Every CVE Search/ Get API key

CVE-2022-50231

crypto: arm64/poly1305 - fix a read out-of-bound

7.1 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

crypto: arm64/poly1305 - fix a read out-of-bound

A kasan error was reported during fuzzing:

BUG: KASAN: slab-out-of-bounds in neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] Read of size 4 at addr ffff0010e293f010 by task syz-executor.5/1646715 CPU: 4 PID: 1646715 Comm: syz-executor.5 Kdump: loaded Not tainted 5.10.0.aarch64 #1 Hardware name: Huawei TaiShan 2280 /BC11SPCD, BIOS 1.59 01/31/2019 Call trace: dump_backtrace+0x0/0x394 show_stack+0x34/0x4c arch/arm64/kernel/stacktrace.c:196 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x158/0x1e4 lib/dump_stack.c:118 print_address_description.constprop.0+0x68/0x204 mm/kasan/report.c:387 __kasan_report+0xe0/0x140 mm/kasan/report.c:547 kasan_report+0x44/0xe0 mm/kasan/report.c:564 check_memory_region_inline mm/kasan/generic.c:187 [inline] __asan_load4+0x94/0xd0 mm/kasan/generic.c:252 neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] neon_poly1305_do_update+0x6c/0x15c [poly1305_neon] neon_poly1305_update+0x9c/0x1c4 [poly1305_neon] crypto_shash_update crypto/shash.c:131 [inline] shash_finup_unaligned+0x84/0x15c crypto/shash.c:179 crypto_shash_finup+0x8c/0x140 crypto/shash.c:193 shash_digest_unaligned+0xb8/0xe4 crypto/shash.c:201 crypto_shash_digest+0xa4/0xfc crypto/shash.c:217 crypto_shash_tfm_digest+0xb4/0x150 crypto/shash.c:229 essiv_skcipher_setkey+0x164/0x200 [essiv] crypto_skcipher_setkey+0xb0/0x160 crypto/skcipher.c:612 skcipher_setkey+0x3c/0x50 crypto/algif_skcipher.c:305 alg_setkey+0x114/0x2a0 crypto/af_alg.c:220 alg_setsockopt+0x19c/0x210 crypto/af_alg.c:253 __sys_setsockopt+0x190/0x2e0 net/socket.c:2123 __do_sys_setsockopt net/socket.c:2134 [inline] __se_sys_setsockopt net/socket.c:2131 [inline] __arm64_sys_setsockopt+0x78/0x94 net/socket.c:2131 __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline] invoke_syscall+0x64/0x100 arch/arm64/kernel/syscall.c:48 el0_svc_common.constprop.0+0x220/0x230 arch/arm64/kernel/syscall.c:155 do_el0_svc+0xb4/0xd4 arch/arm64/kernel/syscall.c:217 el0_svc+0x24/0x3c arch/arm64/kernel/entry-common.c:353 el0_sync_handler+0x160/0x164 arch/arm64/kernel/entry-common.c:369 el0_sync+0x160/0x180 arch/arm64/kernel/entry.S:683

This error can be reproduced by the following code compiled as ko on a system with kasan enabled:

#include <linux/module.h> #include <linux/crypto.h> #include <crypto/hash.h> #include <crypto/poly1305.h>

char test_data[] = "\x00\x01\x02\x03\x04\x05\x06\x07" "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f" "\x10\x11\x12\x13\x14\x15\x16\x17" "\x18\x19\x1a\x1b\x1c\x1d\x1e";

int init(void) { struct crypto_shash *tfm = NULL; char *data = NULL, *out = NULL;

    tfm = crypto_alloc_shash("poly1305", 0, 0);
    data = kmalloc(POLY1305_KEY_SIZE - 1, GFP_KERNEL);
    out = kmalloc(POLY1305_DIGEST_SIZE, GFP_KERNEL);
    memcpy(data, test_data, POLY1305_KEY_SIZE - 1);
    crypto_shash_tfm_digest(tfm, data, POLY1305_KEY_SIZE - 1, out);

    kfree(data);
    kfree(out);
    return 0;

}

void deinit(void) { }

module_init(init) module_exit(deinit) MODULE_LICENSE("GPL");

The root cause of the bug sits in neon_poly1305_blocks. The logic neon_poly1305_blocks() performed is that if it was called with both s[] and r[] uninitialized, it will first try to initialize them with the data from the first "block" that it believed to be 32 bytes in length. First 16 bytes are used as the key and the next 16 bytes for s[]. This would lead to the aforementioned read out-of-bound. However, after calling poly1305_init_arch(), only 16 bytes were deducted from the input and s[] is initialized yet again with the following 16 bytes. The second initialization of s[] is certainly redundent which indicates that the first initialization should be for r[] only.

This patch fixes the issue by calling poly1305_init_arm64() instead o ---truncated---

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
High

Exploit likelihood

0.24%Up 0.2 points since Jun 18, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.1

crypto: arm64/poly1305 - fix a read out-of-bound

In the Linux kernel, the following vulnerability has been resolved:

crypto: arm64/poly1305 - fix a read out-of-bound

A kasan error was reported during fuzzing:

BUG: KASAN: slab-out-of-bounds in neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] Read of size 4 at addr ffff0010e293f010 by task syz-executor.5/1646715 CPU: 4 PID: 1646715 Comm: syz-executor.5 Kdump: loaded Not tainted 5.10.0.aarch64 #1 Hardware name: Huawei TaiShan 2280 /BC11SPCD, BIOS 1.59 01/31/2019 Call trace: dump_backtrace+0x0/0x394 show_stack+0x34/0x4c arch/arm64/kernel/stacktrace.c:196 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x158/0x1e4 lib/dump_stack.c:118 print_address_description.constprop.0+0x68/0x204 mm/kasan/report.c:387 __kasan_report+0xe0/0x140 mm/kasan/report.c:547 kasan_report+0x44/0xe0 mm/kasan/report.c:564 check_memory_region_inline mm/kasan/generic.c:187 [inline] __asan_load4+0x94/0xd0 mm/kasan/generic.c:252 neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] neon_poly1305_do_update+0x6c/0x15c [poly1305_neon] neon_poly1305_update+0x9c/0x1c4 [poly1305_neon] crypto_shash_update crypto/shash.c:131 [inline] shash_finup_unaligned+0x84/0x15c crypto/shash.c:179 crypto_shash_finup+0x8c/0x140 crypto/shash.c:193 shash_digest_unaligned+0xb8/0xe4 crypto/shash.c:201 crypto_shash_digest+0xa4/0xfc crypto/shash.c:217 crypto_shash_tfm_digest+0xb4/0x150 crypto/shash.c:229 essiv_skcipher_setkey+0x164/0x200 [essiv] crypto_skcipher_setkey+0xb0/0x160 crypto/skcipher.c:612 skcipher_setkey+0x3c/0x50 crypto/algif_skcipher.c:305 alg_setkey+0x114/0x2a0 crypto/af_alg.c:220 alg_setsockopt+0x19c/0x210 crypto/af_alg.c:253 __sys_setsockopt+0x190/0x2e0 net/socket.c:2123 __do_sys_setsockopt net/socket.c:2134 [inline] __se_sys_setsockopt net/socket.c:2131 [inline] __arm64_sys_setsockopt+0x78/0x94 net/socket.c:2131 __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline] invoke_syscall+0x64/0x100 arch/arm64/kernel/syscall.c:48 el0_svc_common.constprop.0+0x220/0x230 arch/arm64/kernel/syscall.c:155 do_el0_svc+0xb4/0xd4 arch/arm64/kernel/syscall.c:217 el0_svc+0x24/0x3c arch/arm64/kernel/entry-common.c:353 el0_sync_handler+0x160/0x164 arch/arm64/kernel/entry-common.c:369 el0_sync+0x160/0x180 arch/arm64/kernel/entry.S:683

This error can be reproduced by the following code compiled as ko on a system with kasan enabled:

#include <linux/module.h> #include <linux/crypto.h> #include <crypto/hash.h> #include <crypto/poly1305.h>

char test_data[] = "\x00\x01\x02\x03\x04\x05\x06\x07" "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f" "\x10\x11\x12\x13\x14\x15\x16\x17" "\x18\x19\x1a\x1b\x1c\x1d\x1e";

int init(void) { struct crypto_shash *tfm = NULL; char *data = NULL, *out = NULL;

    tfm = crypto_alloc_shash("poly1305", 0, 0);
    data = kmalloc(POLY1305_KEY_SIZE - 1, GFP_KERNEL);
    out = kmalloc(POLY1305_DIGEST_SIZE, GFP_KERNEL);
    memcpy(data, test_data, POLY1305_KEY_SIZE - 1);
    crypto_shash_tfm_digest(tfm, data, POLY1305_KEY_SIZE - 1, out);

    kfree(data);
    kfree(out);
    return 0;

}

void deinit(void) { }

module_init(init) module_exit(deinit) MODULE_LICENSE("GPL");

The root cause of the bug sits in neon_poly1305_blocks. The logic neon_poly1305_blocks() performed is that if it was called with both s[] and r[] uninitialized, it will first try to initialize them with the data from the first "block" that it believed to be 32 bytes in length. First 16 bytes are used as the key and the next 16 bytes for s[]. This would lead to the aforementioned read out-of-bound. However, after calling poly1305_init_arch(), only 16 bytes were deducted from the input and s[] is initialized yet again with the following 16 bytes. The second initialization of s[] is certainly redundent which indicates that the first initialization should be for r[] only.

