the subsystem
  • Bionic update: upstream stable patchset 2021-11-02 (LP: #1949512) // CVE-2021-4203
    • af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
  • Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479) // CVE-2021-3772
    • sctp: fix the processing for INIT chunk
    • sctp: fix the processing for INIT_ACK chunk
  • Bionic update: upstream stable patchset 2021-12-03 (LP: #1953202) // CVE-2021-3772
    • sctp: use init_tag from inithdr for ABORT chunk
    • sctp: fix the processing for COOKIE_ECHO chunk
    • sctp: add vtag check in sctp_sf_violation
    • sctp: add vtag check in sctp_sf_do_8_5_1_E_sa
    • sctp: add vtag check in sctp_sf_ootb
  • CVE-2022-3303
    • ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
  • Bionic update: upstream stable patchset 2022-09-21 (LP: #1990434) // CVE-2022-1462
    • tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()
    • tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()
  • CVE-2022-1462
    • tty: fix deadlock caused by calling printk() under tty_port->lock
  • Bionic update: upstream stable patchset 2020-11-10 (LP: #1903768) // CVE-2022-1462
    • pty: do tty_flip_buffer_push without port->lock in pty_write
  • Bionic update: upstream stable patchset 2019-02-08 (LP: #1815234) // CVE-2022-1462
    • tty: Fix data race in tty_insert_flip_string_fixed_flag
  • Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) // CVE-2022-4662
    • USB: core: Prevent nested device-reset calls
  • Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // CVE-2022-0617
    • udf: Restore i_lenAlloc when inode expansion fails
    • udf: Fix NULL ptr deref when converting from inline format
  • Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479) // CVE-2022-1016
    • netfilter: nf_tables: initialize registers in nft_do_chain()
  • Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) // CVE-2022-2380
    • video: fbdev: sm712fb: Fix crash in smtcfb_read()
  • Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) // CVE-2022-3111
    • power: supply: wm8350-power: Add missing free in free_charger_irq
  • CVE-2022-3628
    • wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()
  • Bionic update:…
Record
CLSA-2023-1682605601
Updated
2026-11-02
OSVCLSA-2023-1693429208 No score

Fix of 17 CVEs

Record
CLSA-2023-1693429208
Updated
2026-11-02
OSVCLSA-2023-1693431257 No score

Fix of 17 CVEs

Record
CLSA-2023-1693431257
Updated
2026-11-02
OSVMGASA-2022-0379 No score

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.74 and fixes at least the following security issues:

A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV) (CVE-2022-0171).

A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config space is in line with the features advertised by the VDUSE userspace application. In case of a mismatch, Virtio drivers config read helpers do not initialize the memory indirectly passed to vduse_vdpa_get_config() returning uninitialized memory from the stack. This could cause undefined behavior or data leaks in Virtio drivers (CVE-2022-2308).

An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured (CVE-2022-2663).

A flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error (CVE-2022-3061).

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition (CVE-2022-3303).

A flaw was found in the Linux kernel networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user to crash the system, causing a denial of service (CVE-2022-3586).

In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (CVE-2022-20421).

An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur (CVE-2022-39842).

An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free (CVE-2022-40307).

drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case (CVE-2022-40768).

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac80211/scan.c (CVE-2022-41674).

A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code (CVE-2022-42719).

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code (CVE-2022-42720).

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn,…

Record
MGASA-2022-0379
Updated
2026-11-02
OSVMGASA-2022-0380 No score

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.74 and fixes at least the following security issues:

A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV) (CVE-2022-0171).

A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config space is in line with the features advertised by the VDUSE userspace application. In case of a mismatch, Virtio drivers config read helpers do not initialize the memory indirectly passed to vduse_vdpa_get_config() returning uninitialized memory from the stack. This could cause undefined behavior or data leaks in Virtio drivers (CVE-2022-2308).

An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured (CVE-2022-2663).

An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data (CVE-2022-2905).

A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket (CVE-2022-3028).

A flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error (CVE-2022-3061).

There exists a use-after-free in io_uring in the Linux kernel. Signalfd_poll() and binder_poll() use a waitqueue whose lifetime is the current task. It will send a POLLFREE notification to all waiters before the queue is freed. Unfortunately, the io_uring poll doesn't handle POLLFREE. This allows a use-after-free to occur if a signalfd or binder fd is polled with io_uring poll, and the waitqueue gets freed (CVE-2022-3176).

A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, resulting in a denial of service condition (CVE-2022-3303).

A flaw was found in the Linux kernel networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user to crash the system, causing a denial of service (CVE-2022-3586).

In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation (CVE-2022-20421).

An issue was discovered in net/netfilter/nf_tables_api.c in the kernel before 5.19.6. A denial of service can occur upon binding to an already bound chain (CVE-2022-39190).

An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check. After that, because it is used as the third argument to copy_from_user(), a heap overflow may occur (CVE-2022-39842).

An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a…

Record
MGASA-2022-0380
Updated
2026-11-02
OSVSUSE-SU-2022:3584-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated.

The following security bugs were fixed:

  • CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
  • CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
  • CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
  • CVE-2022-41848: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl (bnc#1203987).
  • CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677).
  • CVE-2022-20008: Fixed a bug which allowed to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. (bnc#1199564)
  • CVE-2022-2663: Fixed an issue which allowed a firewall to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured (bnc#1202097).
  • CVE-2022-39188: Fixed a race condition where a device driver can free a page while it still has stale TLB entries. (bnc#1203107).

The following non-security bugs were fixed:

  • arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 (git-fixes)
  • cifs: alloc_mid function should be marked as static (bsc#1190317).
  • cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (bsc#1190317).
  • cifs: change smb2_query_info_compound to use a cached fid, if available (bsc#1190317).
  • cifs: check for smb1 in open_cached_dir() (bsc#1190317).
  • cifs: Check the IOCB_DIRECT flag, not O_DIRECT (bsc#1190317).
  • cifs: clean up an inconsistent indenting (bsc#1190317).
  • cifs: convert the path to utf16 in smb2_query_info_compound (bsc#1190317).
  • cifs: Do not use tcon->cfid directly, use the cfid we get from open_cached_dir (bsc#1190317).
  • cifs: do not use uninitialized data in the owner/group sid (bsc#1190317).
  • cifs: fix double free race when mount fails in cifs_get_root() (bsc#1190317).
  • cifs: fix FILE_BOTH_DIRECTORY_INFO definition (bsc#1190317).
  • cifs: fix handlecache and multiuser (bsc#1190317).
  • cifs: fix lock length calculation (bsc#1190317).
  • cifs: fix ntlmssp auth when there is no key exchange (bsc#1190317).
  • cifs: fix NULL ptr dereference in refresh_mounts() (bsc#1190317).
  • cifs: fix NULL ptr dereference in smb2_ioctl_query_info() (bsc#1190317).
  • cifs: fix set of group SID via NTSD xattrs (bsc#1190317).
  • cifs: fix signed integer overflow when fl_end is OFFSET_MAX (bsc#1190317).
  • cifs: Fix smb311_update_preauth_hash() kernel-doc comment (bsc#1190317).
  • cifs: fix the cifs_reconnect path for DFS (bsc#1190317).
  • cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (bsc#1190317).
  • cifs: mark sessions for reconnection in helper function (bsc#1190317).
  • cifs: modefromsids must add an ACE for authenticated users (bsc#1190317).
  • cifs: move definition of cifs_fattr earlier in cifsglob.h (bsc#1190317).
  • cifs: move from strlcpy with unused retval to strscpy (bsc#1190317).
  • cifs: move superblock magic defitions to magic.h (bsc#1190317).
  • cifs: potential buffer overflow in handling symlinks (bsc#1190317).
  • cifs: prevent bad output lengths in smb2_ioctl_query_info() (bsc#1190317).
  • cifs: release cached dentries only if mount is complete (bsc#1190317).
  • cifs: remove 'cifs_' prefix from init/destroy mids functions (bsc#1190317).
  • cifs: remove check of list iterator against head past the loop body (bsc#1190317).
  • cifs: remove minor build warning (bsc#1190317).
  • cifs: remove redundant initialization to variable mnt_sign_enabled (bsc#1190317).
  • cifs: remove remaining build warnings (bsc#1190317).
  • cifs: remove repeated debug message on cifs_put_smb_ses() (bsc#1190317).
  • cifs: remove some…
Record
SUSE-SU-2022:3584-1
Updated
2026-11-02
OSVSUSE-SU-2022:3585-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated.

The following security bugs were fixed:

  • CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
  • CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
  • CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
  • CVE-2022-41848: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl (bnc#1203987).
  • CVE-2022-41849: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open (bnc#1203992).
  • CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bnc#1202095).
  • CVE-2022-1263: Fixed a NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allowed an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service (bnc#1198189).
  • CVE-2022-3202: Fixed a NULL pointer dereference flaw in Journaled File System. This could allow a local attacker to crash the system or leak kernel internal information (bnc#1203389).
  • CVE-2022-39189: Fixed a bug in the x86 KVM subsystem which allows unprivileged guest users to compromise the guest kernel because TLB flush operations are mishandled (bnc#1203066).

The following non-security bugs were fixed:

  • ACPI / scan: Create platform device for CS35L41 (bsc#1203699).
  • ACPI: processor idle: Practically limit 'Dummy wait' workaround to old Intel systems (bsc#1203767).
  • ACPI: resource: skip IRQ override on AMD Zen platforms (git-fixes).
  • ACPI: scan: Add CLSA0101 Laptop Support (bsc#1203699).
  • ACPI: utils: Add api to read _SUB from ACPI (bsc#1203699).
  • ALSA: aloop: Fix random zeros in capture data when using jiffies timer (git-fixes).
  • ALSA: core: Fix double-free at snd_card_new() (git-fixes).
  • ALSA: cs35l41: Check hw_config before using it (bsc#1203699).
  • ALSA: cs35l41: Enable Internal Boost in shared lib (bsc#1203699).
  • ALSA: cs35l41: Move cs35l41_gpio_config to shared lib (bsc#1203699).
  • ALSA: cs35l41: Unify hardware configuration (bsc#1203699).
  • ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (git-fixes).
  • ALSA: hda: add Intel 5 Series / 3400 PCI DID (git-fixes).
  • ALSA: hda: cs35l41: Add Amp Name based on channel and index (bsc#1203699).
  • ALSA: hda: cs35l41: Add Boost type flag (bsc#1203699).
  • ALSA: hda: cs35l41: Add calls to newly added test key function (bsc#1203699).
  • ALSA: hda: cs35l41: Add defaulted values into dsp bypass config sequence (bsc#1203699).
  • ALSA: hda: cs35l41: Add initial DSP support and firmware loading (bsc#1203699).
  • ALSA: hda: cs35l41: Add missing default cases (bsc#1203699).
  • ALSA: hda: cs35l41: Add module parameter to control firmware load (bsc#1203699).
  • ALSA: hda: cs35l41: Add support for CS35L41 in HDA systems (bsc#1203699).
  • ALSA: hda: cs35l41: Add Support for Interrupts (bsc#1203699).
  • ALSA: hda: cs35l41: Allow compilation test on non-ACPI configurations (bsc#1203699).
  • ALSA: hda: cs35l41: Always configure the DAI (bsc#1203699).
  • ALSA: hda: cs35l41: Avoid overwriting register patch (bsc#1203699).
  • ALSA: hda: cs35l41: Clarify support for CSC3551 without _DSD Properties (bsc#1203699).
  • ALSA: hda: cs35l41: Consolidate selections under SND_HDA_SCODEC_CS35L41 (bsc#1203699).
  • ALSA: hda: cs35l41: Do not dereference fwnode handle (bsc#1203699).
  • ALSA: hda: cs35l41: Drop wrong use of ACPI_PTR() (bsc#1203699).
  • ALSA: hda: cs35l41: Enable GPIO2 Interrupt for CLSA0100 laptops (bsc#1203699).
  • ALSA: hda: cs35l41: Fix comments wrt serial-multi-instantiate reference (bsc#1203699).
  • ALSA: hda: cs35l41: fix double free on error in probe() (bsc#1203699). -…
Record
SUSE-SU-2022:3585-1
Updated
2026-11-02
OSVSUSE-SU-2022:3587-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated.

The following security bugs were fixed:

  • CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
  • CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
  • CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
  • CVE-2022-41848: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl (bnc#1203987).
  • CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677).
  • CVE-2022-20008: Fixed a bug which allowed to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. (bnc#1199564)
  • CVE-2022-2663: Fixed an issue which allowed a firewall to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured (bnc#1202097).
  • CVE-2022-39188: Fixed a race condition where a device driver can free a page while it still has stale TLB entries. (bnc#1203107).

