CVE-2023-53492

netfilter: nf_tables: do not ignore genmask when looking up chain by id

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: do not ignore genmask when looking up chain by id

When adding a rule to a chain referring to its ID, if that chain had been deleted on the same batch, the rule might end up referring to a deleted chain.

This will lead to a WARNING like following:

[ 33.098431] ------------[ cut here ]------------ [ 33.098678] WARNING: CPU: 5 PID: 69 at net/netfilter/nf_tables_api.c:2037 nf_tables_chain_destroy+0x23d/0x260 [ 33.099217] Modules linked in: [ 33.099388] CPU: 5 PID: 69 Comm: kworker/5:1 Not tainted 6.4.0+ #409 [ 33.099726] Workqueue: events nf_tables_trans_destroy_work [ 33.100018] RIP: 0010:nf_tables_chain_destroy+0x23d/0x260 [ 33.100306] Code: 8b 7c 24 68 e8 64 9c ed fe 4c 89 e7 e8 5c 9c ed fe 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d 31 c0 89 c6 89 c7 c3 cc cc cc cc <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d 31 c0 89 c6 89 c7 [ 33.101271] RSP: 0018:ffffc900004ffc48 EFLAGS: 00010202 [ 33.101546] RAX: 0000000000000001 RBX: ffff888006fc0a28 RCX: 0000000000000000 [ 33.101920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.102649] RBP: ffffc900004ffc78 R08: 0000000000000000 R09: 0000000000000000 [ 33.103018] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880135ef500 [ 33.103385] R13: 0000000000000000 R14: dead000000000122 R15: ffff888006fc0a10 [ 33.103762] FS: 0000000000000000(0000) GS:ffff888024c80000(0000) knlGS:0000000000000000 [ 33.104184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.104493] CR2: 00007fe863b56a50 CR3: 00000000124b0001 CR4: 0000000000770ee0 [ 33.104872] PKRU: 55555554 [ 33.104999] Call Trace: [ 33.105113] <TASK> [ 33.105214] ? show_regs+0x72/0x90 [ 33.105371] ? __warn+0xa5/0x210 [ 33.105520] ? nf_tables_chain_destroy+0x23d/0x260 [ 33.105732] ? report_bug+0x1f2/0x200 [ 33.105902] ? handle_bug+0x46/0x90 [ 33.106546] ? exc_invalid_op+0x19/0x50 [ 33.106762] ? asm_exc_invalid_op+0x1b/0x20 [ 33.106995] ? nf_tables_chain_destroy+0x23d/0x260 [ 33.107249] ? nf_tables_chain_destroy+0x30/0x260 [ 33.107506] nf_tables_trans_destroy_work+0x669/0x680 [ 33.107782] ? mark_held_locks+0x28/0xa0 [ 33.107996] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [ 33.108294] ? _raw_spin_unlock_irq+0x28/0x70 [ 33.108538] process_one_work+0x68c/0xb70 [ 33.108755] ? lock_acquire+0x17f/0x420 [ 33.108977] ? __pfx_process_one_work+0x10/0x10 [ 33.109218] ? do_raw_spin_lock+0x128/0x1d0 [ 33.109435] ? _raw_spin_lock_irq+0x71/0x80 [ 33.109634] worker_thread+0x2bd/0x700 [ 33.109817] ? __pfx_worker_thread+0x10/0x10 [ 33.110254] kthread+0x18b/0x1d0 [ 33.110410] ? __pfx_kthread+0x10/0x10 [ 33.110581] ret_from_fork+0x29/0x50 [ 33.110757] </TASK> [ 33.110866] irq event stamp: 1651 [ 33.111017] hardirqs last enabled at (1659): [<ffffffffa206a209>] __up_console_sem+0x79/0xa0 [ 33.111379] hardirqs last disabled at (1666): [<ffffffffa206a1ee>] __up_console_sem+0x5e/0xa0 [ 33.111740] softirqs last enabled at (1616): [<ffffffffa1f5d40e>] __irq_exit_rcu+0x9e/0xe0 [ 33.112094] softirqs last disabled at (1367): [<ffffffffa1f5d40e>] __irq_exit_rcu+0x9e/0xe0 [ 33.112453] ---[ end trace 0000000000000000 ]---