This patch fixes the issue by calling poly1305_init_arm64() instead o ---truncated---

Record
CVE-2022-50231
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
EUVDEUVD-2022-55489 7.1

In the Linux kernel, the following vulnerability has been resolved:

crypto: arm64/poly1305 - fix a read out-of-bound

A kasan error was reported during fuzzing:

BUG: KASAN: slab-out-of-bounds in neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] Read of size 4 at addr ffff0010e293f010 by task syz-executor.5/1646715 CPU: 4 PID: 1646715 Comm: syz-executor.5 Kdump: loaded Not tainted 5.10.0.aarch64 #1 Hardware name: Huawei TaiShan 2280 /BC11SPCD, BIOS 1.59 01/31/2019 Call trace: dump_backtrace+0x0/0x394 show_stack+0x34/0x4c arch/arm64/kernel/stacktrace.c:196 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x158/0x1e4 lib/dump_stack.c:118 print_address_description.constprop.0+0x68/0x204 mm/kasan/report.c:387 __kasan_report+0xe0/0x140 mm/kasan/report.c:547 kasan_report+0x44/0xe0 mm/kasan/report.c:564 check_memory_region_inline mm/kasan/generic.c:187 [inline] __asan_load4+0x94/0xd0 mm/kasan/generic.c:252 neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] neon_poly1305_do_update+0x6c/0x15c [poly1305_neon] neon_poly1305_update+0x9c/0x1c4 [poly1305_neon] crypto_shash_update crypto/shash.c:131 [inline] shash_finup_unaligned+0x84/0x15c crypto/shash.c:179 crypto_shash_finup+0x8c/0x140 crypto/shash.c:193 shash_digest_unaligned+0xb8/0xe4 crypto/shash.c:201 crypto_shash_digest+0xa4/0xfc crypto/shash.c:217 crypto_shash_tfm_digest+0xb4/0x150 crypto/shash.c:229 essiv_skcipher_setkey+0x164/0x200 [essiv] crypto_skcipher_setkey+0xb0/0x160 crypto/skcipher.c:612 skcipher_setkey+0x3c/0x50 crypto/algif_skcipher.c:305 alg_setkey+0x114/0x2a0 crypto/af_alg.c:220 alg_setsockopt+0x19c/0x210 crypto/af_alg.c:253 __sys_setsockopt+0x190/0x2e0 net/socket.c:2123 __do_sys_setsockopt net/socket.c:2134 [inline] __se_sys_setsockopt net/socket.c:2131 [inline] __arm64_sys_setsockopt+0x78/0x94 net/socket.c:2131 __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline] invoke_syscall+0x64/0x100 arch/arm64/kernel/syscall.c:48 el0_svc_common.constprop.0+0x220/0x230 arch/arm64/kernel/syscall.c:155 do_el0_svc+0xb4/0xd4 arch/arm64/kernel/syscall.c:217 el0_svc+0x24/0x3c arch/arm64/kernel/entry-common.c:353 el0_sync_handler+0x160/0x164 arch/arm64/kernel/entry-common.c:369 el0_sync+0x160/0x180 arch/arm64/kernel/entry.S:683

This error can be reproduced by the following code compiled as ko on a system with kasan enabled:

#include <linux/module.h> #include <linux/crypto.h> #include <crypto/hash.h> #include <crypto/poly1305.h>

char test_data[] = "\x00\x01\x02\x03\x04\x05\x06\x07" "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f" "\x10\x11\x12\x13\x14\x15\x16\x17" "\x18\x19\x1a\x1b\x1c\x1d\x1e";

int init(void) { struct crypto_shash *tfm = NULL; char *data = NULL, *out = NULL;

    tfm = crypto_alloc_shash("poly1305", 0, 0);
    data = kmalloc(POLY1305_KEY_SIZE - 1, GFP_KERNEL);
    out = kmalloc(POLY1305_DIGEST_SIZE, GFP_KERNEL);
    memcpy(data, test_data, POLY1305_KEY_SIZE - 1);
    crypto_shash_tfm_digest(tfm, data, POLY1305_KEY_SIZE - 1, out);

    kfree(data);
    kfree(out);
    return 0;

}

void deinit(void) { }

module_init(init) module_exit(deinit) MODULE_LICENSE("GPL");

The root cause of the bug sits in neon_poly1305_blocks. The logic neon_poly1305_blocks() performed is that if it was called with both s[] and r[] uninitialized, it will first try to initialize them with the data from the first "block" that it believed to be 32 bytes in length. First 16 bytes are used as the key and the next 16 bytes for s[]. This would lead to the aforementioned read out-of-bound. However, after calling poly1305_init_arch(), only 16 bytes were deducted from the input and s[] is initialized yet again with the following 16 bytes. The second initialization of s[] is certainly redundent which indicates that the first initialization should be for r[] only.

This patch fixes the issue by calling poly1305_init_arm64() instead o ---truncated---

Record
EUVD-2022-55489
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-77mj-4rpp-qvxc 7.1

In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/poly1305 - fix...

In the Linux kernel, the following vulnerability has been resolved:

crypto: arm64/poly1305 - fix a read out-of-bound

A kasan error was reported during fuzzing:

BUG: KASAN: slab-out-of-bounds in neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] Read of size 4 at addr ffff0010e293f010 by task syz-executor.5/1646715 CPU: 4 PID: 1646715 Comm: syz-executor.5 Kdump: loaded Not tainted 5.10.0.aarch64 #1 Hardware name: Huawei TaiShan 2280 /BC11SPCD, BIOS 1.59 01/31/2019 Call trace: dump_backtrace+0x0/0x394 show_stack+0x34/0x4c arch/arm64/kernel/stacktrace.c:196 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x158/0x1e4 lib/dump_stack.c:118 print_address_description.constprop.0+0x68/0x204 mm/kasan/report.c:387 __kasan_report+0xe0/0x140 mm/kasan/report.c:547 kasan_report+0x44/0xe0 mm/kasan/report.c:564 check_memory_region_inline mm/kasan/generic.c:187 [inline] __asan_load4+0x94/0xd0 mm/kasan/generic.c:252 neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] neon_poly1305_do_update+0x6c/0x15c [poly1305_neon] neon_poly1305_update+0x9c/0x1c4 [poly1305_neon] crypto_shash_update crypto/shash.c:131 [inline] shash_finup_unaligned+0x84/0x15c crypto/shash.c:179 crypto_shash_finup+0x8c/0x140 crypto/shash.c:193 shash_digest_unaligned+0xb8/0xe4 crypto/shash.c:201 crypto_shash_digest+0xa4/0xfc crypto/shash.c:217 crypto_shash_tfm_digest+0xb4/0x150 crypto/shash.c:229 essiv_skcipher_setkey+0x164/0x200 [essiv] crypto_skcipher_setkey+0xb0/0x160 crypto/skcipher.c:612 skcipher_setkey+0x3c/0x50 crypto/algif_skcipher.c:305 alg_setkey+0x114/0x2a0 crypto/af_alg.c:220 alg_setsockopt+0x19c/0x210 crypto/af_alg.c:253 __sys_setsockopt+0x190/0x2e0 net/socket.c:2123 __do_sys_setsockopt net/socket.c:2134 [inline] __se_sys_setsockopt net/socket.c:2131 [inline] __arm64_sys_setsockopt+0x78/0x94 net/socket.c:2131 __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline] invoke_syscall+0x64/0x100 arch/arm64/kernel/syscall.c:48 el0_svc_common.constprop.0+0x220/0x230 arch/arm64/kernel/syscall.c:155 do_el0_svc+0xb4/0xd4 arch/arm64/kernel/syscall.c:217 el0_svc+0x24/0x3c arch/arm64/kernel/entry-common.c:353 el0_sync_handler+0x160/0x164 arch/arm64/kernel/entry-common.c:369 el0_sync+0x160/0x180 arch/arm64/kernel/entry.S:683