The following non-security bugs were fixed:

  • arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 (git-fixes)
  • cifs: alloc_mid function should be marked as static (bsc#1190317).
  • cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (bsc#1190317).
  • cifs: change smb2_query_info_compound to use a cached fid, if available (bsc#1190317).
  • cifs: check for smb1 in open_cached_dir() (bsc#1190317).
  • cifs: Check the IOCB_DIRECT flag, not O_DIRECT (bsc#1190317).
  • cifs: clean up an inconsistent indenting (bsc#1190317).
  • cifs: convert the path to utf16 in smb2_query_info_compound (bsc#1190317).
  • cifs: Do not use tcon->cfid directly, use the cfid we get from open_cached_dir (bsc#1190317).
  • cifs: do not use uninitialized data in the owner/group sid (bsc#1190317).
  • cifs: fix double free race when mount fails in cifs_get_root() (bsc#1190317).
  • cifs: fix FILE_BOTH_DIRECTORY_INFO definition (bsc#1190317).
  • cifs: fix handlecache and multiuser (bsc#1190317).
  • cifs: fix lock length calculation (bsc#1190317).
  • cifs: fix ntlmssp auth when there is no key exchange (bsc#1190317).
  • cifs: fix NULL ptr dereference in refresh_mounts() (bsc#1190317).
  • cifs: fix NULL ptr dereference in smb2_ioctl_query_info() (bsc#1190317).
  • cifs: fix set of group SID via NTSD xattrs (bsc#1190317).
  • cifs: fix signed integer overflow when fl_end is OFFSET_MAX (bsc#1190317).
  • cifs: Fix smb311_update_preauth_hash() kernel-doc comment (bsc#1190317).
  • cifs: fix the cifs_reconnect path for DFS (bsc#1190317).
  • cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (bsc#1190317).
  • cifs: mark sessions for reconnection in helper function (bsc#1190317).
  • cifs: modefromsids must add an ACE for authenticated users (bsc#1190317).
  • cifs: move definition of cifs_fattr earlier in cifsglob.h (bsc#1190317).
  • cifs: move from strlcpy with unused retval to strscpy (bsc#1190317).
  • cifs: move superblock magic defitions to magic.h (bsc#1190317).
  • cifs: potential buffer overflow in handling symlinks (bsc#1190317).
  • cifs: prevent bad output lengths in smb2_ioctl_query_info() (bsc#1190317).
  • cifs: release cached dentries only if mount is complete (bsc#1190317).
  • cifs: remove 'cifs_' prefix from init/destroy mids functions (bsc#1190317).
  • cifs: remove check of list iterator against head past the loop body (bsc#1190317).
  • cifs: remove minor build warning (bsc#1190317).
  • cifs: remove redundant initialization to variable mnt_sign_enabled (bsc#1190317).
  • cifs: remove remaining build warnings (bsc#1190317).
  • cifs: remove repeated debug message on cifs_put_smb_ses() (bsc#1190317).
  • cifs: remove some…
Record
SUSE-SU-2022:3587-1
Updated
2026-11-02
OSVSUSE-SU-2022:3599-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 kernel was updated.

The following security bugs were fixed:

  • CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
  • CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
  • CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
  • CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677).

The following non-security bugs were fixed:

  • x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still be possible to do so that the mitigation can still be disabled on Intel who do not use the return thunks but IBRS.
Record
SUSE-SU-2022:3599-1
Updated
2026-11-02
OSVSUSE-SU-2022:3609-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2022-39190: Fixed an issue that was discovered in net/netfilter/nf_tables_api.c and could cause a denial of service upon binding to an already bound chain (bnc#1203117).
  • CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has stale TLB entries (bnc#1203107).
  • CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bnc#1201948).
  • CVE-2022-3028: Fixed race condition that was found in the IP framework for transforming packets (XFRM subsystem) (bnc#1202898).
  • CVE-2022-2977: Fixed reference counting for struct tpm_chip (bsc#1202672).
  • CVE-2022-2905: Fixed tnum_range usage on array range checking for poke descriptors (bsc#1202564, bsc#1202860).
  • CVE-2022-2663: Fixed an issue that was found in nf_conntrack_irc where the message handling could be confused and incorrectly matches the message (bnc#1202097).
  • CVE-2022-2639: Fixed an integer coercion error that was found in the openvswitch kernel module (bnc#1202154).
  • CVE-2022-26373: Fixed non-transparent sharing of return predictor targets between contexts in some Intel Processors (bnc#1201726).
  • CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
  • CVE-2022-20369: Fixed out of bounds write in v4l2_m2m_querybuf of v4l2-mem2mem.c (bnc#1202347).
  • CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bsc#1202346).
  • CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bnc#1194535).
  • CVE-2021-4155: Fixed a data leak flaw that was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem (bnc#1194272).
  • CVE-2020-36516: Fixed an issue in the mixed IPID assignment method where an attacker was able to inject data into or terminate a victim's TCP session (bnc#1196616).
  • CVE-2020-27784: Fixed a vulnerability that was found in printer_ioctl() printer_ioctl() when accessing a deallocated instance (bnc#1202895).
  • CVE-2016-3695: Fixed an issue inside the einj_error_inject function in drivers/acpi/apei/einj.c that allowed users to simulate hardware errors and consequently cause a denial of service (bnc#1023051).
  • CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
  • CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
  • CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
  • CVE-2022-41848: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl (bnc#1203987).
  • CVE-2022-41849: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open (bnc#1203992).
  • CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bnc#1202095).
  • CVE-2022-41222: Fixed a use-after-free via a stale TLB because an rmap lock is not held during a PUD move (bnc#1203622).
  • CVE-2022-2503: Fixed a bug in dm-verity, device-mapper table reloads allowed users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allowed root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates (bnc#1202677).
  • CVE-2020-16119: Fixed a use-after-free vulnerability exploitable by a local attacker due to reuse of a DCCP socket. (bnc#1177471)

The following non-security bugs were fixed:

  • ACPI: APEI: Better fix to avoid…
Record
SUSE-SU-2022:3609-1
Updated
2026-11-02
OSVSUSE-SU-2022:3688-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated.

The following security bugs were fixed:

  • CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
  • CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
  • CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
  • CVE-2022-41848: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl (bnc#1203987).
  • CVE-2022-2503: Fixed a bug in dm-verity, device-mapper table reloads allowed users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allowed root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates (bnc#1202677).

The following non-security bugs were fixed:

  • dtb: Do not include sources in src.rpm - refer to kernel-source Same as other kernel binary packages there is no need to carry duplicate sources in dtb packages.
  • net: mana: Add rmb after checking owner bits (git-fixes).
  • net: mana: Add the Linux MANA PF driver (bug#1201309, jsc#PED-529).
  • x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still be possible to do so that the mitigation can still be disabled on Intel who do not use the return thunks but IBRS.
Record
SUSE-SU-2022:3688-1
Updated
2026-11-02
OSVSUSE-SU-2022:3693-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2022-20008: Fixed local information disclosure due to possibility to read kernel heap memory via mmc_blk_read_single of block.c (bnc#1199564).
  • CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677).
  • CVE-2022-32296: Fixed vulnerability where TCP servers were allowed to identify clients by observing what source ports are used (bnc#1200288).
  • CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
  • CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
  • CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
  • CVE-2022-41848: Fixed a race condition in drivers/char/pcmcia/synclink_cs.c mgslpc_ioctl and mgslpc_detach (bnc#1203987).

The following non-security bugs were fixed:

  • dtb: Do not include sources in src.rpm - refer to kernel-source Same as other kernel binary packages there is no need to carry duplicate sources in dtb packages.
  • mkspec: eliminate @NOSOURCE@ macro This should be alsways used with @SOURCES@, just include the content there.
  • net: mana: Add rmb after checking owner bits (git-fixes).
  • net: mana: Add the Linux MANA PF driver (bnc#1201309, jsc#PED-529).
  • x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still be possible to do so that the mitigation can still be disabled on Intel who do not use the return thunks but IBRS.
Record
SUSE-SU-2022:3693-1
Updated
2026-11-02
OSVSUSE-SU-2022:3704-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated.

The following security bugs were fixed:

  • CVE-2020-16119: Fixed a use-after-free vulnerability exploitable by a local attacker due to reuse of a DCCP socket. (bnc#1177471)
  • CVE-2022-20008: Fixed a bug which allowed to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. (bnc#1199564)
  • CVE-2022-2503: Fixed a bug in dm-verity, device-mapper table reloads allowed users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allowed root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates (bnc#1202677).
  • CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bnc#1202095).
  • CVE-2022-32296: Fixed a bug which allowed TCP servers to identify clients by observing what source ports are used (bnc#1200288).
  • CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
  • CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
  • CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
  • CVE-2022-41222: Fixed a use-after-free via a stale TLB because an rmap lock is not held during a PUD move (bnc#1203622).
  • CVE-2022-41674: Fixed a DoS issue where kernel can crash on the reception of specific WiFi Frames (bsc#1203770).
  • CVE-2022-41848: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl (bnc#1203987).
  • CVE-2022-41849: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open (bnc#1203992).
  • CVE-2022-42719: Fixed remote code execution with wlan frames when parsing a multi-BSSID element (bsc#1204051).
  • CVE-2022-42720: Fixed remote code execution due to refcounting bugs (bsc#1204059).
  • CVE-2022-42721: Fixed remote code execution due list corruption in the wlan stack (bsc#1204060).

The following non-security bugs were fixed:

  • net: mana: Add support of XDP_REDIRECT action (bsc#1201310, jsc#PED-529).
  • net: mana: Add the Linux MANA PF driver (bsc#1201309, jsc#PED-529).
  • x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still work so that it can be disabled.
Record
SUSE-SU-2022:3704-1
Updated
2026-11-02
OSVSUSE-SU-2022:3775-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated.

The following security bugs were fixed:

  • CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory. (bnc#1203514)
  • CVE-2022-3169: Fixed a denial of service flaw which occurs when consecutive requests to NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET are sent. (bnc#1203290)
  • CVE-2022-42722: Fixed crash in beacon protection for P2P-device. (bsc#1204125)
  • CVE-2022-42719: Fixed MBSSID parsing use-after-free. (bsc#1204051)
  • CVE-2022-42721: Avoid nontransmitted BSS list corruption. (bsc#1204060)
  • CVE-2022-42720: Fixed BSS refcounting bugs. (bsc#1204059)
  • CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
  • CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
  • CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
  • CVE-2022-41848: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl (bnc#1203987).
  • CVE-2022-41849: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open (bnc#1203992).
  • CVE-2022-41674: Fixed a DoS issue where kernel can crash on the reception of specific WiFi Frames (bsc#1203770).
  • CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bnc#1202095).
  • CVE-2022-41222: Fixed a use-after-free via a stale TLB because an rmap lock is not held during a PUD move (bnc#1203622).
  • CVE-2022-2503: Fixed a bug in dm-verity, device-mapper table reloads allowed users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allowed root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates (bnc#1202677).
  • CVE-2022-20008: Fixed a bug which allowed to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. (bnc#1199564)
  • CVE-2020-16119: Fixed a use-after-free vulnerability exploitable by a local attacker due to reuse of a DCCP socket. (bnc#1177471)

The following non-security bugs were fixed:

  • ALSA: aloop: Fix random zeros in capture data when using jiffies timer (git-fixes).
  • ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (git-fixes).
  • ALSA: hda/realtek: Re-arrange quirk table entries (git-fixes).
  • ALSA: seq: Fix data-race at module auto-loading (git-fixes).
  • ALSA: seq: oss: Fix data-race for max_midi_devs access (git-fixes).
  • ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (git-fixes).
  • ALSA: usb-audio: fix spelling mistakes (git-fixes).
  • ALSA: usb-audio: Inform the delayed registration more properly (git-fixes).
  • ALSA: usb-audio: Register card again for iface over delayed_register option (git-fixes).
  • ALSA: usb-audio: Split endpoint setups for hw_params and prepare (git-fixes).
  • arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 (git-fixes)
  • arm64: dts: allwinner: A64 Sopine: phy-mode rgmii-id (git-fixes)
  • arm64: dts: allwinner: a64-sopine-baseboard: change RGMII mode to (bsc#1202341)
  • arm64: dts: allwinner: H5: NanoPi Neo Plus2: phy-mode rgmii-id (git-fixes)
  • arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob (git-fixes)
  • arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma (git-fixes)
  • arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz (git-fixes)
  • arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC (git-fixes)
  • arm64:…
Record
SUSE-SU-2022:3775-1
Updated
2026-11-02
OSVSUSE-SU-2022:3779-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12-SP2 kernel was updated receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
  • CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
  • CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
  • CVE-2022-2503: Fixed a vulnerability that allowed root to bypass LoadPin and load untrusted and unverified kernel modules and firmware (bnc#1202677).

