CVE-2023-53252

Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync

hci_update_accept_list_sync iterates over hdev->pend_le_conns and hdev->pend_le_reports, and waits for controller events in the loop body, without holding hdev lock.

Meanwhile, these lists and the items may be modified e.g. by le_scan_cleanup. This can invalidate the list cursor or any other item in the list, resulting to invalid behavior (eg use-after-free).

Use RCU for the hci_conn_params action lists. Since the loop bodies in hci_sync block and we cannot use RCU or hdev->lock for the whole loop, copy list items first and then iterate on the copy. Only the flags field is written from elsewhere, so READ_ONCE/WRITE_ONCE should guarantee we read valid values.

Free params everywhere with hci_conn_params_free so the cleanup is guaranteed to be done properly.

This fixes the following, which can be triggered e.g. by BlueZ new mgmt-tester case "Add + Remove Device Nowait - Success", or by changing hci_le_set_cig_params to always return false, and running iso-tester:

================================================================== BUG: KASAN: slab-use-after-free in hci_update_passive_scan_sync (net/bluetooth/hci_sync.c:2536 net/bluetooth/hci_sync.c:2723 net/bluetooth/hci_sync.c:2841) Read of size 8 at addr ffff888001265018 by task kworker/u3:0/32

Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-1.fc38 04/01/2014 Workqueue: hci0 hci_cmd_sync_work Call Trace: <TASK> dump_stack_lvl (./arch/x86/include/asm/irqflags.h:134 lib/dump_stack.c:107) print_report (mm/kasan/report.c:320 mm/kasan/report.c:430) ? __virt_addr_valid (./include/linux/mmzone.h:1915 ./include/linux/mmzone.h:2011 arch/x86/mm/physaddr.c:65) ? hci_update_passive_scan_sync (net/bluetooth/hci_sync.c:2536 net/bluetooth/hci_sync.c:2723 net/bluetooth/hci_sync.c:2841) kasan_report (mm/kasan/report.c:538) ? hci_update_passive_scan_sync (net/bluetooth/hci_sync.c:2536 net/bluetooth/hci_sync.c:2723 net/bluetooth/hci_sync.c:2841) hci_update_passive_scan_sync (net/bluetooth/hci_sync.c:2536 net/bluetooth/hci_sync.c:2723 net/bluetooth/hci_sync.c:2841) ? __pfx_hci_update_passive_scan_sync (net/bluetooth/hci_sync.c:2780) ? mutex_lock (kernel/locking/mutex.c:282) ? __pfx_mutex_lock (kernel/locking/mutex.c:282) ? __pfx_mutex_unlock (kernel/locking/mutex.c:538) ? __pfx_update_passive_scan_sync (net/bluetooth/hci_sync.c:2861) hci_cmd_sync_work (net/bluetooth/hci_sync.c:306) process_one_work (./arch/x86/include/asm/preempt.h:27 kernel/workqueue.c:2399) worker_thread (./include/linux/list.h:292 kernel/workqueue.c:2538) ? __pfx_worker_thread (kernel/workqueue.c:2480) kthread (kernel/kthread.c:376) ? __pfx_kthread (kernel/kthread.c:331) ret_from_fork (arch/x86/entry/entry_64.S:314) </TASK>

Allocated by task 31: kasan_save_stack (mm/kasan/common.c:46) kasan_set_track (mm/kasan/common.c:52) __kasan_kmalloc (mm/kasan/common.c:374 mm/kasan/common.c:383) hci_conn_params_add (./include/linux/slab.h:580 ./include/linux/slab.h:720 net/bluetooth/hci_core.c:2277) hci_connect_le_scan (net/bluetooth/hci_conn.c:1419 net/bluetooth/hci_conn.c:1589) hci_connect_cis (net/bluetooth/hci_conn.c:2266) iso_connect_cis (net/bluetooth/iso.c:390) iso_sock_connect (net/bluetooth/iso.c:899) __sys_connect (net/socket.c:2003 net/socket.c:2020) __x64_sys_connect (net/socket.c:2027) do_syscall_64 (arch/x86/entry/common.c:50 arch/x86/entry/common.c:80) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:120)