This is due to the nft_chain_lookup_byid ignoring the genmask. After this change, adding the new rule will fail as it will not find the chain.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.17%Up 0.1 points since Oct 1, 2025

What each source reports

CVE List Score used 7.8

netfilter: nf_tables: do not ignore genmask when looking up chain by id

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: do not ignore genmask when looking up chain by id

When adding a rule to a chain referring to its ID, if that chain had been deleted on the same batch, the rule might end up referring to a deleted chain.

This will lead to a WARNING like following:

This is due to the nft_chain_lookup_byid ignoring the genmask. After this change, adding the new rule will fail as it will not find the chain.

Record: CVE-2023-53492
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2025-32758 7.8

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: do not ignore genmask when looking up chain by id

When adding a rule to a chain referring to its ID, if that chain had been deleted on the same batch, the rule might end up referring to a deleted chain.

This will lead to a WARNING like following:

This is due to the nft_chain_lookup_byid ignoring the genmask. After this change, adding the new rule will fail as it will not find the chain.

Record: EUVD-2025-32758
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-rj62-f3v9-qqwj 7.8

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not...

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: do not ignore genmask when looking up chain by id

When adding a rule to a chain referring to its ID, if that chain had been deleted on the same batch, the rule might end up referring to a deleted chain.

This will lead to a WARNING like following:

This is due to the nft_chain_lookup_byid ignoring the genmask. After this change, adding the new rule will fail as it will not find the chain.

Record: GHSA-rj62-f3v9-qqwj
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: do not ignore genmask when looking up chain by id

When adding a rule to a chain referring to its ID, if that chain had been deleted on the same batch, the rule might end up referring to a deleted chain.

This will lead to a WARNING like following:

This is due to the nft_chain_lookup_byid ignoring the genmask. After this change, adding the new rule will fail as it will not find the chain.

Record: CVE-2023-53492
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVBELL-CVE-2023-53492 7.8

Record: BELL-CVE-2023-53492
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

netfilter: nf_tables: do not ignore genmask when looking up chain by id

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: do not ignore genmask when looking up chain by id

When adding a rule to a chain referring to its ID, if that chain had been deleted on the same batch, the rule might end up referring to a deleted chain.

This will lead to a WARNING like following:

This is due to the nft_chain_lookup_byid ignoring the genmask. After this change, adding the new rule will fail as it will not find the chain.

Record: CVE-2023-53492
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 20 moreShow less