The following non-security bugs were fixed:

  • x86/bugs: Reenable retbleed=off While for older kernels the return thunks are statically built in and cannot be dynamically patched out, retbleed=off should still be possible to do so that the mitigation can still be disabled on Intel who do not use the return thunks but IBRS.
Record
SUSE-SU-2022:3779-1
Updated
2026-11-02
OSVSUSE-SU-2022:3809-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2016-3695: Fixed an issue inside the einj_error_inject function in drivers/acpi/apei/einj.c that allowed users to simulate hardware errors and consequently cause a denial of service (bnc#1023051).
  • CVE-2020-16119: Fixed a use-after-free due to reuse of a DCCP socket with an attached dccps_hc_tx_ccid object as a listener after being released (bnc#1177471).
  • CVE-2020-27784: Fixed a vulnerability that was found in printer_ioctl() printer_ioctl() when accessing a deallocated instance (bnc#1202895).
  • CVE-2021-4155: Fixed a data leak flaw that was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem (bnc#1194272).
  • CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bnc#1194535).
  • CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bsc#1202346).
  • CVE-2022-20369: Fixed out of bounds write in v4l2_m2m_querybuf of v4l2-mem2mem.c (bnc#1202347).
  • CVE-2022-2503: Fixed a LoadPin bypass in Dm-verity (bnc#1202677).
  • CVE-2022-2586: Fixed issue in netfilter that allowed CHAIN_ID to refer to another table (bsc#1202095).
  • CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
  • CVE-2022-26373: Fixed non-transparent sharing of return predictor targets between contexts in some Intel Processors (bnc#1201726).
  • CVE-2022-2663: Fixed an issue that was found in nf_conntrack_irc where the message handling could be confused and incorrectly matches the message (bnc#1202097).
  • CVE-2022-2905: Fixed tnum_range usage on array range checking for poke descriptors (bsc#1202564, bsc#1202860).
  • CVE-2022-2977: Fixed reference counting for struct tpm_chip (bsc#1202672).
  • CVE-2022-3028: Fixed race condition that was found in the IP framework for transforming packets (XFRM subsystem) (bnc#1202898).
  • CVE-2022-3169: Fixed a denial of service that resulted in a PCIe link disconnect (bnc#1203290).
  • CVE-2022-32296: Fixed issue where TCP servers were able to identify clients by observing what source ports are used (bnc#1200288).
  • CVE-2022-3239: Fixed a use-after-free in the video4linux driver (bnc#1203552).
  • CVE-2022-3303: Fixed a race at SNDCTL_DSP_SYNC (bsc#1203769).
  • CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bnc#1201948).
  • CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has stale TLB entries (bnc#1203107).
  • CVE-2022-39190: Fixed an issue that was discovered in net/netfilter/nf_tables_api.c and could cause a denial of service upon binding to an already bound chain (bnc#1203117).
  • CVE-2022-40768: Fixed information leak in drivers/scsi/stex.c due to stex_queuecommand_lck lack a memset for the PASSTHRU_CMD case (bnc#1203514).
  • CVE-2022-41218: Fixed a use-after-free due to refcount races at releasing (bsc#1202960).
  • CVE-2022-41222: Fixed a use-after-free via a stale TLB because an rmap lock is not held during a PUD move (bnc#1203622).
  • CVE-2022-41674: Fixed a DoS issue where kernel can crash on the reception of specific WiFi Frames (bsc#1203770).
  • CVE-2022-41848: Fixed a use-after-free in mgslpc_ops (bsc#1203987).
  • CVE-2022-41849: Fixed a use-after-free in ufx_ops_open() (bsc#1203992).
  • CVE-2022-42719: Fixed MBSSID parsing use-after-free (bsc#1204051).
  • CVE-2022-42720: Fixed BSS refcounting bugs (bsc#1204059).
  • CVE-2022-42721: Avoid nontransmitted BSS list corruption (bsc#1204060).
  • CVE-2022-42722: Fixed crash in beacon protection for P2P-device (bsc#1204125).

The following non-security bugs were fixed:

  • Fixed parsing of rpm/macros.kernel-source on SLE12 (bsc#1201019).
  • acpi: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks (git-fixes).
  • acpi: LPSS: Fix missing check in register_device_clock()…
Record
SUSE-SU-2022:3809-1
Updated
2026-11-02
OSVSUSE-SU-2022:3810-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel rt was updated.

The following security bugs were fixed:

  • CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory. (bnc#1203514)
  • CVE-2022-3169: Fixed a denial of service flaw which occurs when consecutive requests to NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET are sent. (bnc#1203290)
  • CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
  • CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
  • CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
  • CVE-2022-41848: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl (bnc#1203987).
  • CVE-2022-2503: Fixed a bug in dm-verity, device-mapper table reloads allowed users with root privileges to switch out the target with an equivalent dm-linear target and bypass verification till reboot. This allowed root to bypass LoadPin and can be used to load untrusted and unverified kernel modules and firmware, which implies arbitrary kernel execution and persistence for peripherals that do not verify firmware updates (bnc#1202677).
  • CVE-2022-20008: Fixed a bug which allowed to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. (bnc#1199564)
  • CVE-2022-40307: Fixed a race condition that could had been exploited to trigger a use-after-free in the efi firmware capsule-loader.c. (bnc#1203322)
  • CVE-2022-3424: Fixed a use-after-free in gru_set_context_option which was leading to kernel panic. (bsc#1204166)

The following non-security bugs were fixed:

  • ACPI: processor idle: Practically limit 'Dummy wait' workaround to old Intel systems (bnc#1203802).
  • ACPI: processor_idle: Skip dummy wait if kernel is in guest (bnc#1203802).
  • arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 (git-fixes)
  • cifs: alloc_mid function should be marked as static (bsc#1190317).
  • cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (bsc#1190317).
  • cifs: change smb2_query_info_compound to use a cached fid, if available (bsc#1190317).
  • cifs: check for smb1 in open_cached_dir() (bsc#1190317).
  • cifs: Check the IOCB_DIRECT flag, not O_DIRECT (bsc#1190317).
  • cifs: clean up an inconsistent indenting (bsc#1190317).
  • cifs: convert the path to utf16 in smb2_query_info_compound (bsc#1190317).
  • cifs: Do not use tcon->cfid directly, use the cfid we get from open_cached_dir (bsc#1190317).
  • cifs: do not use uninitialized data in the owner/group sid (bsc#1190317).
  • cifs: fix double free race when mount fails in cifs_get_root() (bsc#1190317).
  • cifs: fix FILE_BOTH_DIRECTORY_INFO definition (bsc#1190317).
  • cifs: fix handlecache and multiuser (bsc#1190317).
  • cifs: fix lock length calculation (bsc#1190317).
  • cifs: fix ntlmssp auth when there is no key exchange (bsc#1190317).
  • cifs: fix NULL ptr dereference in refresh_mounts() (bsc#1190317).
  • cifs: fix NULL ptr dereference in smb2_ioctl_query_info() (bsc#1190317).
  • cifs: fix set of group SID via NTSD xattrs (bsc#1190317).
  • cifs: fix signed integer overflow when fl_end is OFFSET_MAX (bsc#1190317).
  • cifs: Fix smb311_update_preauth_hash() kernel-doc comment (bsc#1190317).
  • cifs: fix the cifs_reconnect path for DFS (bsc#1190317).
  • cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (bsc#1190317).
  • cifs: mark sessions for reconnection in helper function (bsc#1190317).
  • cifs: modefromsids must add an ACE for authenticated users (bsc#1190317).
  • cifs: move definition of cifs_fattr earlier in cifsglob.h (bsc#1190317).
  • cifs: move from strlcpy with unused…
Record
SUSE-SU-2022:3810-1
Updated
2026-11-02
OSVSUSE-SU-2022:3844-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated.

The following security bugs were fixed:

  • CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769).
  • CVE-2022-41218: Fixed an use-after-free caused by refcount races in drivers/media/dvb-core/dmxdev.c (bnc#1202960).
  • CVE-2022-3239: Fixed an use-after-free in the video4linux driver that could lead a local user to able to crash the system or escalate their privileges (bnc#1203552).
  • CVE-2022-41848: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl (bnc#1203987).
  • CVE-2022-41849: Fixed a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open (bnc#1203992).
  • CVE-2022-41674: Fixed a DoS issue where kernel can crash on the reception of specific WiFi Frames (bsc#1203770).
  • CVE-2022-1263: Fixed a NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allowed an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service (bnc#1198189).
  • CVE-2022-32296: Fixed a bug which allowed TCP servers to identify clients by observing what source ports are used (bnc#1200288).
  • CVE-2022-3202: Fixed a NULL pointer dereference flaw in Journaled File System. This could allow a local attacker to crash the system or leak kernel internal information (bnc#1203389).
  • CVE-2022-39189: Fixed a bug in the x86 KVM subsystem which allows unprivileged guest users to compromise the guest kernel because TLB flush operations are mishandled (bnc#1203066).
  • CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bnc#1202095).
  • CVE-2022-42722: Fixed crash in beacon protection for P2P-device. (bsc#1204125)
  • CVE-2022-42719: Fixed MBSSID parsing use-after-free. (bsc#1204051)
  • CVE-2022-42721: Avoid nontransmitted BSS list corruption. (bsc#1204060)
  • CVE-2022-42720: Fixed BSS refcounting bugs. (bsc#1204059)

The following non-security bugs were fixed:

  • ACPI / scan: Create platform device for CS35L41 (bsc#1203699).
  • ACPI: processor idle: Practically limit 'Dummy wait' workaround to old Intel systems (bsc#1203767).
  • ACPI: resource: skip IRQ override on AMD Zen platforms (git-fixes).
  • ACPI: scan: Add CLSA0101 Laptop Support (bsc#1203699).
  • ACPI: utils: Add api to read _SUB from ACPI (bsc#1203699).
  • ALSA: aloop: Fix random zeros in capture data when using jiffies timer (git-fixes).
  • ALSA: core: Fix double-free at snd_card_new() (git-fixes).
  • ALSA: cs35l41: Check hw_config before using it (bsc#1203699).
  • ALSA: cs35l41: Enable Internal Boost in shared lib (bsc#1203699).
  • ALSA: cs35l41: Move cs35l41_gpio_config to shared lib (bsc#1203699).
  • ALSA: cs35l41: Unify hardware configuration (bsc#1203699).
  • ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (git-fixes).
  • ALSA: hda: add Intel 5 Series / 3400 PCI DID (git-fixes).
  • ALSA: hda: cs35l41: Add Amp Name based on channel and index (bsc#1203699).
  • ALSA: hda: cs35l41: Add Boost type flag (bsc#1203699).
  • ALSA: hda: cs35l41: Add calls to newly added test key function (bsc#1203699).
  • ALSA: hda: cs35l41: Add defaulted values into dsp bypass config sequence (bsc#1203699).
  • ALSA: hda: cs35l41: Add initial DSP support and firmware loading (bsc#1203699).
  • ALSA: hda: cs35l41: Add missing default cases (bsc#1203699).
  • ALSA: hda: cs35l41: Add module parameter to control firmware load (bsc#1203699).
  • ALSA: hda: cs35l41: Add support for CS35L41 in HDA systems (bsc#1203699).
  • ALSA: hda: cs35l41: Add Support for Interrupts (bsc#1203699).
  • ALSA: hda: cs35l41: Allow compilation test on non-ACPI configurations (bsc#1203699).
  • ALSA: hda: cs35l41: Always configure the DAI (bsc#1203699).
  • ALSA: hda: cs35l41: Avoid overwriting register patch (bsc#1203699).
  • ALSA: hda: cs35l41:…
Record
SUSE-SU-2022:3844-1
Updated
2026-11-02
OSVSUSE-SU-2022:4617-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
  • CVE-2022-42328: Guests could trigger denial of service via the netback driver (bsc#1206114).
  • CVE-2022-42329: Guests could trigger denial of service via the netback driver (bsc#1206113).
  • CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver (bsc#1206113).
  • CVE-2022-3633: Fixed a memory leak in j1939_session_destroy of the file net/can/j1939/transport.c (bsc#1204650).
  • CVE-2022-3114: Fixed a denial of service in imx_register_uart_clocks() in drivers/clk/imx/clk.c (bsc#1206391).
  • CVE-2022-3619: Fixed a memory leak in l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c (bsc#1204569).
  • CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631).
  • CVE-2022-41850: Fixed a race condition in roccat_report_event() in drivers/hid/hid-roccat.c (bsc#1203960).
  • CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in net/bluetooth/l2cap_core.c (bsc#1205796).
  • CVE-2022-3567: Fixed a to race condition in inet6_stream_ops()/inet6_dgram_ops() (bsc#1204414).
  • CVE-2022-41858: Fixed a denial of service in sl_tx_timeout() in drivers/net/slip (bsc#1205671).
  • CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
  • CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).
  • CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).
  • CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2cap_core.c's l2cap_connect() and l2cap_le_connect_req() which may have allowed code execution and leaking kernel memory (respectively) remotely via Bluetooth (bsc#1205709).
  • CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2cap_core.c's l2cap_parse_conf_req() which can be used to leak kernel pointers remotely (bsc#1205705).
  • CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1204166).
  • CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wifi/brcmfmac (bsc#1204868).
  • CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).
  • CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set (bsc#1198702).
  • CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's internal memory (bsc#1204653).
  • CVE-2022-3542: Fixed memory leak in bnx2x_tpa_stop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c (bsc#1204402).
  • CVE-2022-3629: Fixed memory leak in vsock_connect() in net/vmw_vsock/af_vsock.c (bsc#1204635).
  • CVE-2022-3646: Fixed memory leak in nilfs_attach_log_writer() in fs/nilfs2/segment.c (bsc#1204646).
  • CVE-2022-3649: Fixed use-after-free in nilfs_new_inode() in fs/nilfs2/inode.c (bsc#1204647).
  • CVE-2022-3621: Fixed null pointer dereference in nilfs_bmap_lookup_at_level() in fs/nilfs2/inode.c (bsc#1204574).
  • CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bsc#1204479).
  • CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
  • CVE-2022-3565: Fixed use-after-free in del_timer() in drivers/isdn/mISDN/l1oip_core.c (bsc#1204431).
  • CVE-2022-3524: Fixed memory leak in ipv6_renew_options() in the IPv6 handler (bsc#1204354).
  • CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory (bsc#1203514).
  • CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma…
Record
SUSE-SU-2022:4617-1
Updated
2026-11-02
OSVSUSE-SU-2023:0416-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2017-13695: Fixed fix acpi operand cache leak in nseval.c (bsc#1055710).
  • CVE-2018-7755: Fixed bypass of kernel security protections such as KASLR using fd_locked_ioctl function in drivers/block/floppy.c (bnc#1084513).
  • CVE-2019-3837: Fixed memory leak due to thread-unsafe implementation of the net_dma code in tcp_recvmsg() (bnc#1131430).
  • CVE-2019-3900: Fixed infinite loop while receiving packets in vhost_net (bnc#1133374).
  • CVE-2020-15393: Fixed memory leak in usbtest_disconnect in drivers/usb/misc/usbtest.c (bnc#1173514).
  • CVE-2020-16119: Fixed use-after-free exploitable by a local attacker due to reuse of a DCCP socket (bnc#1177471).
  • CVE-2020-36557: Fixed race condition in the VT_DISALLOCATE ioctl and closing/opening of ttys which could lead to a use-after-free (bnc#1201429).
  • CVE-2020-36558: Fixed race condition in VT_RESIZEX (bsc#1200910).
  • CVE-2021-26341: Fixed vulnerablity where some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bnc#1201050).
  • CVE-2021-33655: When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds (bnc#1201635).
  • CVE-2021-33656: Fixed memory out of bounds write when setting font with malicous data by ioctl cmd PIO_FONT (bnc#1201636).
  • CVE-2021-34981: Fixed file refcounter in bluetooth cmtp when cmtp_attach_device fails (bsc#1191961).
  • CVE-2021-39713: Fixed race condition in the network scheduling subsystem which could lead to a use-after-free (bsc#1196973).
  • CVE-2021-45868: Fixed use-after-free in fs/quota/quota_tree.c (bnc#1197366).
  • CVE-2022-1011: Fixed UAF reads of write() buffers, allowing theft of (partial) /etc/shadow hashes (bsc#1197343).
  • CVE-2022-1048: Fixed potential AB/BA lock with buffer_mutex and mmap_lock (bsc#1197331).
  • CVE-2022-1353: Fixed denial of service in the pfkey_register function in net/key/af_key.c (bnc#1198516).
  • CVE-2022-1462: Fixed out-of-bounds read in the TeleTYpe subsystem allowing local user to crash the system or read unauthorized random data from memory (bnc#1198829).
  • CVE-2022-1652: Fixed use after free in floppy (bsc#1199063).
  • CVE-2022-1679: Fixed use-after-free in the atheros wireless adapter driver (bnc#1199487).
  • CVE-2022-20132: Fixed out of bounds read in lg_probe and related functions of hid-lg.c and other USB HID files (bnc#1200619).
  • CVE-2022-20166: Fixed out of bounds write due to a heap buffer overflow which could lead to local escalation of privilege with System execution privileges needed (bnc#1200598).
  • CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bnc#1202346).
  • CVE-2022-20369: Fixed out of bounds write due to improper input validation in v4l2_m2m_querybuf of v4l2-mem2mem.c (bnc#1202347).
  • CVE-2022-21166, CVE-2022-21127, CVE-2022-21123, CVE-2022-21125, CVE-2022-21180: Fixed stale MMIO data transient information leaks (INTEL-TA-00615) (bnc#1199650).
  • CVE-2022-21385: Fixed warn in rds_message_alloc_sgs (bnc#1202897).
  • CVE-2022-21499: Fixed issue where it was trivial to break out of lockdown using kgdb (bsc#1199426).
  • CVE-2022-2318: Fixed use-after-free caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privileges (bnc#1201251).
  • CVE-2022-2663: Fixed possible firewall bypass when users are using unencrypted IRC due to message handling confusion in nf_conntrack_irc (bnc#1202097).
  • CVE-2022-28356: Fixed refcount leak bug in net/llc/af_llc.c (bnc#1197391).
  • CVE-2022-29900: Fixed mis-trained branch predictions for return instructions that may have allowed arbitrary speculative code execution under certain microarchitecture-dependent conditions (bnc#1199657).
  • CVE-2022-29901: Fixed vulnerability where an attacker with unprivileged user access can hijack return instructions to…
Record
SUSE-SU-2023:0416-1
Updated
2026-11-02
OSVSUSE-SU-2025:0983-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47633: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (bsc#1237768).
  • CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238729).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
  • CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073).
  • CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
Record
SUSE-SU-2025:0983-1
Updated
2026-11-02
OSVSUSE-SU-2025:1027-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
  • CVE-2024-41092: drm/i915/gt: Fix potential UAF by revoke of fence registers (bsc#1228483).
  • CVE-2024-42098: crypto: ecdh - explicitly zeroize private_key (bsc#1228779).
  • CVE-2024-42229: crypto: aead,cipher - zeroize key buffer after use (bsc#1228708).
  • CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
  • CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
  • CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073).
  • CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).

The following non-security bugs were fixed:

  • initcall_blacklist: Does not allow kernel_lockdown be blacklisted (bsc#1237521).
  • x86/bhi: Avoid warning in #DB handler due to BHI mitigation (git-fixes).
  • x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (git-fixes).
  • x86/bugs: Fix BHI documentation (git-fixes).
  • x86/bugs: Fix BHI handling of RRSBA (git-fixes).
  • x86/bugs: Fix BHI retpoline check (git-fixes).
  • x86/bugs: Fix return type of spectre_bhi_state() (git-fixes).
  • x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (git-fixes).
Record
SUSE-SU-2025:1027-1
Updated
2026-11-02
OSVSUSE-SU-2025:1176-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
  • CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
  • CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207).
  • CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528).
  • CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
  • CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (bsc#1239095).
  • CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
  • CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
  • CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073).
  • CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
  • CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).

The following non-security bugs were fixed:

  • ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (bsc#1237530).
  • RDMA/mana_ib: Prefer struct_size over open coded arithmetic (bsc#1239016).
  • RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (bsc#1239016).
  • Revert 'gfs2: Fix inode height consistency check (git-fixes).
  • btrfs: defrag: do not use merged extent map for their generation check (bsc#1239968).
  • btrfs: fix defrag not merging contiguous extents due to merged extent maps (bsc#1239968).
  • btrfs: fix extent map merging not happening for adjacent extents (bsc#1239968).
  • btrfs: send: allow cloning non-aligned extent if it ends at i_size (bsc#1239969).
  • btrfs: send: fix invalid clone operation for file that got its size decreased (bsc#1239969).
  • cifs: Add a laundromat thread for cached directories (git-fixes).
  • cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path (git-fixes).
  • gfs2: Fix inode height consistency check (git-fixes).
  • mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (bsc#1239126).
  • mm: zswap: move allocations during CPU init outside the lock (git-fixes).
  • net: mana: Add flex array to struct mana_cfg_rx_steer_req_v2 (bsc#1239016).
  • net: mana: Allow variable size indirection table (bsc#1239016).
  • net: mana: Avoid open coded arithmetic (bsc#1239016).
  • net: mana: Support holes in device list reply msg (bsc#1240133).
  • sched/membarrier: Fix redundant load of membarrier_state (bsc#1232743).
  • smb3: allow controlling length of time directory entries are cached with dir leases (git-fixes).
  • smb3: do not start laundromat thread when dir leases disabled (git-fixes).
  • smb3: retrying on failed server close (git-fixes).
  • smb: client: destroy cfid_put_wq on module exit (git-fixes).
  • smb: client: disable directory caching when dir_cache_timeout is zero (git-fixes).
  • smb: client: do not start laundromat thread on nohandlecache (git-fixes).
  • smb: client: make laundromat a delayed worker (git-fixes).
  • smb: client: properly close cfids on umount (bsc#1231432, bsc#1232299, bsc#1235599, bsc#1234896).
  • tpm: send_data: Wait longer for the TPM to become ready (bsc#1235870).
Record
SUSE-SU-2025:1176-1
Updated
2026-11-02
OSVSUSE-SU-2025:1183-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
  • CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
  • CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207).
  • CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
  • CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
  • CVE-2024-41092: drm/i915/gt: Fix potential UAF by revoke of fence registers (bsc#1228483).
  • CVE-2024-42098: crypto: ecdh - explicitly zeroize private_key (bsc#1228779).
  • CVE-2024-42229: crypto: aead,cipher - zeroize key buffer after use (bsc#1228708).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528).
  • CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
  • CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
  • CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
  • CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
  • CVE-2025-21714: RDMA/mlx5: Fix implicit ODP use after free (bsc#1237890).
  • CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073).
  • CVE-2025-21732: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (bsc#1237877).
  • CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
  • CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
  • CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).
  • CVE-2025-21839: kABI: Fix kABI after backport od CVE-2025-21839 (bsc#1239061).

The following non-security bugs were fixed:

  • ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (bsc#1237530).
  • RDMA/mana_ib: Prefer struct_size over open coded arithmetic (bsc#1239016).
  • RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (bsc#1239016).
  • RDMA/mlx5: Fix implicit ODP hang on parent deregistration (git-fixes)
  • btrfs: defrag: do not use merged extent map for their generation check (bsc#1239968).
  • btrfs: fix defrag not merging contiguous extents due to merged extent maps (bsc#1239968).
  • btrfs: fix extent map merging not happening for adjacent extents (bsc#1239968).
  • btrfs: send: allow cloning non-aligned extent if it ends at i_size (bsc#1239969).
  • btrfs: send: fix invalid clone operation for file that got its size decreased (bsc#1239969).
  • gfs2: Fix inode height consistency check (git-fixes).
  • mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (bsc#1239126).
  • mm: zswap: move allocations during CPU init outside the lock (git-fixes).
  • net: mana: Add flex array to struct mana_cfg_rx_steer_req_v2 (bsc#1239016).
  • net: mana: Allow variable size indirection table (bsc#1239016).
  • net: mana: Avoid open coded arithmetic (bsc#1239016).
  • net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (bsc#1240195).
  • net: mana: Support holes in device list reply msg (bsc#1240133).
  • x86/bhi: Avoid warning in #DB handler due to BHI mitigation (git-fixes).
  • x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (git-fixes).
  • x86/bugs: Fix BHI documentation (git-fixes).
  • x86/bugs: Fix BHI handling of RRSBA (git-fixes).
  • x86/bugs: Fix BHI retpoline check (git-fixes).
  • x86/bugs: Fix return type of spectre_bhi_state() (git-fixes).
  • x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (git-fixes).
Record
SUSE-SU-2025:1183-1
Updated
2026-11-02
OSVSUSE-SU-2025:1194-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47248: udp: fix race between close() and udp_abort() (bsc#1224867).
  • CVE-2022-49051: net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (bsc#1237903).
  • CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
  • CVE-2022-49275: can: m_can: m_can_tx_handler(): fix use after free of skb (bsc#1238719).
  • CVE-2022-49413: bfq: Update cgroup information before merging bio (bsc#1238710).
  • CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
  • CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238729).
  • CVE-2022-49563: crypto: qat - add param check for RSA (bsc#1238787).
  • CVE-2022-49564: crypto: qat - add param check for DH (bsc#1238789).
  • CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207).
  • CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
  • CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
  • CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528).
  • CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
  • CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
  • CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
  • CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).