This error can be reproduced by the following code compiled as ko on a system with kasan enabled:

#include <linux/module.h> #include <linux/crypto.h> #include <crypto/hash.h> #include <crypto/poly1305.h>

char test_data[] = "\x00\x01\x02\x03\x04\x05\x06\x07" "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f" "\x10\x11\x12\x13\x14\x15\x16\x17" "\x18\x19\x1a\x1b\x1c\x1d\x1e";

int init(void) { struct crypto_shash *tfm = NULL; char *data = NULL, *out = NULL;

    tfm = crypto_alloc_shash("poly1305", 0, 0);
    data = kmalloc(POLY1305_KEY_SIZE - 1, GFP_KERNEL);
    out = kmalloc(POLY1305_DIGEST_SIZE, GFP_KERNEL);
    memcpy(data, test_data, POLY1305_KEY_SIZE - 1);
    crypto_shash_tfm_digest(tfm, data, POLY1305_KEY_SIZE - 1, out);

    kfree(data);
    kfree(out);
    return 0;

}

void deinit(void) { }

module_init(init) module_exit(deinit) MODULE_LICENSE("GPL");

The root cause of the bug sits in neon_poly1305_blocks. The logic neon_poly1305_blocks() performed is that if it was called with both s[] and r[] uninitialized, it will first try to initialize them with the data from the first "block" that it believed to be 32 bytes in length. First 16 bytes are used as the key and the next 16 bytes for s[]. This would lead to the aforementioned read out-of-bound. However, after calling poly1305_init_arch(), only 16 bytes were deducted from the input and s[] is initialized yet again with the following 16 bytes. The second initialization of s[] is certainly redundent which indicates that the first initialization should be for r[] only.

This patch fixes the issue by calling poly1305_init_arm64() instead o ---truncated---

Record
GHSA-77mj-4rpp-qvxc
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 7.1

In the Linux kernel, the following vulnerability has been resolved:

crypto: arm64/poly1305 - fix a read out-of-bound

A kasan error was reported during fuzzing:

BUG: KASAN: slab-out-of-bounds in neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] Read of size 4 at addr ffff0010e293f010 by task syz-executor.5/1646715 CPU: 4 PID: 1646715 Comm: syz-executor.5 Kdump: loaded Not tainted 5.10.0.aarch64 #1 Hardware name: Huawei TaiShan 2280 /BC11SPCD, BIOS 1.59 01/31/2019 Call trace: dump_backtrace+0x0/0x394 show_stack+0x34/0x4c arch/arm64/kernel/stacktrace.c:196 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x158/0x1e4 lib/dump_stack.c:118 print_address_description.constprop.0+0x68/0x204 mm/kasan/report.c:387 __kasan_report+0xe0/0x140 mm/kasan/report.c:547 kasan_report+0x44/0xe0 mm/kasan/report.c:564 check_memory_region_inline mm/kasan/generic.c:187 [inline] __asan_load4+0x94/0xd0 mm/kasan/generic.c:252 neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] neon_poly1305_do_update+0x6c/0x15c [poly1305_neon] neon_poly1305_update+0x9c/0x1c4 [poly1305_neon] crypto_shash_update crypto/shash.c:131 [inline] shash_finup_unaligned+0x84/0x15c crypto/shash.c:179 crypto_shash_finup+0x8c/0x140 crypto/shash.c:193 shash_digest_unaligned+0xb8/0xe4 crypto/shash.c:201 crypto_shash_digest+0xa4/0xfc crypto/shash.c:217 crypto_shash_tfm_digest+0xb4/0x150 crypto/shash.c:229 essiv_skcipher_setkey+0x164/0x200 [essiv] crypto_skcipher_setkey+0xb0/0x160 crypto/skcipher.c:612 skcipher_setkey+0x3c/0x50 crypto/algif_skcipher.c:305 alg_setkey+0x114/0x2a0 crypto/af_alg.c:220 alg_setsockopt+0x19c/0x210 crypto/af_alg.c:253 __sys_setsockopt+0x190/0x2e0 net/socket.c:2123 __do_sys_setsockopt net/socket.c:2134 [inline] __se_sys_setsockopt net/socket.c:2131 [inline] __arm64_sys_setsockopt+0x78/0x94 net/socket.c:2131 __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline] invoke_syscall+0x64/0x100 arch/arm64/kernel/syscall.c:48 el0_svc_common.constprop.0+0x220/0x230 arch/arm64/kernel/syscall.c:155 do_el0_svc+0xb4/0xd4 arch/arm64/kernel/syscall.c:217 el0_svc+0x24/0x3c arch/arm64/kernel/entry-common.c:353 el0_sync_handler+0x160/0x164 arch/arm64/kernel/entry-common.c:369 el0_sync+0x160/0x180 arch/arm64/kernel/entry.S:683

This error can be reproduced by the following code compiled as ko on a system with kasan enabled:

#include <linux/module.h> #include <linux/crypto.h> #include <crypto/hash.h> #include <crypto/poly1305.h>

char test_data[] = "\x00\x01\x02\x03\x04\x05\x06\x07" "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f" "\x10\x11\x12\x13\x14\x15\x16\x17" "\x18\x19\x1a\x1b\x1c\x1d\x1e";

int init(void) { struct crypto_shash *tfm = NULL; char *data = NULL, *out = NULL;

    tfm = crypto_alloc_shash("poly1305", 0, 0);
    data = kmalloc(POLY1305_KEY_SIZE - 1, GFP_KERNEL);
    out = kmalloc(POLY1305_DIGEST_SIZE, GFP_KERNEL);
    memcpy(data, test_data, POLY1305_KEY_SIZE - 1);
    crypto_shash_tfm_digest(tfm, data, POLY1305_KEY_SIZE - 1, out);

    kfree(data);
    kfree(out);
    return 0;

}

void deinit(void) { }

module_init(init) module_exit(deinit) MODULE_LICENSE("GPL");

The root cause of the bug sits in neon_poly1305_blocks. The logic neon_poly1305_blocks() performed is that if it was called with both s[] and r[] uninitialized, it will first try to initialize them with the data from the first "block" that it believed to be 32 bytes in length. First 16 bytes are used as the key and the next 16 bytes for s[]. This would lead to the aforementioned read out-of-bound. However, after calling poly1305_init_arch(), only 16 bytes were deducted from the input and s[] is initialized yet again with the following 16 bytes. The second initialization of s[] is certainly redundent which indicates that the first initialization should be for r[] only.