OSVDEBIAN-CVE-2023-53492 7.8

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not ignore genmask when looking up chain by id When adding a rule to a chain referring to its ID, if that chain had been deleted on the same batch, the rule might end up referring to a deleted chain. This will lead to a WARNING like following: [ 33.098431] ------------[ cut here ]------------ [ 33.098678] WARNING: CPU: 5 PID: 69 at net/netfilter/nf_tables_api.c:2037 nf_tables_chain_destroy+0x23d/0x260 [ 33.099217] Modules linked in: [ 33.099388] CPU: 5 PID: 69 Comm: kworker/5:1 Not tainted 6.4.0+ #409 [ 33.099726] Workqueue: events nf_tables_trans_destroy_work [ 33.100018] RIP: 0010:nf_tables_chain_destroy+0x23d/0x260 [ 33.100306] Code: 8b 7c 24 68 e8 64 9c ed fe 4c 89 e7 e8 5c 9c ed fe 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d 31 c0 89 c6 89 c7 c3 cc cc cc cc <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d 31 c0 89 c6 89 c7 [ 33.101271] RSP: 0018:ffffc900004ffc48 EFLAGS: 00010202 [ 33.101546] RAX: 0000000000000001 RBX: ffff888006fc0a28 RCX: 0000000000000000 [ 33.101920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.102649] RBP: ffffc900004ffc78 R08: 0000000000000000 R09: 0000000000000000 [ 33.103018] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880135ef500 [ 33.103385] R13: 0000000000000000 R14: dead000000000122 R15: ffff888006fc0a10 [ 33.103762] FS: 0000000000000000(0000) GS:ffff888024c80000(0000) knlGS:0000000000000000 [ 33.104184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.104493] CR2: 00007fe863b56a50 CR3: 00000000124b0001 CR4: 0000000000770ee0 [ 33.104872] PKRU: 55555554 [ 33.104999] Call Trace: [ 33.105113] <TASK> [ 33.105214] ? show_regs+0x72/0x90 [ 33.105371] ? __warn+0xa5/0x210 [ 33.105520] ? nf_tables_chain_destroy+0x23d/0x260 [ 33.105732] ? report_bug+0x1f2/0x200 [ 33.105902] ? handle_bug+0x46/0x90 [ 33.106546] ? exc_invalid_op+0x19/0x50 [ 33.106762] ? asm_exc_invalid_op+0x1b/0x20 [ 33.106995] ? nf_tables_chain_destroy+0x23d/0x260 [ 33.107249] ? nf_tables_chain_destroy+0x30/0x260 [ 33.107506] nf_tables_trans_destroy_work+0x669/0x680 [ 33.107782] ? mark_held_locks+0x28/0xa0 [ 33.107996] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [ 33.108294] ? _raw_spin_unlock_irq+0x28/0x70 [ 33.108538] process_one_work+0x68c/0xb70 [ 33.108755] ? lock_acquire+0x17f/0x420 [ 33.108977] ? __pfx_process_one_work+0x10/0x10 [ 33.109218] ? do_raw_spin_lock+0x128/0x1d0 [ 33.109435] ? _raw_spin_lock_irq+0x71/0x80 [ 33.109634] worker_thread+0x2bd/0x700 [ 33.109817] ? __pfx_worker_thread+0x10/0x10 [ 33.110254] kthread+0x18b/0x1d0 [ 33.110410] ? __pfx_kthread+0x10/0x10 [ 33.110581] ret_from_fork+0x29/0x50 [ 33.110757] </TASK> [ 33.110866] irq event stamp: 1651 [ 33.111017] hardirqs last enabled at (1659): [<ffffffffa206a209>] __up_console_sem+0x79/0xa0 [ 33.111379] hardirqs last disabled at (1666): [<ffffffffa206a1ee>] __up_console_sem+0x5e/0xa0 [ 33.111740] softirqs last enabled at (1616): [<ffffffffa1f5d40e>] __irq_exit_rcu+0x9e/0xe0 [ 33.112094] softirqs last disabled at (1367): [<ffffffffa1f5d40e>] __irq_exit_rcu+0x9e/0xe0 [ 33.112453] ---[ end trace 0000000000000000 ]--- This is due to the nft_chain_lookup_byid ignoring the genmask. After this change, adding the new rule will fail as it will not find the chain.

Record: DEBIAN-CVE-2023-53492
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5604 7.8

Red Hat Security Advisory: kernel security and bug fix update

Record: RHSA-2023:5604
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:6583 8.2

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2023:6583
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-53492 8.5

Record: UBUNTU-CVE-2023-53492
CVSS 4.0: 8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-03

OSVSUSE-SU-2025:03600-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do not BUG…

Record: SUSE-SU-2025:03600-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03613-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50248: wifi: iwlwifi: mvm: fix double free on tx path (bsc#1249840).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50258: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (bsc#1249947).
CVE-2022-50381: md: fix a crash in mempool_free (bsc#1250257).
CVE-2022-50386: Bluetooth: L2CAP: Fix user-after-free (bsc#1250301).
CVE-2022-50401: nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (bsc#1250140).
CVE-2022-50408: wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (bsc#1250391).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2025-21969: kABI workaround for l2cap_conn changes (bsc#1240784).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).