The following non-security bugs were fixed:

  • ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (bsc#1237530).
  • btrfs: send: allow cloning non-aligned extent if it ends at i_size (bsc#1239969).
  • btrfs: send: fix invalid clone operation for file that got its size decreased (bsc#1239969).
  • btrfs: send: use btrfs_file_extent_end() in send_write_or_clone() (bsc#1239969).
Record
SUSE-SU-2025:1194-1
Updated
2026-11-02
OSVSUSE-SU-2025:1241-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
  • CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
  • CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207).
  • CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528).
  • CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
  • CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (bsc#1239095).
  • CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
  • CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
  • CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073).
  • CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
  • CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).

The following non-security bugs were fixed:

  • ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (bsc#1237530).
  • btrfs: defrag: do not use merged extent map for their generation check (bsc#1239968).
  • btrfs: fix defrag not merging contiguous extents due to merged extent maps (bsc#1239968).
  • btrfs: fix extent map merging not happening for adjacent extents (bsc#1239968).
  • btrfs: send: allow cloning non-aligned extent if it ends at i_size (bsc#1239969).
  • btrfs: send: fix invalid clone operation for file that got its size decreased (bsc#1239969).
  • cifs: Add a laundromat thread for cached directories (git-fixes).
  • cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path (git-fixes).
  • gfs2: Fix inode height consistency check (git-fixes).
  • mm: zswap: move allocations during CPU init outside the lock (git-fixes).
  • mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (bsc#1239126).
  • net: mana: Add flex array to struct mana_cfg_rx_steer_req_v2 (bsc#1239016).
  • net: mana: Allow variable size indirection table (bsc#1239016).
  • net: mana: Avoid open coded arithmetic (bsc#1239016).
  • net: mana: Support holes in device list reply msg (bsc#1240133).
  • RDMA/mana_ib: Prefer struct_size over open coded arithmetic (bsc#1239016).
  • RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (bsc#1239016).
  • sched/membarrier: Fix redundant load of membarrier_state (bsc#1232743).
  • smb: client: destroy cfid_put_wq on module exit (git-fixes).
  • smb: client: disable directory caching when dir_cache_timeout is zero (git-fixes).
  • smb: client: do not start laundromat thread on nohandlecache (git-fixes).
  • smb: client: make laundromat a delayed worker (git-fixes).
  • smb: client: properly close cfids on umount (bsc#1231432, bsc#1232299, bsc#1235599, bsc#1234896).
  • smb3: allow controlling length of time directory entries are cached with dir leases (git-fixes).
  • smb3: do not start laundromat thread when dir leases disabled (git-fixes).
  • smb3: retrying on failed server close (git-fixes).
  • tpm: send_data: Wait longer for the TPM to become ready (bsc#1235870).
Record
SUSE-SU-2025:1241-1
Updated
2026-11-02
OSVSUSE-SU-2025:1263-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47248: udp: fix race between close() and udp_abort() (bsc#1224867).
  • CVE-2022-49051: net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (bsc#1237903).
  • CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
  • CVE-2022-49275: can: m_can: m_can_tx_handler(): fix use after free of skb (bsc#1238719).
  • CVE-2022-49413: bfq: Update cgroup information before merging bio (bsc#1238710).
  • CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
  • CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238729).
  • CVE-2022-49563: crypto: qat - add param check for RSA (bsc#1238787).
  • CVE-2022-49564: crypto: qat - add param check for DH (bsc#1238789).
  • CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207).
  • CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
  • CVE-2024-56642: tipc: Fix use-after-free of kernel socket in cleanup_bearer() (bsc#1235433).
  • CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528).
  • CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
  • CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
  • CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
  • CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).

The following non-security bugs were fixed:

  • ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (bsc#1237530).
  • btrfs: send: allow cloning non-aligned extent if it ends at i_size (bsc#1239969).
  • btrfs: send: fix invalid clone operation for file that got its size decreased (bsc#1239969).
  • btrfs: send: use btrfs_file_extent_end() in send_write_or_clone() (bsc#1239969).
Record
SUSE-SU-2025:1263-1
Updated
2026-11-02
OSVSUSE-SU-2025:1293-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466).
  • CVE-2021-47645: media: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com (bsc#1237767).
  • CVE-2021-47648: gpu: host1x: Fix a memory leak in 'host1x_remove()' (bsc#1237725).
  • CVE-2022-49046: i2c: dev: check return value when calling dev_set_name() (bsc#1237842).
  • CVE-2022-49051: net: usb: aqc111: Fix out-of-bounds accesses in RX fixup (bsc#1237903).
  • CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
  • CVE-2022-49059: nfc: nci: add flush_workqueue to prevent uaf (bsc#1238007).
  • CVE-2022-49074: irqchip/gic-v3: Fix GICR_CTLR.RWP polling (bsc#1237728).
  • CVE-2022-49075: btrfs: fix qgroup reserve overflow the qgroup limit (bsc#1237733).
  • CVE-2022-49084: qede: confirm skb is allocated before using (bsc#1237751).
  • CVE-2022-49107: ceph: fix memory leak in ceph_readdir when note_last_dentry returns error (bsc#1237973).
  • CVE-2022-49109: ceph: fix inode reference leakage in ceph_get_snapdir() (bsc#1237836).
  • CVE-2022-49119: scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req() (bsc#1237925).
  • CVE-2022-49120: scsi: pm8001: Fix task leak in pm8001_send_abort_all() (bsc#1237969).
  • CVE-2022-49209: bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full (bsc#1238252).
  • CVE-2022-49220: dax: make sure inodes are flushed before destroy cache (bsc#1237936).
  • CVE-2022-49275: can: m_can: m_can_tx_handler(): fix use after free of skb (bsc#1238719).
  • CVE-2022-49286: tpm: use try_get_ops() in tpm-space.c (bsc#1238647).
  • CVE-2022-49292: ALSA: oss: Fix PCM OSS buffer allocation overflow (bsc#1238625).
  • CVE-2022-49308: extcon: Modify extcon device to be created after driver data is set (bsc#1238654).
  • CVE-2022-49331: nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling (bsc#1237813).
  • CVE-2022-49344: af_unix: Fix a data-race in unix_dgram_peer_wake_me() (bsc#1237988).
  • CVE-2022-49367: net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register (bsc#1238447).
  • CVE-2022-49370: firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle (bsc#1238467).
  • CVE-2022-49372: tcp: tcp_rtx_synack() can be called from process context (bsc#1238251).
  • CVE-2022-49388: ubi: ubi_create_volume: Fix use-after-free when volume creation failed (bsc#1237934).
  • CVE-2022-49395: um: Fix out-of-bounds read in LDT setup (bsc#1237953).
  • CVE-2022-49397: phy: qcom-qmp: fix struct clk leak on probe errors (bsc#1237823).
  • CVE-2022-49404: RDMA/hfi1: Fix potential integer multiplication overflow errors (bsc#1238430).
  • CVE-2022-49416: wifi: mac80211: fix use-after-free in chanctx code (bsc#1238293).
  • CVE-2022-49433: RDMA/hfi1: Prevent use of lock before it is initialized (bsc#1238268).
  • CVE-2022-49472: net: phy: micrel: Allow probing without .driver_data (bsc#1238951).
  • CVE-2022-49488: drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock (bsc#1238600).
  • CVE-2022-49495: drm/msm/hdmi: check return value after calling platform_get_resource_byname() (bsc#1237932).
  • CVE-2022-49497: net: remove two BUG() from skb_checksum_help() (bsc#1238946).
  • CVE-2022-49505: NFC: NULL out the dev->rfkill to prevent UAF (bsc#1238615).
  • CVE-2022-49516: ice: always check VF VSI pointer values (bsc#1238953).
  • CVE-2022-49519: ath10k: skip ath10k_halt during suspend for driver state RESTARTING (bsc#1238943).
  • CVE-2022-49524: media: pci: cx23885: Fix the error handling in cx23885_initdev() (bsc#1238949).
  • CVE-2022-49530: drm/amd/pm: fix double free in si_parse_power_table() (bsc#1238944).
  • CVE-2022-49538: ALSA: jack: Fix mutex call in snd_jack_report() (bsc#1238843).
  • CVE-2022-49544: ipw2x00: Fix potential NULL dereference in libipw_xmit() (bsc#1238721).
  • CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238729). -…
Record
SUSE-SU-2025:1293-1
Updated
2026-11-02
OSVSUSE-SU-2026:0385-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47633: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (bsc#1237768).
  • CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238729).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
  • CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073).
  • CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
Record
SUSE-SU-2026:0385-1
Updated
2026-11-02
OSVUSN-5791-1 No score

linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

It was discovered that a race condition existed in the Android Binder IPC subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-20421)

David Leadbeater discovered that the netfilter IRC protocol tracking implementation in the Linux Kernel incorrectly handled certain message payloads in some situations. A remote attacker could possibly use this to cause a denial of service or bypass firewall filtering. (CVE-2022-2663)

It was discovered that the Intel 740 frame buffer driver in the Linux kernel contained a divide by zero vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3061)

It was discovered that the sound subsystem in the Linux kernel contained a race condition in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3303)

Gwnaun Jung discovered that the SFB packet scheduling implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3586)

It was discovered that the NILFS2 file system implementation in the Linux kernel did not properly deallocate memory in certain error conditions. An attacker could use this to cause a denial of service (memory exhaustion). (CVE-2022-3646)

Hyunwoo Kim discovered that an integer overflow vulnerability existed in the PXA3xx graphics driver in the Linux kernel. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-39842)

It was discovered that a race condition existed in the EFI capsule loader driver in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-40307)

Zheng Wang and Zhuorao Yang discovered that the RealTek RTL8712U wireless driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-4095)

It was discovered that the USB monitoring (usbmon) component in the Linux kernel did not properly set permissions on memory mapped in to user space processes. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-43750)

Jann Horn discovered a race condition existed in the Linux kernel when unmapping VMAs in certain situations, resulting in possible use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-39188)

Record
USN-5791-1
Updated
2026-11-02
OSVUSN-5791-2 No score

linux-azure vulnerabilities

It was discovered that a race condition existed in the Android Binder IPC subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-20421)

David Leadbeater discovered that the netfilter IRC protocol tracking implementation in the Linux Kernel incorrectly handled certain message payloads in some situations. A remote attacker could possibly use this to cause a denial of service or bypass firewall filtering. (CVE-2022-2663)

It was discovered that the Intel 740 frame buffer driver in the Linux kernel contained a divide by zero vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3061)

It was discovered that the sound subsystem in the Linux kernel contained a race condition in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3303)

Gwnaun Jung discovered that the SFB packet scheduling implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3586)

It was discovered that the NILFS2 file system implementation in the Linux kernel did not properly deallocate memory in certain error conditions. An attacker could use this to cause a denial of service (memory exhaustion). (CVE-2022-3646)

Hyunwoo Kim discovered that an integer overflow vulnerability existed in the PXA3xx graphics driver in the Linux kernel. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-39842)

It was discovered that a race condition existed in the EFI capsule loader driver in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-40307)

Zheng Wang and Zhuorao Yang discovered that the RealTek RTL8712U wireless driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-4095)

It was discovered that the USB monitoring (usbmon) component in the Linux kernel did not properly set permissions on memory mapped in to user space processes. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-43750)

Jann Horn discovered a race condition existed in the Linux kernel when unmapping VMAs in certain situations, resulting in possible use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-39188)

Record
USN-5791-2
Updated
2026-11-02
OSVUSN-5791-3 No score

linux-azure-5.4, linux-azure-fde vulnerabilities

It was discovered that a race condition existed in the Android Binder IPC subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-20421)

David Leadbeater discovered that the netfilter IRC protocol tracking implementation in the Linux Kernel incorrectly handled certain message payloads in some situations. A remote attacker could possibly use this to cause a denial of service or bypass firewall filtering. (CVE-2022-2663)

It was discovered that the Intel 740 frame buffer driver in the Linux kernel contained a divide by zero vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3061)

It was discovered that the sound subsystem in the Linux kernel contained a race condition in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3303)

Gwnaun Jung discovered that the SFB packet scheduling implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3586)

It was discovered that the NILFS2 file system implementation in the Linux kernel did not properly deallocate memory in certain error conditions. An attacker could use this to cause a denial of service (memory exhaustion). (CVE-2022-3646)

Hyunwoo Kim discovered that an integer overflow vulnerability existed in the PXA3xx graphics driver in the Linux kernel. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-39842)