Freed by task 15: kasan_save_stack (mm/kasan/common.c:46) kasan_set_track (mm/kasan/common.c:52) kasan_save_free_info (mm/kasan/generic.c:523) __kasan_slab_free (mm/kasan/common.c:238 mm/kasan/common.c:200 mm/kasan/common.c:244) __kmem_cache_free (mm/slub.c:1807 mm/slub.c:3787 mm/slub.c:3800) hci_conn_params_del (net/bluetooth/hci_core.c:2323) le_scan_cleanup (net/bluetooth/hci_conn.c:202) process_one_work (./arch/x86/include/asm/preempt. ---truncated---

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.15%Up 0.1 points since Sep 16, 2025

What each source reports

CVE List Score used7.8

Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync

hci_update_accept_list_sync iterates over hdev->pend_le_conns and hdev->pend_le_reports, and waits for controller events in the loop body, without holding hdev lock.

Meanwhile, these lists and the items may be modified e.g. by le_scan_cleanup. This can invalidate the list cursor or any other item in the list, resulting to invalid behavior (eg use-after-free).

Free params everywhere with hci_conn_params_free so the cleanup is guaranteed to be done properly.

Record: CVE-2023-53252
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

EUVDEUVD-2023-598327.8

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync

hci_update_accept_list_sync iterates over hdev->pend_le_conns and hdev->pend_le_reports, and waits for controller events in the loop body, without holding hdev lock.

Meanwhile, these lists and the items may be modified e.g. by le_scan_cleanup. This can invalidate the list cursor or any other item in the list, resulting to invalid behavior (eg use-after-free).

Free params everywhere with hci_conn_params_free so the cleanup is guaranteed to be done properly.

Record: EUVD-2023-59832
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-r8x4-762h-wj657.8

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: use RCU for...

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync

hci_update_accept_list_sync iterates over hdev->pend_le_conns and hdev->pend_le_reports, and waits for controller events in the loop body, without holding hdev lock.

Meanwhile, these lists and the items may be modified e.g. by le_scan_cleanup. This can invalidate the list cursor or any other item in the list, resulting to invalid behavior (eg use-after-free).

Free params everywhere with hci_conn_params_free so the cleanup is guaranteed to be done properly.

Record: GHSA-r8x4-762h-wj65
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

NVD7.8

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync

hci_update_accept_list_sync iterates over hdev->pend_le_conns and hdev->pend_le_reports, and waits for controller events in the loop body, without holding hdev lock.

Meanwhile, these lists and the items may be modified e.g. by le_scan_cleanup. This can invalidate the list cursor or any other item in the list, resulting to invalid behavior (eg use-after-free).

Free params everywhere with hci_conn_params_free so the cleanup is guaranteed to be done properly.

Record: CVE-2023-53252
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

OSVBELL-CVE-2023-532527.8

Record: BELL-CVE-2023-53252
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV7.8

Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync

hci_update_accept_list_sync iterates over hdev->pend_le_conns and hdev->pend_le_reports, and waits for controller events in the loop body, without holding hdev lock.

Meanwhile, these lists and the items may be modified e.g. by le_scan_cleanup. This can invalidate the list cursor or any other item in the list, resulting to invalid behavior (eg use-after-free).

Free params everywhere with hci_conn_params_free so the cleanup is guaranteed to be done properly.

Record: CVE-2023-53252
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 17 moreShow less