This patch fixes the issue by calling poly1305_init_arm64() instead o ---truncated---

Record
CVE-2022-50231
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSV 7.1

crypto: arm64/poly1305 - fix a read out-of-bound

In the Linux kernel, the following vulnerability has been resolved:

crypto: arm64/poly1305 - fix a read out-of-bound

A kasan error was reported during fuzzing:

BUG: KASAN: slab-out-of-bounds in neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] Read of size 4 at addr ffff0010e293f010 by task syz-executor.5/1646715 CPU: 4 PID: 1646715 Comm: syz-executor.5 Kdump: loaded Not tainted 5.10.0.aarch64 #1 Hardware name: Huawei TaiShan 2280 /BC11SPCD, BIOS 1.59 01/31/2019 Call trace: dump_backtrace+0x0/0x394 show_stack+0x34/0x4c arch/arm64/kernel/stacktrace.c:196 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x158/0x1e4 lib/dump_stack.c:118 print_address_description.constprop.0+0x68/0x204 mm/kasan/report.c:387 __kasan_report+0xe0/0x140 mm/kasan/report.c:547 kasan_report+0x44/0xe0 mm/kasan/report.c:564 check_memory_region_inline mm/kasan/generic.c:187 [inline] __asan_load4+0x94/0xd0 mm/kasan/generic.c:252 neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] neon_poly1305_do_update+0x6c/0x15c [poly1305_neon] neon_poly1305_update+0x9c/0x1c4 [poly1305_neon] crypto_shash_update crypto/shash.c:131 [inline] shash_finup_unaligned+0x84/0x15c crypto/shash.c:179 crypto_shash_finup+0x8c/0x140 crypto/shash.c:193 shash_digest_unaligned+0xb8/0xe4 crypto/shash.c:201 crypto_shash_digest+0xa4/0xfc crypto/shash.c:217 crypto_shash_tfm_digest+0xb4/0x150 crypto/shash.c:229 essiv_skcipher_setkey+0x164/0x200 [essiv] crypto_skcipher_setkey+0xb0/0x160 crypto/skcipher.c:612 skcipher_setkey+0x3c/0x50 crypto/algif_skcipher.c:305 alg_setkey+0x114/0x2a0 crypto/af_alg.c:220 alg_setsockopt+0x19c/0x210 crypto/af_alg.c:253 __sys_setsockopt+0x190/0x2e0 net/socket.c:2123 __do_sys_setsockopt net/socket.c:2134 [inline] __se_sys_setsockopt net/socket.c:2131 [inline] __arm64_sys_setsockopt+0x78/0x94 net/socket.c:2131 __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline] invoke_syscall+0x64/0x100 arch/arm64/kernel/syscall.c:48 el0_svc_common.constprop.0+0x220/0x230 arch/arm64/kernel/syscall.c:155 do_el0_svc+0xb4/0xd4 arch/arm64/kernel/syscall.c:217 el0_svc+0x24/0x3c arch/arm64/kernel/entry-common.c:353 el0_sync_handler+0x160/0x164 arch/arm64/kernel/entry-common.c:369 el0_sync+0x160/0x180 arch/arm64/kernel/entry.S:683

This error can be reproduced by the following code compiled as ko on a system with kasan enabled:

#include <linux/module.h> #include <linux/crypto.h> #include <crypto/hash.h> #include <crypto/poly1305.h>

char test_data[] = "\x00\x01\x02\x03\x04\x05\x06\x07" "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f" "\x10\x11\x12\x13\x14\x15\x16\x17" "\x18\x19\x1a\x1b\x1c\x1d\x1e";

int init(void) { struct crypto_shash *tfm = NULL; char *data = NULL, *out = NULL;

    tfm = crypto_alloc_shash("poly1305", 0, 0);
    data = kmalloc(POLY1305_KEY_SIZE - 1, GFP_KERNEL);
    out = kmalloc(POLY1305_DIGEST_SIZE, GFP_KERNEL);
    memcpy(data, test_data, POLY1305_KEY_SIZE - 1);
    crypto_shash_tfm_digest(tfm, data, POLY1305_KEY_SIZE - 1, out);

    kfree(data);
    kfree(out);
    return 0;

}

void deinit(void) { }

module_init(init) module_exit(deinit) MODULE_LICENSE("GPL");

The root cause of the bug sits in neon_poly1305_blocks. The logic neon_poly1305_blocks() performed is that if it was called with both s[] and r[] uninitialized, it will first try to initialize them with the data from the first "block" that it believed to be 32 bytes in length. First 16 bytes are used as the key and the next 16 bytes for s[]. This would lead to the aforementioned read out-of-bound. However, after calling poly1305_init_arch(), only 16 bytes were deducted from the input and s[] is initialized yet again with the following 16 bytes. The second initialization of s[] is certainly redundent which indicates that the first initialization should be for r[] only.

This patch fixes the issue by calling poly1305_init_arm64() instead o ---truncated---

Record
CVE-2022-50231
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-50231 7.1

In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/poly1305 - fix a read out-of-bound A kasan error was reported during fuzzing: BUG: KASAN: slab-out-of-bounds in neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] Read of size 4 at addr ffff0010e293f010 by task syz-executor.5/1646715 CPU: 4 PID: 1646715 Comm: syz-executor.5 Kdump: loaded Not tainted 5.10.0.aarch64 #1 Hardware name: Huawei TaiShan 2280 /BC11SPCD, BIOS 1.59 01/31/2019 Call trace: dump_backtrace+0x0/0x394 show_stack+0x34/0x4c arch/arm64/kernel/stacktrace.c:196 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x158/0x1e4 lib/dump_stack.c:118 print_address_description.constprop.0+0x68/0x204 mm/kasan/report.c:387 __kasan_report+0xe0/0x140 mm/kasan/report.c:547 kasan_report+0x44/0xe0 mm/kasan/report.c:564 check_memory_region_inline mm/kasan/generic.c:187 [inline] __asan_load4+0x94/0xd0 mm/kasan/generic.c:252 neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] neon_poly1305_do_update+0x6c/0x15c [poly1305_neon] neon_poly1305_update+0x9c/0x1c4 [poly1305_neon] crypto_shash_update crypto/shash.c:131 [inline] shash_finup_unaligned+0x84/0x15c crypto/shash.c:179 crypto_shash_finup+0x8c/0x140 crypto/shash.c:193 shash_digest_unaligned+0xb8/0xe4 crypto/shash.c:201 crypto_shash_digest+0xa4/0xfc crypto/shash.c:217 crypto_shash_tfm_digest+0xb4/0x150 crypto/shash.c:229 essiv_skcipher_setkey+0x164/0x200 [essiv] crypto_skcipher_setkey+0xb0/0x160 crypto/skcipher.c:612 skcipher_setkey+0x3c/0x50 crypto/algif_skcipher.c:305 alg_setkey+0x114/0x2a0 crypto/af_alg.c:220 alg_setsockopt+0x19c/0x210 crypto/af_alg.c:253 __sys_setsockopt+0x190/0x2e0 net/socket.c:2123 __do_sys_setsockopt net/socket.c:2134 [inline] __se_sys_setsockopt net/socket.c:2131 [inline] __arm64_sys_setsockopt+0x78/0x94 net/socket.c:2131 __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline] invoke_syscall+0x64/0x100 arch/arm64/kernel/syscall.c:48 el0_svc_common.constprop.0+0x220/0x230 arch/arm64/kernel/syscall.c:155 do_el0_svc+0xb4/0xd4 arch/arm64/kernel/syscall.c:217 el0_svc+0x24/0x3c arch/arm64/kernel/entry-common.c:353 el0_sync_handler+0x160/0x164 arch/arm64/kernel/entry-common.c:369 el0_sync+0x160/0x180 arch/arm64/kernel/entry.S:683 This error can be reproduced by the following code compiled as ko on a system with kasan enabled: #include <linux/module.h> #include <linux/crypto.h> #include <crypto/hash.h> #include <crypto/poly1305.h> char test_data[] = "\x00\x01\x02\x03\x04\x05\x06\x07" "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f" "\x10\x11\x12\x13\x14\x15\x16\x17" "\x18\x19\x1a\x1b\x1c\x1d\x1e"; int init(void) { struct crypto_shash *tfm = NULL; char *data = NULL, *out = NULL; tfm = crypto_alloc_shash("poly1305", 0, 0); data = kmalloc(POLY1305_KEY_SIZE - 1, GFP_KERNEL); out = kmalloc(POLY1305_DIGEST_SIZE, GFP_KERNEL); memcpy(data, test_data, POLY1305_KEY_SIZE - 1); crypto_shash_tfm_digest(tfm, data, POLY1305_KEY_SIZE - 1, out); kfree(data); kfree(out); return 0; } void deinit(void) { } module_init(init) module_exit(deinit) MODULE_LICENSE("GPL"); The root cause of the bug sits in neon_poly1305_blocks. The logic neon_poly1305_blocks() performed is that if it was called with both s[] and r[] uninitialized, it will first try to initialize them with the data from the first "block" that it believed to be 32 bytes in length. First 16 bytes are used as the key and the next 16 bytes for s[]. This would lead to the aforementioned read out-of-bound. However, after calling poly1305_init_arch(), only 16 bytes were deducted from the input and s[] is initialized yet again with the following 16 bytes. The second initialization of s[] is certainly redundent which indicates that the first initialization should be for r[] only. This patch fixes the issue by calling poly1305_init_arm64() instead o ---truncated---