It was discovered that a race condition existed in the EFI capsule loader driver in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-40307)

Zheng Wang and Zhuorao Yang discovered that the RealTek RTL8712U wireless driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-4095)

It was discovered that the USB monitoring (usbmon) component in the Linux kernel did not properly set permissions on memory mapped in to user space processes. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-43750)

Jann Horn discovered a race condition existed in the Linux kernel when unmapping VMAs in certain situations, resulting in possible use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-39188)

Record
USN-5791-3
Updated
2026-11-02
OSVUSN-5792-1 No score

linux, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-kvm, linux-lowlatency, linux-oracle, linux-raspi, vulnerabilities

Mingwei Zhang discovered that the KVM implementation for AMD processors in the Linux kernel did not properly handle cache coherency with Secure Encrypted Virtualization (SEV). A local attacker could possibly use this to cause a denial of service (host system crash). (CVE-2022-0171)

It was discovered that a race condition existed in the Android Binder IPC subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-20421)

David Leadbeater discovered that the netfilter IRC protocol tracking implementation in the Linux Kernel incorrectly handled certain message payloads in some situations. A remote attacker could possibly use this to cause a denial of service or bypass firewall filtering. (CVE-2022-2663)

It was discovered that the Intel 740 frame buffer driver in the Linux kernel contained a divide by zero vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3061)

It was discovered that the sound subsystem in the Linux kernel contained a race condition in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3303)

Gwnaun Jung discovered that the SFB packet scheduling implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3586)

It was discovered that the NILFS2 file system implementation in the Linux kernel did not properly deallocate memory in certain error conditions. An attacker could use this to cause a denial of service (memory exhaustion). (CVE-2022-3646)

Khalid Masum discovered that the NILFS2 file system implementation in the Linux kernel did not properly handle certain error conditions, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2022-3649)

Jann Horn discovered a race condition existed in the Linux kernel when unmapping VMAs in certain situations, resulting in possible use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-39188)

Hyunwoo Kim discovered that an integer overflow vulnerability existed in the PXA3xx graphics driver in the Linux kernel. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-39842)

It was discovered that a race condition existed in the EFI capsule loader driver in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-40307)

Zheng Wang and Zhuorao Yang discovered that the RealTek RTL8712U wireless driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-4095)

It was discovered that the USB monitoring (usbmon) component in the Linux kernel did not properly set permissions on memory mapped in to user space processes. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-43750)

Record
USN-5792-1
Updated
2026-11-02
OSVUSN-5792-2 No score

linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-azure-fde vulnerabilities

Mingwei Zhang discovered that the KVM implementation for AMD processors in the Linux kernel did not properly handle cache coherency with Secure Encrypted Virtualization (SEV). A local attacker could possibly use this to cause a denial of service (host system crash). (CVE-2022-0171)

It was discovered that a race condition existed in the Android Binder IPC subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-20421)

David Leadbeater discovered that the netfilter IRC protocol tracking implementation in the Linux Kernel incorrectly handled certain message payloads in some situations. A remote attacker could possibly use this to cause a denial of service or bypass firewall filtering. (CVE-2022-2663)

It was discovered that the Intel 740 frame buffer driver in the Linux kernel contained a divide by zero vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3061)

It was discovered that the sound subsystem in the Linux kernel contained a race condition in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3303)

Gwnaun Jung discovered that the SFB packet scheduling implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3586)

It was discovered that the NILFS2 file system implementation in the Linux kernel did not properly deallocate memory in certain error conditions. An attacker could use this to cause a denial of service (memory exhaustion). (CVE-2022-3646)

Khalid Masum discovered that the NILFS2 file system implementation in the Linux kernel did not properly handle certain error conditions, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2022-3649)

Jann Horn discovered a race condition existed in the Linux kernel when unmapping VMAs in certain situations, resulting in possible use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-39188)

Hyunwoo Kim discovered that an integer overflow vulnerability existed in the PXA3xx graphics driver in the Linux kernel. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-39842)

It was discovered that a race condition existed in the EFI capsule loader driver in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-40307)

Zheng Wang and Zhuorao Yang discovered that the RealTek RTL8712U wireless driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-4095)

It was discovered that the USB monitoring (usbmon) component in the Linux kernel did not properly set permissions on memory mapped in to user space processes. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-43750)

Record
USN-5792-2
Updated
2026-11-02
OSVUSN-5815-1 No score

linux-bluefield vulnerabilities

It was discovered that a race condition existed in the Android Binder IPC subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-20421)

David Leadbeater discovered that the netfilter IRC protocol tracking implementation in the Linux Kernel incorrectly handled certain message payloads in some situations. A remote attacker could possibly use this to cause a denial of service or bypass firewall filtering. (CVE-2022-2663)

It was discovered that the Intel 740 frame buffer driver in the Linux kernel contained a divide by zero vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3061)

It was discovered that the sound subsystem in the Linux kernel contained a race condition in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3303)

Gwnaun Jung discovered that the SFB packet scheduling implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3586)

It was discovered that the NILFS2 file system implementation in the Linux kernel did not properly deallocate memory in certain error conditions. An attacker could use this to cause a denial of service (memory exhaustion). (CVE-2022-3646)

Hyunwoo Kim discovered that an integer overflow vulnerability existed in the PXA3xx graphics driver in the Linux kernel. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-39842)

It was discovered that a race condition existed in the EFI capsule loader driver in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-40307)

Zheng Wang and Zhuorao Yang discovered that the RealTek RTL8712U wireless driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-4095)

It was discovered that the USB monitoring (usbmon) component in the Linux kernel did not properly set permissions on memory mapped in to user space processes. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-43750)

Jann Horn discovered a race condition existed in the Linux kernel when unmapping VMAs in certain situations, resulting in possible use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-39188)

Record
USN-5815-1
Updated
2026-11-02
OSVUSN-5877-1 No score

linux-gke-5.15 vulnerabilities

Kyle Zeng discovered that the sysctl implementation in the Linux kernel contained a stack-based buffer overflow. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-4378)

Tamás Koczka discovered that the Bluetooth L2CAP handshake implementation in the Linux kernel contained multiple use-after-free vulnerabilities. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-42896)

Mingwei Zhang discovered that the KVM implementation for AMD processors in the Linux kernel did not properly handle cache coherency with Secure Encrypted Virtualization (SEV). A local attacker could possibly use this to cause a denial of service (host system crash). (CVE-2022-0171)

It was discovered that a race condition existed in the Android Binder IPC subsystem in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-20421)

David Leadbeater discovered that the netfilter IRC protocol tracking implementation in the Linux Kernel incorrectly handled certain message payloads in some situations. A remote attacker could possibly use this to cause a denial of service or bypass firewall filtering. (CVE-2022-2663)

It was discovered that the Intel 740 frame buffer driver in the Linux kernel contained a divide by zero vulnerability. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3061)

It was discovered that the sound subsystem in the Linux kernel contained a race condition in some situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-3303)

It was discovered that a memory leak existed in the Unix domain socket implementation of the Linux kernel. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2022-3543)

Gwnaun Jung discovered that the SFB packet scheduling implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3586)

It was discovered that the Bluetooth HCI implementation in the Linux kernel did not properly deallocate memory in some situations. An attacker could possibly use this cause a denial of service (memory exhaustion). (CVE-2022-3619)

It was discovered that the hugetlb implementation in the Linux kernel contained a race condition in some situations. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information (kernel memory). (CVE-2022-3623)

It was discovered that the Broadcom FullMAC USB WiFi driver in the Linux kernel did not properly perform bounds checking in some situations. A physically proximate attacker could use this to craft a malicious USB device that when inserted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3628)

It was discovered that a use-after-free vulnerability existed in the Bluetooth stack in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2022-3640)

It was discovered that the Xen netback driver in the Linux kernel did not properly handle packets structured in certain ways. An attacker in a guest VM could possibly use this to cause a denial of service (host NIC availability). (CVE-2022-3643)

It was discovered that the NILFS2 file system implementation in the Linux kernel did not properly deallocate memory in certain error conditions. An attacker could use this to cause a denial of service (memory exhaustion). (CVE-2022-3646)

Khalid Masum discovered that the NILFS2 file system implementation in the Linux kernel did not properly handle certain error conditions, leading to a use-after-free vulnerability. A local…

Record
USN-5877-1
Updated
2026-11-02
OSVUSN-6001-1 No score

linux-aws vulnerabilities

Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service (connection termination) or inject forged data. (CVE-2020-36516)

Ke Sun, Alyssa Milburn, Henrique Kawakami, Emma Benoit, Igor Chervatyuk, Lisa Aichele, and Thais Moreira Hamasaki discovered that the Spectre Variant 2 mitigations for AMD processors on Linux were insufficient in some situations. A local attacker could possibly use this to expose sensitive information. (CVE-2021-26401)

Jürgen Groß discovered that the Xen subsystem within the Linux kernel did not adequately limit the number of events driver domains (unprivileged PV backends) could send to other guest VMs. An attacker in a driver domain could use this to cause a denial of service in other guest VMs. (CVE-2021-28712, CVE-2021-28713)

Wolfgang Frisch discovered that the ext4 file system implementation in the Linux kernel contained an integer overflow when handling metadata inode extents. An attacker could use this to construct a malicious ext4 file system image that, when mounted, could cause a denial of service (system crash). (CVE-2021-3428)

It was discovered that the IEEE 802.15.4 wireless network subsystem in the Linux kernel did not properly handle certain error conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2021-3659)

It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-3669)

Alois Wohlschlager discovered that the overlay file system in the Linux kernel did not restrict private clones in some situations. An attacker could use this to expose sensitive information. (CVE-2021-3732)

It was discovered that the SCTP protocol implementation in the Linux kernel did not properly verify VTAGs in some situations. A remote attacker could possibly use this to cause a denial of service (connection disassociation). (CVE-2021-3772)

It was discovered that the btrfs file system implementation in the Linux kernel did not properly handle locking in certain error conditions. A local attacker could use this to cause a denial of service (kernel deadlock). (CVE-2021-4149)

Jann Horn discovered that the socket subsystem in the Linux kernel contained a race condition when handling listen() and connect() operations, leading to a read-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2021-4203)

It was discovered that the file system quotas implementation in the Linux kernel did not properly validate the quota block number. An attacker could use this to construct a malicious file system image that, when mounted and operated on, could cause a denial of service (system crash). (CVE-2021-45868)

Zhihua Yao discovered that the MOXART SD/MMC driver in the Linux kernel did not properly handle device removal, leading to a use-after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-0487)

It was discovered that the block layer subsystem in the Linux kernel did not properly initialize memory in some situations. A privileged local attacker could use this to expose sensitive information (kernel memory). (CVE-2022-0494)

It was discovered that the UDF file system implementation in the Linux kernel could attempt to dereference a null pointer in some situations. An attacker could use this to construct a malicious UDF image that, when mounted and operated on, could cause a denial of service (system crash). (CVE-2022-0617)

David Bouman discovered that the netfilter subsystem in the Linux kernel did not initialize memory in some…

Record
USN-6001-1
Updated
2026-11-02
OSVUSN-6013-1 No score

linux-aws vulnerabilities

Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service (connection termination) or inject forged data. (CVE-2020-36516)

Ke Sun, Alyssa Milburn, Henrique Kawakami, Emma Benoit, Igor Chervatyuk, Lisa Aichele, and Thais Moreira Hamasaki discovered that the Spectre Variant 2 mitigations for AMD processors on Linux were insufficient in some situations. A local attacker could possibly use this to expose sensitive information. (CVE-2021-26401)

Jürgen Groß discovered that the Xen subsystem within the Linux kernel did not adequately limit the number of events driver domains (unprivileged PV backends) could send to other guest VMs. An attacker in a driver domain could use this to cause a denial of service in other guest VMs. (CVE-2021-28712, CVE-2021-28713)

Wolfgang Frisch discovered that the ext4 file system implementation in the Linux kernel contained an integer overflow when handling metadata inode extents. An attacker could use this to construct a malicious ext4 file system image that, when mounted, could cause a denial of service (system crash). (CVE-2021-3428)

It was discovered that the IEEE 802.15.4 wireless network subsystem in the Linux kernel did not properly handle certain error conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2021-3659)

It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-3669)

Alois Wohlschlager discovered that the overlay file system in the Linux kernel did not restrict private clones in some situations. An attacker could use this to expose sensitive information. (CVE-2021-3732)

It was discovered that the SCTP protocol implementation in the Linux kernel did not properly verify VTAGs in some situations. A remote attacker could possibly use this to cause a denial of service (connection disassociation). (CVE-2021-3772)