OSVDEBIAN-CVE-2023-532527.8

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync hci_update_accept_list_sync iterates over hdev->pend_le_conns and hdev->pend_le_reports, and waits for controller events in the loop body, without holding hdev lock. Meanwhile, these lists and the items may be modified e.g. by le_scan_cleanup. This can invalidate the list cursor or any other item in the list, resulting to invalid behavior (eg use-after-free). Use RCU for the hci_conn_params action lists. Since the loop bodies in hci_sync block and we cannot use RCU or hdev->lock for the whole loop, copy list items first and then iterate on the copy. Only the flags field is written from elsewhere, so READ_ONCE/WRITE_ONCE should guarantee we read valid values. Free params everywhere with hci_conn_params_free so the cleanup is guaranteed to be done properly. This fixes the following, which can be triggered e.g. by BlueZ new mgmt-tester case "Add + Remove Device Nowait - Success", or by changing hci_le_set_cig_params to always return false, and running iso-tester: ================================================================== BUG: KASAN: slab-use-after-free in hci_update_passive_scan_sync (net/bluetooth/hci_sync.c:2536 net/bluetooth/hci_sync.c:2723 net/bluetooth/hci_sync.c:2841) Read of size 8 at addr ffff888001265018 by task kworker/u3:0/32 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-1.fc38 04/01/2014 Workqueue: hci0 hci_cmd_sync_work Call Trace: <TASK> dump_stack_lvl (./arch/x86/include/asm/irqflags.h:134 lib/dump_stack.c:107) print_report (mm/kasan/report.c:320 mm/kasan/report.c:430) ? __virt_addr_valid (./include/linux/mmzone.h:1915 ./include/linux/mmzone.h:2011 arch/x86/mm/physaddr.c:65) ? hci_update_passive_scan_sync (net/bluetooth/hci_sync.c:2536 net/bluetooth/hci_sync.c:2723 net/bluetooth/hci_sync.c:2841) kasan_report (mm/kasan/report.c:538) ? hci_update_passive_scan_sync (net/bluetooth/hci_sync.c:2536 net/bluetooth/hci_sync.c:2723 net/bluetooth/hci_sync.c:2841) hci_update_passive_scan_sync (net/bluetooth/hci_sync.c:2536 net/bluetooth/hci_sync.c:2723 net/bluetooth/hci_sync.c:2841) ? __pfx_hci_update_passive_scan_sync (net/bluetooth/hci_sync.c:2780) ? mutex_lock (kernel/locking/mutex.c:282) ? __pfx_mutex_lock (kernel/locking/mutex.c:282) ? __pfx_mutex_unlock (kernel/locking/mutex.c:538) ? __pfx_update_passive_scan_sync (net/bluetooth/hci_sync.c:2861) hci_cmd_sync_work (net/bluetooth/hci_sync.c:306) process_one_work (./arch/x86/include/asm/preempt.h:27 kernel/workqueue.c:2399) worker_thread (./include/linux/list.h:292 kernel/workqueue.c:2538) ? __pfx_worker_thread (kernel/workqueue.c:2480) kthread (kernel/kthread.c:376) ? __pfx_kthread (kernel/kthread.c:331) ret_from_fork (arch/x86/entry/entry_64.S:314) </TASK> Allocated by task 31: kasan_save_stack (mm/kasan/common.c:46) kasan_set_track (mm/kasan/common.c:52) __kasan_kmalloc (mm/kasan/common.c:374 mm/kasan/common.c:383) hci_conn_params_add (./include/linux/slab.h:580 ./include/linux/slab.h:720 net/bluetooth/hci_core.c:2277) hci_connect_le_scan (net/bluetooth/hci_conn.c:1419 net/bluetooth/hci_conn.c:1589) hci_connect_cis (net/bluetooth/hci_conn.c:2266) iso_connect_cis (net/bluetooth/iso.c:390) iso_sock_connect (net/bluetooth/iso.c:899) __sys_connect (net/socket.c:2003 net/socket.c:2020) __x64_sys_connect (net/socket.c:2027) do_syscall_64 (arch/x86/entry/common.c:50 arch/x86/entry/common.c:80) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:120) Freed by task 15: kasan_save_stack (mm/kasan/common.c:46) kasan_set_track (mm/kasan/common.c:52) kasan_save_free_info (mm/kasan/generic.c:523) __kasan_slab_free (mm/kasan/common.c:238 mm/kasan/common.c:200 mm/kasan/common.c:244) __kmem_cache_free (mm/slub.c:1807 mm/slub.c:3787 mm/slub.c:3800) hci_conn_params_del (net/bluetooth/hci_core.c:2323) le_scan_cleanup (net/bluetooth/hci_conn.c:202) process_one_work (./arch/x86/include/asm/preempt. ---truncated---

Record: DEBIAN-CVE-2023-53252
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:23947.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2024:2394
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-532527.8