Record
DEBIAN-CVE-2022-50231
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-03
Show 10 moreShow less
OSVUBUNTU-CVE-2022-50231 0.0

In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/poly1305 - fix a read out-of-bound A kasan error was reported during fuzzing: BUG: KASAN: slab-out-of-bounds in neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] Read of size 4 at addr ffff0010e293f010 by task syz-executor.5/1646715 CPU: 4 PID: 1646715 Comm: syz-executor.5 Kdump: loaded Not tainted 5.10.0.aarch64 #1 Hardware name: Huawei TaiShan 2280 /BC11SPCD, BIOS 1.59 01/31/2019 Call trace: dump_backtrace+0x0/0x394 show_stack+0x34/0x4c arch/arm64/kernel/stacktrace.c:196 __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x158/0x1e4 lib/dump_stack.c:118 print_address_description.constprop.0+0x68/0x204 mm/kasan/report.c:387 __kasan_report+0xe0/0x140 mm/kasan/report.c:547 kasan_report+0x44/0xe0 mm/kasan/report.c:564 check_memory_region_inline mm/kasan/generic.c:187 [inline] __asan_load4+0x94/0xd0 mm/kasan/generic.c:252 neon_poly1305_blocks.constprop.0+0x1b4/0x250 [poly1305_neon] neon_poly1305_do_update+0x6c/0x15c [poly1305_neon] neon_poly1305_update+0x9c/0x1c4 [poly1305_neon] crypto_shash_update crypto/shash.c:131 [inline] shash_finup_unaligned+0x84/0x15c crypto/shash.c:179 crypto_shash_finup+0x8c/0x140 crypto/shash.c:193 shash_digest_unaligned+0xb8/0xe4 crypto/shash.c:201 crypto_shash_digest+0xa4/0xfc crypto/shash.c:217 crypto_shash_tfm_digest+0xb4/0x150 crypto/shash.c:229 essiv_skcipher_setkey+0x164/0x200 [essiv] crypto_skcipher_setkey+0xb0/0x160 crypto/skcipher.c:612 skcipher_setkey+0x3c/0x50 crypto/algif_skcipher.c:305 alg_setkey+0x114/0x2a0 crypto/af_alg.c:220 alg_setsockopt+0x19c/0x210 crypto/af_alg.c:253 __sys_setsockopt+0x190/0x2e0 net/socket.c:2123 __do_sys_setsockopt net/socket.c:2134 [inline] __se_sys_setsockopt net/socket.c:2131 [inline] __arm64_sys_setsockopt+0x78/0x94 net/socket.c:2131 __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline] invoke_syscall+0x64/0x100 arch/arm64/kernel/syscall.c:48 el0_svc_common.constprop.0+0x220/0x230 arch/arm64/kernel/syscall.c:155 do_el0_svc+0xb4/0xd4 arch/arm64/kernel/syscall.c:217 el0_svc+0x24/0x3c arch/arm64/kernel/entry-common.c:353 el0_sync_handler+0x160/0x164 arch/arm64/kernel/entry-common.c:369 el0_sync+0x160/0x180 arch/arm64/kernel/entry.S:683 This error can be reproduced by the following code compiled as ko on a system with kasan enabled: #include <linux/module.h> #include <linux/crypto.h> #include <crypto/hash.h> #include <crypto/poly1305.h> char test_data[] = "\x00\x01\x02\x03\x04\x05\x06\x07" "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f" "\x10\x11\x12\x13\x14\x15\x16\x17" "\x18\x19\x1a\x1b\x1c\x1d\x1e"; int init(void) { struct crypto_shash *tfm = NULL; char *data = NULL, *out = NULL; tfm = crypto_alloc_shash("poly1305", 0, 0); data = kmalloc(POLY1305_KEY_SIZE - 1, GFP_KERNEL); out = kmalloc(POLY1305_DIGEST_SIZE, GFP_KERNEL); memcpy(data, test_data, POLY1305_KEY_SIZE - 1); crypto_shash_tfm_digest(tfm, data, POLY1305_KEY_SIZE - 1, out); kfree(data); kfree(out); return 0; } void deinit(void) { } module_init(init) module_exit(deinit) MODULE_LICENSE("GPL"); The root cause of the bug sits in neon_poly1305_blocks. The logic neon_poly1305_blocks() performed is that if it was called with both s[] and r[] uninitialized, it will first try to initialize them with the data from the first "block" that it believed to be 32 bytes in length. First 16 bytes are used as the key and the next 16 bytes for s[]. This would lead to the aforementioned read out-of-bound. However, after calling poly1305_init_arch(), only 16 bytes were deducted from the input and s[] is initialized yet again with the following 16 bytes. The second initialization of s[] is certainly redundent which indicates that the first initialization should be for r[] only. This patch fixes the issue by calling poly1305_init_arm64() instead o ---truncated---

Record
UBUNTU-CVE-2022-50231
CVSS 4.0
0.0 NoneCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-03
OSVCLSA-2026-1786761805 No score

kernel: Fix of 46 CVEs

  • wifi: ath11k: update channel list in reg notifier instead reg worker {CVE-2025-23133}
  • wifi: cfg80211: call reg_notifier for self managed wiphy from driver hint {CVE-2025-23133}
  • KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception {CVE-2025-37957}
  • KVM: x86: forcibly leave nested mode on vCPU reset {CVE-2022-3344}
  • RDMA/umem: Fix truncation for block sizes >= 4G {CVE-2026-53133}
  • crypto: arm64/poly1305 - fix a read out-of-bound {CVE-2022-50231}
  • tls: handle data disappearing from under the TLS ULP {CVE-2025-38616}
  • Bluetooth: btmtk: validate WMT event SKB length before struct access {CVE-2026-46140}
  • Bluetooth: L2CAP: complete CVE-2026-23395 hardening (chan_lock + ident clear + memset ordering)
  • wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit {CVE-2026-31579}
  • net: add exit_batch_rtnl() method
  • rxrpc: Fix data-race warning and potential load/store tearing {CVE-2026-23118}
  • virt/coco/sev-guest: Double-buffer messages {CVE-2023-53769}
  • ASoC: SOF: avoid a NULL dereference with unsupported widgets {CVE-2023-54233}
  • bnxt_en: Fix memory corruption when FW resources change during ifdown {CVE-2025-39810}
  • scsi: qla2xxx: Free sp in error path to fix system crash {CVE-2025-71232}
  • sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting {CVE-2026-23371}
  • net: rfkill: prevent unlimited numbers of rfkill events from being created {CVE-2026-31670}
  • intel_th: fix device leak on output open() {CVE-2026-23091}
  • batman-adv: reject oversized global TT response buffers {CVE-2026-31659}
  • rxrpc: Fix call removal to use RCU safe deletion {CVE-2026-31642}
  • i2c: s3c24xx: check the size of the SMBUS message before using it {CVE-2026-31627}
  • Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop {CVE-2026-31498}
  • mtd: rawnand: serialize lock/unlock against other NAND operations {CVE-2026-23434}
  • x86/efi: defer freeing of boot services memory {CVE-2026-23352}
  • KVM: Don't clobber irqfd routing type when deassigning irqfd {CVE-2026-23198}
  • nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec {CVE-2026-23112}
  • usb: typec: ucsi: Handle incorrect num_connectors capability {CVE-2025-71108}
  • KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer {CVE-2025-71104}
  • drm/ttm: Avoid NULL pointer deref for evicted BOs {CVE-2025-71083}
  • amba: bus: fix refcount leak {CVE-2023-54230}
  • exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree {CVE-2023-54194}
  • octeontx2-af: Add validation for lmac type {CVE-2023-54129}
  • rcu: dump vmalloc memory info safely {CVE-2023-54113}
  • wifi: rtw88: use work to update rate to avoid RCU warning {CVE-2023-54071}
  • bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps {CVE-2023-54033}
  • ASoC: soc-compress: Reposition and add pcm_mutex {CVE-2023-53866}
  • netlink: do not hard code device address lenth in fdb dumps {CVE-2023-53863}
  • md/raid5-cache: fix a deadlock in r5l_exit_log() {CVE-2023-53848}
  • tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak {CVE-2022-50824}
  • net: stmmac: fix possible memory leak in stmmac_dvr_probe() {CVE-2022-50663}
  • bpf: Fix reference state management for synchronous callbacks {CVE-2022-50650}
  • blk-mq: fix tags leak when shrink nr_hw_queues {CVE-2023-54227}
  • usbnet: Run unregister_netdev() before unbind() again {CVE-2022-49501}
  • scsi: core: Wake up the error handler when final completions race against each other {CVE-2026-23110}
  • scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
  • perf/core: Prevent VMA split of buffer mappings {CVE-2025-38563}
  • Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ {CVE-2026-23395}
  • Bluetooth: L2CAP: Fix responding with wrong PDU type
  • netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392}
Record
CLSA-2026-1786761805
Updated
2026-11-02
OSVCLSA-2026-1788168285 No score