The following non-security bugs were fixed:

Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108).
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (git-fixes).
kernel-binary: Another installation ordering fix (bsc#1241353).
kernel-source: Do not list mkspec and its inputs as sources (bsc#1250522).
kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
kernel-syms.spec: Drop old rpm release number hack (bsc#1247172).
rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879)
rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337)
rpm: Configure KABI checkingness macro (bsc#1249186)
rpm: Drop support for kabi/arch/ignore-flavor (bsc#1249186)
rpm: Link arch-symbols script from scripts directory.
rpm: Link guards script from scripts directory.
use uniform permission checks for all mount propagation changes (git-fixes).

Record: SUSE-SU-2025:03613-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03615-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53257: wifi: mac80211: check S1G action frame size (bsc#1249869).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1245666).
CVE-2025-38380: i2c/designware: Fix an initialization issue (bsc#1247028).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38706: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1249195).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (bsc#1249374).
CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (bsc#1249315).
CVE-2025-39726: s390/ism: fix concurrency management in ism_cmd() (bsc#1249266).
CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1249516).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1249548).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).
CVE-2025-39824: HID: asus: fix UAF via HID_CLAIMED_INPUT validation (bsc#1250007).
CVE-2025-39860: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (bsc#1250247).
CVE-2025-39869: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (bsc#1250406).

The following non-security bugs were fixed:

!CONFIG & reference -> this is bug, immediate fail
CONFIG & no reference -> OK temporarily, must be resolved eventually
Do not self obsolete older kernel variants
Kconfig.suse: Add KABI checkiness macro (config) (bsc#1249186).
Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108).
Update config files. (bsc#1249186) Enable where we define KABI refs + rely on Kconfig deps.
build_bug.h: Add KABI assert (bsc#1249186).
hv_netvsc: Fix panic during namespace deletion with VF (bsc#1248111).
kernel-binary: Another installation ordering fix (bsc#1241353).
kernel-source: Do not list mkspec and its inputs as sources (bsc#1250522).
kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
kernel-syms.spec: Drop…

Record: SUSE-SU-2025:03615-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03626-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50248: wifi: iwlwifi: mvm: fix double free on tx path (bsc#1249840).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50258: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (bsc#1249947).
CVE-2022-50381: md: fix a crash in mempool_free (bsc#1250257).
CVE-2022-50386: Bluetooth: L2CAP: Fix user-after-free (bsc#1250301).
CVE-2022-50401: nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (bsc#1250140).
CVE-2022-50408: wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (bsc#1250391).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2022-50412: drm: bridge: adv7511: unregister cec i2c device after cec adapter (bsc#1250189).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53220: media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (bsc#1250337).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2024-53093: nvme-multipath: defer partition scanning (bsc#1233640).
CVE-2025-21969: kABI workaround for l2cap_conn changes (bsc#1240784).
CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).

The following non-security bugs were fixed:

Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108).
git_sort: Make tests independent of environment.
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (git-fixes).
kernel-binary: Another installation ordering fix (bsc#1241353).
kernel-source: Do not list mkspec and its inputs as sources (bsc#1250522).
kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346).
kernel-syms.spec: Drop old rpm release number hack (bsc#1247172).
rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879).
rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337).
rpm: Configure KABI checkingness macro (bsc#1249186).
rpm: Drop support for kabi/arch/ignore-flavor (bsc#1249186).
scripts/python/kss-dashboard: attempt getting smash data
scripts/python/kss-dashboard: fetch into repos if stale
scripts/python/kss-dashboard: implement CVSSv3.1 score consistency check
scripts/python/kss-dashboard: prepare for the alternative CVE branch
scripts/python/kss-dashboard: simplify control flow
scripts/python/kss-dashboard: speed up patch checking a bit
scripts/python/kss-dashboard: use…