Record: UBUNTU-CVE-2023-53252
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVCLSA-2025-1764151168No score

kernel: Fix of 40 CVEs

perf/aux: Fix AUX buffer serialization {CVE-2024-46713}
block: fix uaf for flush rq while iterating tags {CVE-2024-53170}
zram: fix potential UAF of zram table {CVE-2025-21671}
sched: sch_cake: add bounds checks to host bulk flow fairness counts {CVE-2025-21647}
bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors {CVE-2024-56675}
net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789}
isofs: Prevent the use of too small fid {CVE-2025-37780}
net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749}
sctp: detect and prevent references to a freed transport in sendmsg {CVE-2025-23142}
ipv6: sr: Fix MAC comparison to be constant-time {CVE-2025-39702}
RDMA/rxe: Fix incomplete state save in rxe_requester {CVE-2023-53539}
crypto: xts - Handle EBUSY correctly {CVE-2023-53494}
Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252}
af_unix: Fix data-races around user->unix_inflight. {CVE-2023-53204}
fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-50367}
wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072}
wifi: rtlwifi: remove unused dualmac control leftovers
wifi: rtlwifi: remove unused timer and related code
partitions: mac: fix handling of bogus partition table {CVE-2025-21772}
ipmr: do not call mr_mfc_uses_dev() for unres entries {CVE-2025-21719}
wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014}
net: mdio: validate parameter addr in mdiobus_get_phy() {CVE-2023-53019}
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751}
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() {CVE-2025-39730}
net/mlx5e: Check for NOT_READY flag state after locking {CVE-2023-53581}
null_blk: Always check queue mode setting from configfs {CVE-2023-53576}
ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559}
rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() {CVE-2023-53558}
pstore/ram: Check start of empty przs during init {CVE-2023-53331}
wifi: ath11k: fix memory leak in WMI firmware stats {CVE-2023-53602}
wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta {CVE-2023-53229}
net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() {CVE-2022-50486}
RDMA/core: Make sure "ib_port" is valid when access sysfs node {CVE-2022-50475}
RDMA/rxe: Fix mr->map double free {CVE-2022-50543}
scsi: qla2xxx: Fix end of loop test
scsi: qla2xxx: Fix mem access after free
scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
scsi: target: Fix multiple LUN_RESET handling {CVE-2023-53586}
scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675}
scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses {CVE-2023-53675}
scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() {CVE-2023-53675}
scsi: lpfc: Fix buffer free/clear order in deferred receive path {CVE-2025-39841}
nbd: fix incomplete validation of ioctl arg {CVE-2023-53513}
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817}
bnxt: avoid overflow in bnxt_get_nvram_directory() {CVE-2023-53661}

Record: CLSA-2025-1764151168
Updated: 2026-11-02

OSVCLSA-2026-1789141176No score

kernel: Fix of 131 CVEs

net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers {CVE-2026-74700}
ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
tipc: read le->link under the node lock in tipc_node_link_down() {CVE-2026-74609}
ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
bpf, sockmap: Fix sk_redir use-after-free in send verdict {CVE-2026-74589}
sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565}
scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
geneve: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}
sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
net/packet: reset the MAC header on the packet-socket transmit path {CVE-2026-74667}
ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}
RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
drm/i915: Fix potential UAF in TTM object purge {CVE-2026-63884}
wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request {CVE-2026-68363}
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}
sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
Bluetooth: hci_sync: Protect UUID list traversal {CVE-2026-68189}
net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
libceph: remove debugfs files before client teardown {CVE-2026-68153}
media: rtl2832: fix use-after-free in rtl2832_remove() {CVE-2026-68214}
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async {CVE-2026-64219}
pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
fbdev: Fix invalid page access after closing deferred I/O devices {CVE-2023-52731}
Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252}
net_sched: red: fix a race in __red_change() {CVE-2025-38108}
iio: event: Fix event FIFO reset race {CVE-2026-64496}
netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
openvswitch: fix GSO userspace truncation underflow {CVE-2026-68123}
media: cx23885: add ioremap return check and cleanup {CVE-2026-68226}
tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev {CVE-2026-68176} -…