kernel: Fix of 193 CVEs

  • mac802154: llsec: reject frames shorter than the authentication tag {CVE-2026-68125}
  • KVM: x86/mmu: Fix use-after-free on vendor module reload {CVE-2026-68428}
  • wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper {CVE-2026-68197}
  • bpf: account for current allocated stack depth in widen_imprecise_scalars() {CVE-2025-68208}
  • tun: free page on build_skb failure in tun_xdp_one() {CVE-2026-46322}
  • smb: client: fix potential cfid UAF in smb2_query_info_compound {CVE-2025-40320}
  • net/packet: avoid fanout hook re-registration after unregister {CVE-2026-68338}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • binfmt_misc: set have_execfd only once the interpreter is opened {CVE-2026-68186}
  • tracing: Fix resource leak on mmiotrace trace_pipe close {CVE-2026-68175}
  • tipc: fix u16 MTU truncation in media and bearer MTU validation {CVE-2026-68297}
  • net: gro: fix double aggregation of flush-marked skbs {CVE-2026-68136}
  • bpf, sockmap: Reject unhashed UDP sockets on sockmap update {CVE-2026-68386}
  • wifi: brcmfmac: fix 802.1X-SHA256 call trace warning {CVE-2026-68304}
  • udf: fix partition descriptor append bookkeeping {CVE-2026-45991}
  • Bluetooth: SCO: fix race conditions in sco_sock_connect() {CVE-2026-43023}
  • smb: client: validate dacloffset before building DACL pointers {CVE-2026-46195}
  • smb/client: fix out-of-bounds read in symlink_data() {CVE-2026-46185}
  • net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo {CVE-2026-46132}
  • Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
  • RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
  • RDMA/mana: Validate rx_hash_key_len {CVE-2026-46145}
  • scsi: qla2xxx: Completely fix fcport double free {CVE-2026-43414}
  • bpf: Fix bpf_xdp_store_bytes proto for read-only arg {CVE-2026-45886}
  • libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
  • wifi: mac80211: use safe list iteration in radar detect work {CVE-2026-46166}
  • RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads {CVE-2026-46114}
  • nfsd: never defer requests during idmap lookup {CVE-2026-45983}
  • drop_monitor: fix size calculations for 64-bit attributes {CVE-2026-68287}
  • openvswitch: cap upcall PID array size and pre-size vport replies {CVE-2026-45840}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() {CVE-2026-46069}
  • dm mirror: fix integer overflow in create_dirty_log() {CVE-2026-46023}
  • netfilter: nft_inner: Fix IPv6 inner_thoff desync {CVE-2026-46244}
  • drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() {CVE-2026-68429}
  • crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
  • RDMA/rxe: Fix race condition in QP timer handlers {CVE-2026-45910}
  • wifi: mac80211: remove station if connection prep fails {CVE-2026-46125}
  • tcp: call sk_data_ready() after listener migration {CVE-2026-46015}
  • scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk {CVE-2025-38289}
  • net/sched: act_ct: Only release RCU read lock after ct_ft {CVE-2026-46319}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • io-wq: check that the predecessor is hashed in io_wq_remove_pending() {CVE-2026-46274}
  • wifi: mac80211: drop stray 'static' from fast-RX rx_result {CVE-2026-46152}
  • io_uring/poll: fix signed comparison in io_poll_get_ownership() {CVE-2026-52933}
  • xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
  • Bluetooth: btusb: validate Realtek vendor event length {CVE-2026-68339}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • netfilter: nft_exthdr: fix register tracking for F_PRESENT flag {CVE-2026-53218}
  • ipc: limit next_id…
Record
CLSA-2026-1788168285
Updated
2026-11-02
OSVSUSE-SU-2025:02264-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
  • CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
  • CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
  • CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (bsc#1235464).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
  • CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).
  • Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • bs-upload-kernel: Pass limit_packages also on multibuild Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build') Fixes: 747f601d4156 ('bs-upload-kernel, MyBS, Buildresults: Support multibuild (JSC-SLE#5501, boo#1211226, bsc#1218184)')
  • hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).
  • kernel-source: Do not use multiple -r in sed parameters
  • kernel-source: Remove log.sh from sources
  • mkspec: Exclude rt flavor from kernel-syms dependencies (bsc#1244337).
  • mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431).
  • mm/hugetlb: unshare…
Record
SUSE-SU-2025:02264-1
Updated
2026-11-02
OSVSUSE-SU-2025:02308-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-50085: dm raid: fix address sanitizer warning in raid_resume (bsc#1245147).
  • CVE-2022-50087: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (bsc#1245119).
  • CVE-2022-50200: selinux: Add boundary check in put_entry() (bsc#1245149).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • Fix conditional for selecting gcc-13 Fixes: 51dacec21eb1 ('Use gcc-13 for build on SLE16 (jsc#PED-10028).')
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • Require zstd in kernel-default-devel when module compression is zstd To use ksym-provides tool modules need to be uncompressed. Without zstd at least kernel-default-base does not have provides. Link: https://github.com/openSUSE/rpm-config-SUSE/pull/82
  • Test the correct macro to detect RT kernel build Fixes: 470cd1a41502 ('kernel-binary: Support livepatch_rt with merged RT branch')
  • Use gcc-13 for build on SLE16 (jsc#PED-10028).
  • add nf_tables for iptables non-legacy network handling This is needed for example by docker on the Alpine Linux distribution, but can also be used on openSUSE.
  • bs-upload-kernel: Pass limit_packages also on multibuild Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build') Fixes: 747f601d4156 ('bs-upload-kernel, MyBS, Buildresults: Support multibuild (JSC-SLE#5501, boo#1211226, bsc#1218184)')
  • check-for-config-changes: Fix flag name typo
  • drop ax25 drivers (bsc#1238471).
  • drop hamradio drivers (bsc#1238471).
  • drop netrom drivers (bsc#1238471).
  • drop rose drivers (bsc#1238471).
  • kabi/severities: workaround kABI checker complains after AX25 and HAMRADIO removals KABI: symbol asc2ax(mod:net/ax25/ax25) lost KABI: symbol ax25_bcast(mod:net/ax25/ax25) lost KABI: symbol ax25_defaddr(mod:net/ax25/ax25) lost KABI: symbol ax25_display_timer(mod:net/ax25/ax25) lost KABI: symbol ax25_find_cb(mod:net/ax25/ax25) lost KABI: symbol ax25_findbyuid(mod:net/ax25/ax25) lost KABI: symbol ax25_header_ops(mod:net/ax25/ax25) lost…
Record
SUSE-SU-2025:02308-1
Updated
2026-11-02
OSVSUSE-SU-2025:02320-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-50085: dm raid: fix address sanitizer warning in raid_resume (bsc#1245147).
  • CVE-2022-50087: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (bsc#1245119).
  • CVE-2022-50200: selinux: Add boundary check in put_entry() (bsc#1245149).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • net_sched: sch_fifo: implement lockless __fifo_dump() (bsc#1237312)
  • net_sched: sch_sfq: use a temporary work area for validating configuration (bsc#1232504)
  • scsi: storvsc: Do not report the host packet status as the hv status (git-fixes).
  • scsi: storvsc: Increase the timeouts to storvsc_timeout (bsc#1245455).
  • wifi: cfg80211: Add my certificate (bsc#1243001).
  • wifi: cfg80211: fix certs build to not depend on file order (bsc#1243001).
Record
SUSE-SU-2025:02320-1
Updated
2026-11-02
OSVSUSE-SU-2025:02321-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
  • CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
  • CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
  • CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-28956: x86/its: Add support for ITS-safe indirect thunk (bsc#1242006).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (bsc#1235464).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (bsc#1241640).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
  • CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).
  • Fix conditional for selecting gcc-13 Fixes: 51dacec21eb1 ('Use gcc-13 for build on SLE16 (jsc#PED-10028).')
  • Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • Require zstd in kernel-default-devel when module compression is zstd To use ksym-provides tool modules need to be uncompressed. Without zstd at least kernel-default-base does not have provides. Link: https://github.com/openSUSE/rpm-config-SUSE/pull/82
  • Use gcc-13 for build on SLE16 (jsc#PED-10028).
  • add…
Record
SUSE-SU-2025:02321-1
Updated
2026-11-02
OSVSUSE-SU-2025:02322-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
  • CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
  • CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
  • CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • Fix conditional for selecting gcc-13 Fixes: 51dacec21eb1 ('Use gcc-13 for build on SLE16 (jsc#PED-10028).')
  • Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • Require zstd in kernel-default-devel when module compression is zstd To use ksym-provides tool modules need to be uncompressed. Without zstd at least kernel-default-base does not have provides. Link: https://github.com/openSUSE/rpm-config-SUSE/pull/82
  • Test the correct macro to detect RT kernel build Fixes: 470cd1a41502 ('kernel-binary: Support livepatch_rt with merged RT branch')
  • Use gcc-13 for build on SLE16 (jsc#PED-10028).
  • add nf_tables for iptables non-legacy network…
Record
SUSE-SU-2025:02322-1
Updated
2026-11-02
OSVSUSE-SU-2025:02537-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
  • CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
  • CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
  • CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • Fix conditional for selecting gcc-13 Fixes: 51dacec21eb1 ('Use gcc-13 for build on SLE16 (jsc#PED-10028).')
  • Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • Require zstd in kernel-default-devel when module compression is zstd To use ksym-provides tool modules need to be uncompressed. Without zstd at least kernel-default-base does not have provides. Link: https://github.com/openSUSE/rpm-config-SUSE/pull/82
  • Use gcc-13 for build on SLE16 (jsc#PED-10028).
  • add nf_tables for iptables non-legacy network handling This is needed for example by docker on the Alpine Linux distribution, but can also be used on openSUSE.
  • bs-upload-kernel: Pass…
Record
SUSE-SU-2025:02537-1
Updated
2026-11-02
OSVSUSE-SU-2025:2264-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
  • CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
  • CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
  • CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (bsc#1235464).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
  • CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).
  • Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • bs-upload-kernel: Pass limit_packages also on multibuild Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build') Fixes: 747f601d4156 ('bs-upload-kernel, MyBS, Buildresults: Support multibuild (JSC-SLE#5501, boo#1211226, bsc#1218184)')
  • hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).
  • kernel-source: Do not use multiple -r in sed parameters
  • kernel-source: Remove log.sh from sources
  • mkspec: Exclude rt flavor from kernel-syms dependencies (bsc#1244337).
  • mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431).
  • mm/hugetlb: unshare…
Record
SUSE-SU-2025:2264-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 7.0.0-284.1101.el9_2.tuxcare.11.els11
7.0.0-284.1101.el9_2.tuxcare.11.els11
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 2:1.0.0-2.el9_2.tuxcare.11.els11
2:1.0.0-2.el9_2.tuxcare.11.els11
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 2:1.0.0-2.el9_2.tuxcare.11.els11
2:1.0.0-2.el9_2.tuxcare.11.els11
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 2:1.0.0-2.el9_2.tuxcare.11.els11
2:1.0.0-2.el9_2.tuxcare.11.els11
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 45 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els11
5.14.0-284.1101.el9_2.tuxcare.11.els11
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-abi-stablelists
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-core
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-cross-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-uki-virt-addons
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-doc
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-rt
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-rt-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 183 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
Kernel
Linux
5.5.0 up to 5.10.136, 5.11.0 up to 5.15.60, 5.16.0 up to 5.18.17, 5.19.0 up to 5.19.1
5.10.1365.15.605.18.175.19.1
linux
Debian:12
before 6.0.2-1
6.0.2-1
linux
Debian:13
before 6.0.2-1
6.0.2-1
linux
Debian:14
before 6.0.2-1
6.0.2-1
kernel-default
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1.150500.6.53.1
5.14.21-150500.55.113.1.150500.6.53.1
kernel-source
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-livepatch-SLE15-SP5_Update_28
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 258 CVEs
before 1-150500.11.3.1
1-150500.11.3.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1.150500.6.53.1
5.14.21-150500.55.113.1.150500.6.53.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1.150500.6.53.1
5.14.21-150500.55.113.1.150500.6.53.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1.150500.6.53.1
5.14.21-150500.55.113.1.150500.6.53.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-source
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1.150500.6.53.1
5.14.21-150500.55.113.1.150500.6.53.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-livepatch-SLE15-SP3_Update_59
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 123 CVEs
before 1-150300.7.3.1
1-150300.7.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP3
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1.150300.18.126.1
5.3.18-150300.59.211.1.150300.18.126.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
before 5.3.18-150300.59.212.1
5.3.18-150300.59.212.1
kernel-preempt
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-source
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1.150300.18.126.1
5.3.18-150300.59.211.1.150300.18.126.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 123 CVEs
before 5.3.18-150300.59.212.1
5.3.18-150300.59.212.1
kernel-preempt
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1.150300.18.126.1
5.3.18-150300.59.211.1.150300.18.126.1
kernel-default
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1.150300.18.126.1
5.3.18-150300.59.211.1.150300.18.126.1
kernel-64kb
SUSE:Enterprise Storage 7.1
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default
SUSE:Enterprise Storage 7.1
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default-base
SUSE:Enterprise Storage 7.1
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1.150300.18.126.1
5.3.18-150300.59.211.1.150300.18.126.1
kernel-docs
SUSE:Enterprise Storage 7.1
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-obs-build
SUSE:Enterprise Storage 7.1
From an advisory covering 123 CVEs
before 5.3.18-150300.59.212.1
5.3.18-150300.59.212.1
kernel-preempt
SUSE:Enterprise Storage 7.1
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-source
SUSE:Enterprise Storage 7.1
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-syms
SUSE:Enterprise Storage 7.1
From an advisory covering 123 CVEs
before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-rt
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 123 CVEs
before 5.3.18-150300.214.1
5.3.18-150300.214.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 123 CVEs
before 5.3.18-150300.214.1
5.3.18-150300.214.1
kernel-rt
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 123 CVEs
before 5.3.18-150300.214.1
5.3.18-150300.214.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 123 CVEs
before 5.3.18-150300.214.1
5.3.18-150300.214.1
kernel-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 260 CVEs
before 5.14.21-150500.13.100.2
5.14.21-150500.13.100.2
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 260 CVEs
before 5.14.21-150500.13.100.1
5.14.21-150500.13.100.1
kernel-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 221 CVEs
before 5.14.21-150400.15.124.1
5.14.21-150400.15.124.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 221 CVEs
before 5.14.21-150400.15.124.1
5.14.21-150400.15.124.1
kernel-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 221 CVEs
before 5.14.21-150400.15.124.1
5.14.21-150400.15.124.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 221 CVEs
before 5.14.21-150400.15.124.1
5.14.21-150400.15.124.1
kernel-default
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default-base
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2.150400.24.86.2
5.14.21-150400.24.170.2.150400.24.86.2
kernel-default
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default-base
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2.150400.24.86.2
5.14.21-150400.24.170.2.150400.24.86.2
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2.150400.24.86.2
5.14.21-150400.24.170.2.150400.24.86.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2.150400.24.86.2
5.14.21-150400.24.170.2.150400.24.86.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-default-base
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2.150400.24.86.2
5.14.21-150400.24.170.2.150400.24.86.2
kernel-docs
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.2
5.14.21-150400.24.170.2
kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 221 CVEs
before 5.14.21-150400.24.170.1
5.14.21-150400.24.170.1
linux-hwe-edge
Ubuntu:16.04:LTS
All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
None known
linux-aws-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
None known
linux-aws-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
None known
linux-azure
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
None known
linux-azure-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
None known
linux-azure-edge
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
None known
linux-gcp
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
None known
linux-gcp-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
None known
linux-gke-4.15
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
None known
linux-gke-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
None known
linux-hwe
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
None known
linux-hwe-edge
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
None known
linux-oem
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
None known
linux-oracle-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
None known
linux-oracle-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
None known
linux-aws-5.15
Ubuntu:20.04:LTS
before 5.15.0-1021.25~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
5.15.0-1021.25~20.04.1
linux-azure-5.15
Ubuntu:20.04:LTS
before 5.15.0-1021.26~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.1
5.15.0-1021.26~20.04.1
linux-gcp-5.15
Ubuntu:20.04:LTS
before 5.15.0-1021.28~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.25.15.0-1018.24~20.04.1
5.15.0-1021.28~20.04.1
linux-hwe-5.15
Ubuntu:20.04:LTS