It was discovered that the btrfs file system implementation in the Linux kernel did not properly handle locking in certain error conditions. A local attacker could use this to cause a denial of service (kernel deadlock). (CVE-2021-4149)

Jann Horn discovered that the socket subsystem in the Linux kernel contained a race condition when handling listen() and connect() operations, leading to a read-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2021-4203)

It was discovered that the file system quotas implementation in the Linux kernel did not properly validate the quota block number. An attacker could use this to construct a malicious file system image that, when mounted and operated on, could cause a denial of service (system crash). (CVE-2021-45868)

Zhihua Yao discovered that the MOXART SD/MMC driver in the Linux kernel did not properly handle device removal, leading to a use-after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-0487)

It was discovered that the block layer subsystem in the Linux kernel did not properly initialize memory in some situations. A privileged local attacker could use this to expose sensitive information (kernel memory). (CVE-2022-0494)

It was discovered that the UDF file system implementation in the Linux kernel could attempt to dereference a null pointer in some situations. An attacker could use this to construct a malicious UDF image that, when mounted and operated on, could cause a denial of service (system crash). (CVE-2022-0617)

David Bouman discovered that the netfilter subsystem in the Linux kernel did not initialize memory in some…

Record
USN-6013-1
Updated
2026-11-02
OSVUSN-6014-1 No score

linux, linux-kvm, linux-lts-xenial vulnerabilities

Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service (connection termination) or inject forged data. (CVE-2020-36516)

Ke Sun, Alyssa Milburn, Henrique Kawakami, Emma Benoit, Igor Chervatyuk, Lisa Aichele, and Thais Moreira Hamasaki discovered that the Spectre Variant 2 mitigations for AMD processors on Linux were insufficient in some situations. A local attacker could possibly use this to expose sensitive information. (CVE-2021-26401)

Jürgen Groß discovered that the Xen subsystem within the Linux kernel did not adequately limit the number of events driver domains (unprivileged PV backends) could send to other guest VMs. An attacker in a driver domain could use this to cause a denial of service in other guest VMs. (CVE-2021-28711, CVE-2021-28712, CVE-2021-28713)

Wolfgang Frisch discovered that the ext4 file system implementation in the Linux kernel contained an integer overflow when handling metadata inode extents. An attacker could use this to construct a malicious ext4 file system image that, when mounted, could cause a denial of service (system crash). (CVE-2021-3428)

It was discovered that the IEEE 802.15.4 wireless network subsystem in the Linux kernel did not properly handle certain error conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2021-3659)

It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-3669)

Alois Wohlschlager discovered that the overlay file system in the Linux kernel did not restrict private clones in some situations. An attacker could use this to expose sensitive information. (CVE-2021-3732)

It was discovered that the SCTP protocol implementation in the Linux kernel did not properly verify VTAGs in some situations. A remote attacker could possibly use this to cause a denial of service (connection disassociation). (CVE-2021-3772)

It was discovered that the btrfs file system implementation in the Linux kernel did not properly handle locking in certain error conditions. A local attacker could use this to cause a denial of service (kernel deadlock). (CVE-2021-4149)

Jann Horn discovered that the socket subsystem in the Linux kernel contained a race condition when handling listen() and connect() operations, leading to a read-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2021-4203)

It was discovered that the file system quotas implementation in the Linux kernel did not properly validate the quota block number. An attacker could use this to construct a malicious file system image that, when mounted and operated on, could cause a denial of service (system crash). (CVE-2021-45868)

Zhihua Yao discovered that the MOXART SD/MMC driver in the Linux kernel did not properly handle device removal, leading to a use-after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-0487)

It was discovered that the block layer subsystem in the Linux kernel did not properly initialize memory in some situations. A privileged local attacker could use this to expose sensitive information (kernel memory). (CVE-2022-0494)

It was discovered that the UDF file system implementation in the Linux kernel could attempt to dereference a null pointer in some situations. An attacker could use this to construct a malicious UDF image that, when mounted and operated on, could cause a denial of service (system crash). (CVE-2022-0617)

David Bouman discovered that the netfilter subsystem in the Linux kernel did not initialize memory in…