Record: CLSA-2026-1789141176
Updated: 2026-11-02

OSVSUSE-SU-2025:03600-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do not BUG…

Record: SUSE-SU-2025:03600-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03615-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53257: wifi: mac80211: check S1G action frame size (bsc#1249869).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1245666).
CVE-2025-38380: i2c/designware: Fix an initialization issue (bsc#1247028).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38706: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1249195).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (bsc#1249374).
CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (bsc#1249315).
CVE-2025-39726: s390/ism: fix concurrency management in ism_cmd() (bsc#1249266).
CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1249516).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1249548).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).
CVE-2025-39824: HID: asus: fix UAF via HID_CLAIMED_INPUT validation (bsc#1250007).
CVE-2025-39860: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (bsc#1250247).
CVE-2025-39869: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (bsc#1250406).

The following non-security bugs were fixed:

!CONFIG & reference -> this is bug, immediate fail
CONFIG & no reference -> OK temporarily, must be resolved eventually
Do not self obsolete older kernel variants
Kconfig.suse: Add KABI checkiness macro (config) (bsc#1249186).
Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108).
Update config files. (bsc#1249186) Enable where we define KABI refs + rely on Kconfig deps.
build_bug.h: Add KABI assert (bsc#1249186).
hv_netvsc: Fix panic during namespace deletion with VF (bsc#1248111).
kernel-binary: Another installation ordering fix (bsc#1241353).
kernel-source: Do not list mkspec and its inputs as sources (bsc#1250522).
kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
kernel-syms.spec: Drop…

Record: SUSE-SU-2025:03615-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03634-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38245: atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister() (bsc#1246193).
CVE-2025-38251: atm: clip: prevent NULL deref in clip_push() (bsc#1246181).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38360: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (bsc#1247078).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38439: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (bsc#1247155).
CVE-2025-38441: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (bsc#1247167).
CVE-2025-38444: raid10: cleanup memleak at raid10_make_request (bsc#1247162).
CVE-2025-38445: md/raid1: Fix stack memory use after return in raid1_reshape (bsc#1247229).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38458: atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (bsc#1247116).
CVE-2025-38459: atm: clip: Fix infinite recursive call of clip_push() (bsc#1247119).
CVE-2025-38464: tipc: Fix use-after-free in tipc_conn_close() (bsc#1247112).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38472: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (bsc#1247313).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (bsc#1247243).
CVE-2025-38491: mptcp: make fallback action and fallback decision…

Record: SUSE-SU-2025:03634-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20851-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do…

Record: SUSE-SU-2025:20851-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20861-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do…

Record: SUSE-SU-2025:20861-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20870-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4:…

Record: SUSE-SU-2025:20870-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20898-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4:…

Record: SUSE-SU-2025:20898-1
Updated: 2026-11-02

OSVSUSE-SU-2025:3751-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do not…

Record: SUSE-SU-2025:3751-1
Updated: 2026-11-02

OSVSUSE-SU-2025:3761-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53257: wifi: mac80211: check S1G action frame size (bsc#1249869).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1245666).
CVE-2025-38380: i2c/designware: Fix an initialization issue (bsc#1247028).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38706: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1249195).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (bsc#1249374).
CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (bsc#1249315).
CVE-2025-39726: s390/ism: fix concurrency management in ism_cmd() (bsc#1249266).
CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1249516).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1249548).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).
CVE-2025-39824: HID: asus: fix UAF via HID_CLAIMED_INPUT validation (bsc#1250007).
CVE-2025-39860: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (bsc#1250247).
CVE-2025-39869: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (bsc#1250406).