before 5.15.0-50.56~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
5.15.0-50.56~20.04.1
linux-intel-iotg-5.15
Ubuntu:20.04:LTS
before 5.15.0-1017.22~20.04.1, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1
5.15.0-1017.22~20.04.1
linux-lowlatency-hwe-5.15
Ubuntu:20.04:LTS
before 5.15.0-50.56~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
5.15.0-50.56~20.04.1
linux-oracle-5.15
Ubuntu:20.04:LTS
before 5.15.0-1019.24~20.04.1, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
5.15.0-1019.24~20.04.1
linux-riscv-5.15
Ubuntu:20.04:LTS
before 5.15.0-1022.26~20.04.1, plus listed versions
5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.1
5.15.0-1022.26~20.04.1
linux-aws-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
None known
linux-aws-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
None known
linux-aws-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
None known
linux-azure-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
None known
linux-azure-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
None known
linux-azure-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
None known
linux-azure-fde
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
None known
linux-gcp-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
None known
linux-gcp-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
None known
linux-gcp-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
None known
linux-gke
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
None known
linux-gke-5.15
Ubuntu:20.04:LTS
All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
None known
linux-gkeop
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
None known
linux-hwe-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
None known
linux-hwe-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
None known
linux-hwe-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
None known
linux-intel-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
None known
linux-oem-5.10
Ubuntu:20.04:LTS
All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
None known
linux-oem-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
None known
linux-oem-5.14
Ubuntu:20.04:LTS
All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
None known
linux-oem-5.6
Ubuntu:20.04:LTS
All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
None known
linux-oracle-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
None known
linux-oracle-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
None known
linux-oracle-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
None known
linux-raspi2
Ubuntu:20.04:LTS
All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
None known
linux-riscv
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
None known
linux-riscv-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
None known
linux-riscv-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
None known
linux
Ubuntu:22.04:LTS
before 5.15.0-50.56, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 13 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.54
5.15.0-50.56
linux-allwinner-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
None known
linux-aws
Ubuntu:22.04:LTS
before 5.15.0-1021.25, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 9 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.24
5.15.0-1021.25
linux-aws-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
None known
linux-aws-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
None known
linux-aws-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
None known
linux-azure
Ubuntu:22.04:LTS
before 5.15.0-1021.26, plus listed versions
5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6
Show 9 moreShow less
5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.25
5.15.0-1021.26
linux-azure-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
None known
linux-azure-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
None known
linux-azure-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
None known
linux-azure-fde
Ubuntu:22.04:LTS
before 5.15.0-1024.30.1, plus listed versions
5.15.0-1019.24.1
5.15.0-1024.30.1
linux-azure-fde-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
None known
linux-gcp
Ubuntu:22.04:LTS
before 5.15.0-1019.25, plus listed versions
5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7
Show 8 moreShow less
5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.24
5.15.0-1019.25
linux-gcp-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
None known
linux-gcp-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
None known
linux-gcp-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1
Show 8 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1
None known
linux-gke
Ubuntu:22.04:LTS
before 5.15.0-1017.20, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.55.15.0-1005.65.15.0-1006.7
Show 6 moreShow less
5.15.0-1008.105.15.0-1010.135.15.0-1011.145.15.0-1014.175.15.0-1015.185.15.0-1016.19
5.15.0-1017.20
linux-gkeop
Ubuntu:22.04:LTS
before 5.15.0-1004.6, plus listed versions
5.15.0-1001.25.15.0-1002.45.15.0-1003.5
5.15.0-1004.6
linux-hwe-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
None known
linux-hwe-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1
Show 5 moreShow less
6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1
None known
linux-hwe-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1
Show 8 moreShow less
6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1
None known
linux-ibm
Ubuntu:22.04:LTS
before 5.15.0-1015.17, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.45.15.0-1005.55.15.0-1007.8
Show 4 moreShow less
5.15.0-1009.115.15.0-1010.125.15.0-1012.145.15.0-1013.15
5.15.0-1015.17
linux-intel-iot-realtime
Ubuntu:22.04:LTS
All versions, plus listed versions
5.15.0-1073.75
None known
linux-intel-iotg
Ubuntu:22.04:LTS
before 5.15.0-1017.22, plus listed versions
5.15.0-1004.65.15.0-1008.115.15.0-1010.145.15.0-1013.175.15.0-1015.205.15.0-1016.21
5.15.0-1017.22
linux-kvm
Ubuntu:22.04:LTS
before 5.15.0-1019.23, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1002.2
Show 10 moreShow less
5.15.0-1004.45.15.0-1005.55.15.0-1007.75.15.0-1008.85.15.0-1010.115.15.0-1012.145.15.0-1013.165.15.0-1016.195.15.0-1017.215.15.0-1018.22
5.15.0-1019.23
linux-lowlatency
Ubuntu:22.04:LTS
before 5.15.0-50.56, plus listed versions
5.15.0-22.225.15.0-23.235.15.0-24.245.15.0-27.285.15.0-30.31
Show 10 moreShow less
5.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.535.15.0-48.54
5.15.0-50.56
linux-lowlatency-hwe-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1
Show 5 moreShow less
5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30
None known
linux-lowlatency-hwe-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1
Show 5 moreShow less
6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
None known
linux-lowlatency-hwe-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1
Show 8 moreShow less
6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1
None known
linux-nvidia
Ubuntu:22.04:LTS
before 5.15.0-1015.15, plus listed versions
5.15.0-1005.55.15.0-1007.75.15.0-1010.10
5.15.0-1015.15
linux-nvidia-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15
None known
linux-nvidia-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15
Show 6 moreShow less
6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25
None known
linux-oem-5.17
Ubuntu:22.04:LTS
All versions, plus listed versions
5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13
Show 21 moreShow less
5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36
None known
linux-oem-6.0
Ubuntu:22.04:LTS
All versions, plus listed versions
6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10
Show 11 moreShow less
6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21
None known
linux-oem-6.1
Ubuntu:22.04:LTS
All versions, plus listed versions
6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9
Show 22 moreShow less
6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36
None known
linux-oem-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8
Show 14 moreShow less
6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28
None known
linux-oracle
Ubuntu:22.04:LTS
before 5.15.0-1019.24, plus listed versions
5.13.0-1008.105.15.0-1001.35.15.0-1002.45.15.0-1003.55.15.0-1006.8
Show 7 moreShow less
5.15.0-1007.95.15.0-1009.125.15.0-1011.155.15.0-1013.175.15.0-1016.205.15.0-1017.225.15.0-1018.23
5.15.0-1019.24
linux-oracle-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1
Show 8 moreShow less
6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1
None known
linux-raspi
Ubuntu:22.04:LTS
before 5.15.0-1016.18, plus listed versions
5.13.0-1008.95.15.0-1002.25.15.0-1003.35.15.0-1004.45.15.0-1005.5
Show 7 moreShow less
5.15.0-1006.65.15.0-1008.85.15.0-1011.135.15.0-1012.145.15.0-1013.155.15.0-1014.165.15.0-1015.17
5.15.0-1016.18
linux-realtime
Ubuntu:22.04:LTS
All versions, plus listed versions
5.15.0-1032.35
None known
linux-riscv
Ubuntu:22.04:LTS
All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
None known
linux-riscv-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1
None known
linux-riscv-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1
Show 5 moreShow less
6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1
None known
linux-starfive-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1
None known

History

History
RecordedChangedSources
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-50231 is a high vulnerability (CVSS 7.1) in Linux, published June 18, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in Kernel 5.10.136.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 73 package rows, 29 versions, 628 references and the rest of 7 source descriptions. The JSON record has them.

MoveEnter Open