Record
USN-6014-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Azure Linux:2
 before 5.15.70.1-1
5.15.70.1-1
linux-buildinfo-4.4.0-238-tuxcare.els9-generic
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-buildinfo-4.4.0-238-tuxcare.els9-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-cloud-tools-4.4.0-238-tuxcare.els9
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-cloud-tools-4.4.0-238-tuxcare.els9-generic
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-cloud-tools-4.4.0-238-tuxcare.els9-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-cloud-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-doc
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-headers-4.4.0-238-tuxcare.els9
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-headers-4.4.0-238-tuxcare.els9-generic
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
Show 290 moreShow less
Affected packages
PackageAffectedFixed
linux-headers-4.4.0-238-tuxcare.els9-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-image-unsigned-4.4.0-238-tuxcare.els9-generic
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-image-unsigned-4.4.0-238-tuxcare.els9-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-libc-dev
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-modules-4.4.0-238-tuxcare.els9-generic
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-modules-4.4.0-238-tuxcare.els9-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-modules-extra-4.4.0-238-tuxcare.els9-generic
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-source-4.4.0
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-tools-4.4.0-238-tuxcare.els9
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-tools-4.4.0-238-tuxcare.els9-generic
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-tools-4.4.0-238-tuxcare.els9-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-tools-host
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0-238.272
4.4.0-238.272
linux-cloud-tools-generic
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0.238.272
4.4.0.238.272
linux-cloud-tools-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0.238.272
4.4.0.238.272
linux-crashdump
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0.238.272
4.4.0.238.272
linux-generic
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0.238.272
4.4.0.238.272
linux-headers-generic
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0.238.272
4.4.0.238.272
linux-headers-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0.238.272
4.4.0.238.272
linux-image-generic
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0.238.272
4.4.0.238.272
linux-image-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0.238.272
4.4.0.238.272
linux-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0.238.272
4.4.0.238.272
linux-source
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0.238.272
4.4.0.238.272
linux-tools-generic
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0.238.272
4.4.0.238.272
linux-tools-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 53 CVEs
 before 4.4.0.238.272
4.4.0.238.272
linux-buildinfo-4.15.0-214-tuxcare.els2-generic
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-buildinfo-4.15.0-214-tuxcare.els2-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-cloud-tools-4.15.0-214-tuxcare.els2
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-cloud-tools-4.15.0-214-tuxcare.els2-generic
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-cloud-tools-4.15.0-214-tuxcare.els2-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-cloud-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-cloud-tools-generic
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0.214.225
4.15.0.214.225
linux-cloud-tools-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0.214.225
4.15.0.214.225
linux-crashdump
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0.214.225
4.15.0.214.225
linux-doc
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-generic
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0.214.225
4.15.0.214.225
linux-headers-4.15.0-214-tuxcare.els2
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-headers-4.15.0-214-tuxcare.els2-generic
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-headers-4.15.0-214-tuxcare.els2-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-headers-generic
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0.214.225
4.15.0.214.225
linux-headers-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0.214.225
4.15.0.214.225
linux-image-generic
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0.214.225
4.15.0.214.225
linux-image-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0.214.225
4.15.0.214.225
linux-image-unsigned-4.15.0-214-tuxcare.els2-generic
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-image-unsigned-4.15.0-214-tuxcare.els2-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-libc-dev
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0.214.225
4.15.0.214.225
linux-modules-4.15.0-214-tuxcare.els2-generic
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-modules-4.15.0-214-tuxcare.els2-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-modules-extra-4.15.0-214-tuxcare.els2-generic
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-source
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0.214.225
4.15.0.214.225
linux-source-4.15.0
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-tools-4.15.0-214-tuxcare.els2
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-tools-4.15.0-214-tuxcare.els2-generic
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-tools-4.15.0-214-tuxcare.els2-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-tools-generic
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0.214.225
4.15.0.214.225
linux-tools-host
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0-214.225
4.15.0-214.225
linux-tools-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 17 CVEs
 before 4.15.0.214.225
4.15.0.214.225
linux
Debian:12
 before 5.19.11-1
5.19.11-1
linux
Debian:13
 before 5.19.11-1
5.19.11-1
linux
Debian:14
 before 5.19.11-1
5.19.11-1
linux-5.10
Debian:10
From an advisory covering 33 CVEs
 before 5.10.149-2~deb10u1, plus listed versions
5.10.136-1~deb10u15.10.136-1~deb10u25.10.136-1~deb10u3
5.10.149-2~deb10u1
linux
Debian:11
From an advisory covering 17 CVEs
 before 5.10.149-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 15 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.149-1
kernel
Mageia:8
From an advisory covering 15 CVEs
 before 5.15.74-1.mga8
5.15.74-1.mga8
kmod-virtualbox
Mageia:8
From an advisory covering 15 CVEs
 before 6.1.38-1.6.mga8
6.1.38-1.6.mga8
kmod-xtables-addons
Mageia:8
From an advisory covering 15 CVEs
 before 3.21-1.6.mga8
3.21-1.6.mga8
kernel-linus
Mageia:8
From an advisory covering 20 CVEs
 before 5.15.74-1.mga8
5.15.74-1.mga8
kernel
openEuler:20.03-LTS-SP3
From an advisory covering 4 CVEs
 before 4.19.90-2210.1.0.0171.oe1
4.19.90-2210.1.0.0171.oe1
kernel
openEuler:20.03-LTS-SP1
From an advisory covering 4 CVEs
 before 4.19.90-2210.1.0.0171.oe1
4.19.90-2210.1.0.0171.oe1
kernel
openEuler:22.03-LTS
From an advisory covering 12 CVEs
 before 5.10.0-60.61.0.88.oe2203
5.10.0-60.61.0.88.oe2203
kernel-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-16.112.1
4.12.14-16.112.1
kernel-source-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-16.112.1
4.12.14-16.112.1
kernel-syms-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-16.112.1
4.12.14-16.112.1
kernel-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-16.112.1
4.12.14-16.112.1
kernel-source-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-16.112.1
4.12.14-16.112.1
kernel-syms-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-16.112.1
4.12.14-16.112.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 9 CVEs
 before 5.14.21-150400.14.16.1
5.14.21-150400.14.16.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 9 CVEs
 before 5.14.21-150400.14.16.1
5.14.21-150400.14.16.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP4
From an advisory covering 9 CVEs
 before 5.14.21-150400.14.16.1
5.14.21-150400.14.16.1
kernel-azure
openSUSE:Leap 15.4
From an advisory covering 9 CVEs
 before 5.14.21-150400.14.16.1
5.14.21-150400.14.16.1
kernel-source-azure
openSUSE:Leap 15.4
From an advisory covering 9 CVEs
 before 5.14.21-150400.14.16.1
5.14.21-150400.14.16.1
kernel-syms-azure
openSUSE:Leap 15.4
From an advisory covering 9 CVEs
 before 5.14.21-150400.14.16.1
5.14.21-150400.14.16.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.136.1
4.12.14-122.136.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.136.1
4.12.14-122.136.1
kgraft-patch-SLE12-SP5_Update_36
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 8 CVEs
 before 1-8.3.1
1-8.3.1
kernel-docs
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.136.1
4.12.14-122.136.1
kernel-obs-build
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.136.1
4.12.14-122.136.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.136.1
4.12.14-122.136.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.136.1
4.12.14-122.136.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.136.1
4.12.14-122.136.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.136.1
4.12.14-122.136.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.136.1
4.12.14-122.136.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.136.1
4.12.14-122.136.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 8 CVEs
 before 4.12.14-122.136.1
4.12.14-122.136.1
kernel-default
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 4 CVEs
 before 4.4.180-94.177.1
4.4.180-94.177.1
kernel-source
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 4 CVEs
 before 4.4.180-94.177.1
4.4.180-94.177.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 4 CVEs
 before 4.4.180-94.177.1
4.4.180-94.177.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP3
From an advisory covering 26 CVEs
 before 5.3.18-150300.38.80.1
5.3.18-150300.38.80.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP3
From an advisory covering 26 CVEs
 before 5.3.18-150300.38.80.1
5.3.18-150300.38.80.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP3
From an advisory covering 26 CVEs
 before 5.3.18-150300.38.80.1
5.3.18-150300.38.80.1
kernel-azure
openSUSE:Leap 15.3
From an advisory covering 26 CVEs
 before 5.3.18-150300.38.80.1
5.3.18-150300.38.80.1
kernel-source-azure
openSUSE:Leap 15.3
From an advisory covering 26 CVEs
 before 5.3.18-150300.38.80.1
5.3.18-150300.38.80.1
kernel-syms-azure
openSUSE:Leap 15.3
From an advisory covering 26 CVEs
 before 5.3.18-150300.38.80.1
5.3.18-150300.38.80.1
kernel-default
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-livepatch-SLE15_Update_34
SUSE:Linux Enterprise Live Patching 15
From an advisory covering 5 CVEs
 before 1-150000.1.3.1
1-150000.1.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-vanilla
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-vanilla
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-default
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-docs
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-obs-build
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-source
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-syms
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-vanilla
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-vanilla
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 5 CVEs
 before 4.12.14-150000.150.104.1
4.12.14-150000.150.104.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-livepatch-SLE15-SP1_Update_35
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 7 CVEs
 before 1-150100.3.3.1
1-150100.3.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-default
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-source
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-default
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-source
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-default
SUSE:Enterprise Storage 6
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-debug
openSUSE:Leap 15.3
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-default
openSUSE:Leap 15.3
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-kvmsmall
openSUSE:Leap 15.3
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-vanilla
openSUSE:Leap 15.3
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-zfcpdump
openSUSE:Leap 15.3
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-debug
openSUSE:Leap 15.4
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-default
openSUSE:Leap 15.4
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-kvmsmall
openSUSE:Leap 15.4
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-vanilla
openSUSE:Leap 15.4
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-zfcpdump
openSUSE:Leap 15.4
From an advisory covering 7 CVEs
 before 4.12.14-150100.197.126.1
4.12.14-150100.197.126.1
kernel-default
openSUSE:Leap Micro 5.2
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1
5.3.18-150300.59.98.1
kernel-default-base
openSUSE:Leap Micro 5.2
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1.150300.18.56.3
5.3.18-150300.59.98.1.150300.18.56.3
dtb-aarch64
openSUSE:Leap 15.3
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1
5.3.18-150300.59.98.1
kernel-64kb
openSUSE:Leap 15.3
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1
5.3.18-150300.59.98.1
kernel-debug
openSUSE:Leap 15.3
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1
5.3.18-150300.59.98.1
kernel-default
openSUSE:Leap 15.3
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1
5.3.18-150300.59.98.1
kernel-default-base
openSUSE:Leap 15.3
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1.150300.18.56.3
5.3.18-150300.59.98.1.150300.18.56.3
kernel-docs
openSUSE:Leap 15.3
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1
5.3.18-150300.59.98.1
kernel-kvmsmall
openSUSE:Leap 15.3
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1
5.3.18-150300.59.98.1
kernel-obs-build
openSUSE:Leap 15.3
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1
5.3.18-150300.59.98.1
kernel-obs-qa
openSUSE:Leap 15.3
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1
5.3.18-150300.59.98.1
kernel-preempt
openSUSE:Leap 15.3
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1
5.3.18-150300.59.98.1
kernel-source
openSUSE:Leap 15.3
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1
5.3.18-150300.59.98.1
kernel-syms
openSUSE:Leap 15.3
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1
5.3.18-150300.59.98.1
kernel-zfcpdump
openSUSE:Leap 15.3
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1
5.3.18-150300.59.98.1
dtb-aarch64
openSUSE:Leap 15.4
From an advisory covering 17 CVEs
 before 5.3.18-150300.59.98.1
5.3.18-150300.59.98.1
kernel-rt
openSUSE:Leap Micro 5.2
From an advisory covering 32 CVEs
 before 5.3.18-150300.106.1
5.3.18-150300.106.1
dtb-aarch64
openSUSE:Leap 15.4
From an advisory covering 15 CVEs
 before 5.14.21-150400.24.28.1
5.14.21-150400.24.28.1
kernel-64kb
openSUSE:Leap 15.4
From an advisory covering 15 CVEs
 before 5.14.21-150400.24.28.1
5.14.21-150400.24.28.1
kernel-debug
openSUSE:Leap 15.4
From an advisory covering 15 CVEs
 before 5.14.21-150400.24.28.1
5.14.21-150400.24.28.1
kernel-default
openSUSE:Leap 15.4
From an advisory covering 15 CVEs
 before 5.14.21-150400.24.28.1
5.14.21-150400.24.28.1
kernel-default-base
openSUSE:Leap 15.4
From an advisory covering 15 CVEs
 before 5.14.21-150400.24.28.1.150400.24.9.5
5.14.21-150400.24.28.1.150400.24.9.5
kernel-docs
openSUSE:Leap 15.4
From an advisory covering 15 CVEs
 before 5.14.21-150400.24.28.1
5.14.21-150400.24.28.1
kernel-kvmsmall
openSUSE:Leap 15.4
From an advisory covering 15 CVEs
 before 5.14.21-150400.24.28.1
5.14.21-150400.24.28.1
kernel-obs-build
openSUSE:Leap 15.4
From an advisory covering 15 CVEs
 before 5.14.21-150400.24.28.1
5.14.21-150400.24.28.1
kernel-obs-qa
openSUSE:Leap 15.4
From an advisory covering 15 CVEs
 before 5.14.21-150400.24.28.1
5.14.21-150400.24.28.1
kernel-source
openSUSE:Leap 15.4
From an advisory covering 15 CVEs
 before 5.14.21-150400.24.28.1
5.14.21-150400.24.28.1
kernel-syms
openSUSE:Leap 15.4
From an advisory covering 15 CVEs
 before 5.14.21-150400.24.28.1
5.14.21-150400.24.28.1
kernel-zfcpdump
openSUSE:Leap 15.4
From an advisory covering 15 CVEs
 before 5.14.21-150400.24.28.1
5.14.21-150400.24.28.1
kernel-rt
openSUSE:Leap 15.4
From an advisory covering 96 CVEs
 before 5.14.21-150400.15.5.1
5.14.21-150400.15.5.1
kernel-rt_debug
openSUSE:Leap 15.4
From an advisory covering 96 CVEs
 before 5.14.21-150400.15.5.1
5.14.21-150400.15.5.1
kernel-source-rt
openSUSE:Leap 15.4
From an advisory covering 96 CVEs
 before 5.14.21-150400.15.5.1
5.14.21-150400.15.5.1
kernel-syms-rt
openSUSE:Leap 15.4
From an advisory covering 96 CVEs
 before 5.14.21-150400.15.5.1
5.14.21-150400.15.5.1
linux-aws
Ubuntu:Pro:14.04:LTS
 before 4.4.0-1117.123, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
4.4.0-1117.123
linux-azure
Ubuntu:Pro:14.04:LTS
 before 4.15.0-1168.183~14.04.1, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
4.15.0-1168.183~14.04.1
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 before 4.4.0-239.273~14.04.1, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
4.4.0-239.273~14.04.1
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux
Ubuntu:Pro:16.04:LTS
 before 4.4.0-239.273, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-239.273
linux-aws
Ubuntu:Pro:16.04:LTS
 before 4.4.0-1155.170, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
4.4.0-1155.170
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1159.172~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1159.172~16.04.1
linux-azure
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1168.183~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1168.183~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1153.170~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1153.170~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-214.225~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-214.225~16.04.1
linux-kvm
Ubuntu:Pro:16.04:LTS
 before 4.4.0-1118.128, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
4.4.0-1118.128
linux-oracle
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1122.133~16.04.1, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
4.15.0-1122.133~16.04.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 before 4.4.0-1088.95, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
4.4.0-1088.95
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux-aws-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1093.102~18.04.2, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 44 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.2
5.4.0-1093.102~18.04.2
linux-azure-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1100.106~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 43 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.2
5.4.0-1100.106~18.04.1
linux-gcp-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1097.106~18.04.1, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
5.4.0-1097.106~18.04.1
linux-hwe-5.4
Ubuntu:18.04:LTS
 before 5.4.0-136.153~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-136.153~18.04.1
linux-ibm-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1041.46~18.04.1, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 15 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.2
5.4.0-1041.46~18.04.1
linux-oracle-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1091.100~18.04.1, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 44 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.2
5.4.0-1091.100~18.04.1
linux-raspi-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1078.89~18.04.1, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 40 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.2
5.4.0-1078.89~18.04.1
linux
Ubuntu:Pro:18.04:LTS
 before 4.15.0-214.225, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-214.225
linux-aws
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1159.172, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1159.172
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1168.183, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
4.15.0-1168.183
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1153.170, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
4.15.0-1153.170
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1143.148, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
4.15.0-1143.148
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1122.133, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
4.15.0-1122.133
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2098.104, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
4.15.0-2098.104
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2077.83, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
4.15.0-2077.83
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-1114.125, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
4.15.0-1114.125
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2061.66, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 28 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.65
4.15.0-2061.66
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:20.04:LTS
 before 5.4.0-136.153, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-136.153
linux-aws
Ubuntu:20.04:LTS
 before 5.4.0-1093.101, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
5.4.0-1093.101
linux-aws-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1027.31~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 4 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.2
5.15.0-1027.31~20.04.1
linux-azure
Ubuntu:20.04:LTS
 before 5.4.0-1100.106, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
5.4.0-1100.106
linux-azure-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1030.37~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 6 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.1
5.15.0-1030.37~20.04.1
linux-bluefield
Ubuntu:20.04:LTS
 before 5.4.0-1054.60, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 20 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.56
5.4.0-1054.60
linux-gcp
Ubuntu:20.04:LTS
 before 5.4.0-1097.106, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
5.4.0-1097.106
linux-gcp-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1027.34~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 5 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.1
5.15.0-1027.34~20.04.1
linux-gke
Ubuntu:20.04:LTS
 before 5.4.0-1091.98, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 33 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.97
5.4.0-1091.98
linux-gke-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1027.32~20.04.1, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.15.15.0-1020.25~20.04.15.15.0-1023.28~20.04.2
5.15.0-1027.32~20.04.1
linux-gkeop
Ubuntu:20.04:LTS
 before 5.4.0-1061.65, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 33 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.64
5.4.0-1061.65
linux-gkeop-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1012.16~20.04.1, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
5.15.0-1012.16~20.04.1
linux-hwe-5.15
Ubuntu:20.04:LTS
 before 5.15.0-57.63~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 4 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.1
5.15.0-57.63~20.04.1
linux-ibm
Ubuntu:20.04:LTS
 before 5.4.0-1041.46, plus listed versions
5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8
Show 22 moreShow less
5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.45
5.4.0-1041.46
linux-intel-iotg-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1023.28~20.04.1, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.1
5.15.0-1023.28~20.04.1
linux-iot
Ubuntu:20.04:LTS
 before 5.4.0-1010.12, plus listed versions
5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11
5.4.0-1010.12
linux-kvm
Ubuntu:20.04:LTS
 before 5.4.0-1083.89, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78
5.4.0-1083.89
linux-lowlatency-hwe-5.15
Ubuntu:20.04:LTS
 before 5.15.0-58.64~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 4 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.1
5.15.0-58.64~20.04.1
linux-oracle
Ubuntu:20.04:LTS
 before 5.4.0-1091.100, plus listed versions
5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1034.365.4.0-1035.385.4.0-1037.405.4.0-1038.415.4.0-1039.425.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1045.495.4.0-1046.505.4.0-1048.525.4.0-1049.535.4.0-1052.565.4.0-1053.575.4.0-1054.585.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1061.655.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1066.715.4.0-1067.725.4.0-1069.755.4.0-1070.765.4.0-1071.775.4.0-1073.795.4.0-1076.83
5.4.0-1091.100
linux-oracle-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1027.33~20.04.1, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
Show 4 moreShow less
5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.2
5.15.0-1027.33~20.04.1
linux-raspi
Ubuntu:20.04:LTS
 before 5.4.0-1078.89, plus listed versions
5.4.0-1007.75.4.0-1008.85.4.0-1011.115.4.0-1012.125.4.0-1013.13
Show 44 moreShow less
5.4.0-1015.155.4.0-1016.175.4.0-1018.205.4.0-1019.215.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1029.325.4.0-1030.335.4.0-1032.355.4.0-1033.365.4.0-1034.375.4.0-1035.385.4.0-1036.395.4.0-1038.415.4.0-1041.455.4.0-1042.465.4.0-1043.475.4.0-1044.485.4.0-1045.495.4.0-1046.505.4.0-1047.525.4.0-1048.535.4.0-1050.565.4.0-1052.585.4.0-1053.605.4.0-1055.625.4.0-1056.635.4.0-1058.655.4.0-1059.675.4.0-1060.685.4.0-1062.705.4.0-1065.755.4.0-1066.765.4.0-1068.785.4.0-1069.795.4.0-1070.805.4.0-1071.815.4.0-1073.845.4.0-1074.855.4.0-1077.88
5.4.0-1078.89
linux-riscv-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1027.31~20.04.1, plus listed versions
5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.2
5.15.0-1027.31~20.04.1
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known

History

History
RecordedChangedSources
affectedOSV
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-3303 is a medium vulnerability (CVSS 4.7) in Debian Linux, published September 27, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. Fixed in kernel 5.15.70.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 364 package rows, 1,038 versions, 2,023 references and the rest of 19 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 2 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open