Record: SUSE-SU-2025:03626-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03628-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
CVE-2025-38084: mm/hugetlb: unshare page tables during VMA split, not before (bsc#1245498).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245499).
CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1245666).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38380: i2c/designware: Fix an initialization issue (bsc#1247028).
CVE-2025-38470: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (bsc#1247288).
CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38706: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1249195).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (bsc#1249374).
CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (bsc#1249315).
CVE-2025-39726: s390/ism: fix concurrency management in ism_cmd() (bsc#1249266).
CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1249516).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1249548).
CVE-2025-39797: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (bsc#1249608).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).
CVE-2025-39824: HID: asus: fix UAF via HID_CLAIMED_INPUT validation (bsc#1250007).
CVE-2025-39860: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (bsc#1250247).
CVE-2025-39869: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (bsc#1250406).

The following non-security bugs were fixed:

Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to…

Record: SUSE-SU-2025:03628-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03634-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38245: atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister() (bsc#1246193).
CVE-2025-38251: atm: clip: prevent NULL deref in clip_push() (bsc#1246181).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38360: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (bsc#1247078).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38439: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (bsc#1247155).
CVE-2025-38441: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (bsc#1247167).
CVE-2025-38444: raid10: cleanup memleak at raid10_make_request (bsc#1247162).
CVE-2025-38445: md/raid1: Fix stack memory use after return in raid1_reshape (bsc#1247229).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38458: atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (bsc#1247116).
CVE-2025-38459: atm: clip: Fix infinite recursive call of clip_push() (bsc#1247119).
CVE-2025-38464: tipc: Fix use-after-free in tipc_conn_close() (bsc#1247112).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38472: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (bsc#1247313).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (bsc#1247243).
CVE-2025-38491: mptcp: make fallback action and fallback decision…

Record: SUSE-SU-2025:03634-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20851-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do…

Record: SUSE-SU-2025:20851-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20861-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do…

Record: SUSE-SU-2025:20861-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20870-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4:…

Record: SUSE-SU-2025:20870-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20898-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4:…

Record: SUSE-SU-2025:20898-1
Updated: 2026-11-02

OSVSUSE-SU-2025:3716-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
CVE-2025-38084: mm/hugetlb: unshare page tables during VMA split, not before (bsc#1245498).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245499).
CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1245666).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38380: i2c/designware: Fix an initialization issue (bsc#1247028).
CVE-2025-38470: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (bsc#1247288).
CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38706: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1249195).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (bsc#1249374).
CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (bsc#1249315).
CVE-2025-39726: s390/ism: fix concurrency management in ism_cmd() (bsc#1249266).
CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1249516).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1249548).
CVE-2025-39797: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (bsc#1249608).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).
CVE-2025-39824: HID: asus: fix UAF via HID_CLAIMED_INPUT validation (bsc#1250007).
CVE-2025-39860: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (bsc#1250247).
CVE-2025-39869: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (bsc#1250406).

The following non-security bugs were fixed:

Kconfig.suse: Add KABI checkiness macro (config) (bsc#1249186).
Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108).
Revert backported patches for bsc#1238160.
btrfs: avoid NULL pointer dereference if…

Record: SUSE-SU-2025:3716-1
Updated: 2026-11-02

OSVSUSE-SU-2025:3751-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do not…

Record: SUSE-SU-2025:3751-1
Updated: 2026-11-02

OSVSUSE-SU-2025:3761-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53257: wifi: mac80211: check S1G action frame size (bsc#1249869).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1245666).
CVE-2025-38380: i2c/designware: Fix an initialization issue (bsc#1247028).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38706: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1249195).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (bsc#1249374).
CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (bsc#1249315).
CVE-2025-39726: s390/ism: fix concurrency management in ism_cmd() (bsc#1249266).
CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1249516).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1249548).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).
CVE-2025-39824: HID: asus: fix UAF via HID_CLAIMED_INPUT validation (bsc#1250007).
CVE-2025-39860: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (bsc#1250247).
CVE-2025-39869: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (bsc#1250406).