The following non-security bugs were fixed:

Kconfig.suse: Add KABI checkiness macro (config) (bsc#1249186).
Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108).
Revert selinux patches that caused regressions (bsc#1249353).
btrfs: avoid NULL pointer dereference if no valid extent tree (bsc#1249158).
build_bug.h: Add KABI assert (bsc#1249186).
hv_netvsc: Fix panic during namespace deletion with VF (bsc#1248111).
kabi/severities: ignore kABI for atheros helper modules The symbols are used only internally by atheros drivers.
kernel-binary: Another installation ordering fix (bsc#1241353).
kernel-source: Do not list mkspec and its inputs as sources (bsc#1250522).
kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
kernel-syms.spec: Drop…

Record: SUSE-SU-2025:3761-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4057-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051). -…

Record: SUSE-SU-2025:4057-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4132-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…

Record: SUSE-SU-2025:4132-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4141-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…

Record: SUSE-SU-2025:4141-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`linux-lts` Alpaquita:23	6.1.38-r0 up to 6.1.42-r0	6.1.42-r0
`linux-lts` Alpaquita:stream	6.1.112-r0 up to 6.6.58-r0	6.6.58-r0
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.7.els24	7.0.0-284.1101.el9_2.tuxcare.7.els24
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-cross-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-doc` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-tools` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-tools-libs` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`libbpf` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els24	2:1.0.0-2.el9_2.tuxcare.7.els24
`libbpf-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els24	2:1.0.0-2.el9_2.tuxcare.7.els24
`libbpf-static` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els24	2:1.0.0-2.el9_2.tuxcare.7.els24
`perf` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`python3-perf` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`rtla` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`bpftool` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-core` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-cross-headers` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-debug` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-debug-core` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-debug-devel` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-debug-modules` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-debug-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-debug-modules-internal` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-devel` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-headers` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-ipaclones-internal` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-modules` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`Kernel` Linux	5.17.0 up to 6.1.42, 6.2.0 up to 6.4.7	6.1.426.4.7
`linux` Debian:12	before 6.1.52-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+1	6.1.52-1
`linux` Debian:13	before 6.4.11-1	6.4.11-1
`linux` Debian:14	before 6.4.11-1	6.4.11-1
`bpftool-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:7.3.0-427.13.1.el9_4	0:7.3.0-427.13.1.el9_4
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`rv` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`bpftool` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:7.3.0-427.13.1.el9_4	0:7.3.0-427.13.1.el9_4
`bpftool-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:7.3.0-427.13.1.el9_4	0:7.3.0-427.13.1.el9_4
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-tools` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-tools-libs` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-zfcpdump` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1.150600.12.32.1	6.4.0-150600.23.73.1.150600.12.32.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-livepatch-SLE15-SP6_Update_16` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 346 CVEs	before 1-150600.13.3.1	1-150600.13.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1.150600.12.32.1	6.4.0-150600.23.73.1.150600.12.32.1
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1.150500.6.59.1	5.14.21-150500.55.124.1.150500.6.59.1
`kernel-source` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-livepatch-SLE15-SP5_Update_31` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 378 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1.150500.6.59.1	5.14.21-150500.55.124.1.150500.6.59.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1.150500.6.59.1	5.14.21-150500.55.124.1.150500.6.59.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1.150500.6.59.1	5.14.21-150500.55.124.1.150500.6.59.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1.150500.6.59.1	5.14.21-150500.55.124.1.150500.6.59.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-35.1.21.12	6.4.0-35.1.21.12
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-35.1.21.12	6.4.0-35.1.21.12
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-37.1	6.4.0-37.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-37.1	6.4.0-37.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-37.1	6.4.0-37.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-37.1	6.4.0-37.1
`kernel-livepatch-SLE15-SP6-RT_Update_16` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 346 CVEs	before 1-150600.1.3.1	1-150600.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 378 CVEs	before 5.14.21-150500.13.109.1	5.14.21-150500.13.109.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 378 CVEs	before 5.14.21-150500.13.109.1	5.14.21-150500.13.109.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-nvidia-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15	None known
`linux-nvidia-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15 Show 6 moreShow less 6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25	None known
`linux-oem-5.17` Ubuntu:22.04:LTS	All versions, plus listed versions 5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13 Show 21 moreShow less 5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36	None known
`linux-oem-6.0` Ubuntu:22.04:LTS	All versions, plus listed versions 6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10 Show 11 moreShow less 6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-53252 is a high vulnerability (CVSS 7.8) in Linux, published September 24, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. Fixed in linux-lts 6.1.42-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 121 package rows, 29 versions, 3,662 references and the rest of 13 source descriptions. The JSON record has them.