The following non-security bugs were fixed:

Kconfig.suse: Add KABI checkiness macro (config) (bsc#1249186).
Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108).
Revert selinux patches that caused regressions (bsc#1249353).
btrfs: avoid NULL pointer dereference if no valid extent tree (bsc#1249158).
build_bug.h: Add KABI assert (bsc#1249186).
hv_netvsc: Fix panic during namespace deletion with VF (bsc#1248111).
kabi/severities: ignore kABI for atheros helper modules The symbols are used only internally by atheros drivers.
kernel-binary: Another installation ordering fix (bsc#1241353).
kernel-source: Do not list mkspec and its inputs as sources (bsc#1250522).
kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
kernel-syms.spec: Drop…

Record: SUSE-SU-2025:3761-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4057-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051). -…

Record: SUSE-SU-2025:4057-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4132-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…

Record: SUSE-SU-2025:4132-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4141-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…

Record: SUSE-SU-2025:4141-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`linux-lts` Alpaquita:23	6.1.38-r0 up to 6.1.42-r0	6.1.42-r0
`linux-lts` Alpaquita:stream	6.1.112-r0 up to 6.6.58-r0	6.6.58-r0
`Kernel` Linux	5.9.0 up to 5.10.188, 5.11.0 up to 5.15.121, 5.16.0 up to 6.1.39, 6.2.0 up to 6.4.4	5.10.1885.15.1216.1.396.4.4
`linux` Debian:12	before 6.1.52-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+1	6.1.52-1
`linux` Debian:13	before 6.4.4-1	6.4.4-1
`linux` Debian:14	before 6.4.4-1	6.4.4-1
`bpftool-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debug-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debug-devel` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debug-devel-matched` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debuginfo-common-aarch64` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debuginfo-common-ppc64le` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debuginfo-common-s390x` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debuginfo-common-x86_64` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-devel` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-devel-matched` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-doc` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-tools-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-zfcpdump-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-zfcpdump-devel` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-zfcpdump-devel-matched` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`perf` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`perf-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`python3-perf-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`bpftool` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`bpftool-debuginfo` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-abi-stablelists` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-core` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debug` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debug-core` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debug-debuginfo` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debug-modules` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debug-modules-extra` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debuginfo` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debuginfo-common-aarch64` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debuginfo-common-ppc64le` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debuginfo-common-s390x` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debuginfo-common-x86_64` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-modules` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-modules-extra` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-tools` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-tools-debuginfo` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-tools-libs` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-zfcpdump` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-zfcpdump-core` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-zfcpdump-debuginfo` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-zfcpdump-modules` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-zfcpdump-modules-extra` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`perf-debuginfo` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`python3-perf` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`python3-perf-debuginfo` Red Hat:rhel_eus:9.0::baseos From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`bpftool-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debug-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debuginfo-common-aarch64` Red Hat:rhel_eus:9.0::crb From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debuginfo-common-ppc64le` Red Hat:rhel_eus:9.0::crb From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debuginfo-common-s390x` Red Hat:rhel_eus:9.0::crb From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-debuginfo-common-x86_64` Red Hat:rhel_eus:9.0::crb From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-tools-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-tools-libs-devel` Red Hat:rhel_eus:9.0::crb From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`kernel-zfcpdump-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`perf-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`python3-perf-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 10 CVEs	before 0:5.14.0-70.75.1.el9_0	0:5.14.0-70.75.1.el9_0
`bpftool-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:7.2.0-362.8.1.el9_3	0:7.2.0-362.8.1.el9_3
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`rv` Red Hat:enterprise_linux:9::appstream From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`bpftool` Red Hat:enterprise_linux:9::baseos From an advisory covering 502 CVEs	before 0:7.2.0-362.8.1.el9_3	0:7.2.0-362.8.1.el9_3
`bpftool-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 502 CVEs	before 0:7.2.0-362.8.1.el9_3	0:7.2.0-362.8.1.el9_3
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 502 CVEs	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1.150600.12.32.1	6.4.0-150600.23.73.1.150600.12.32.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-livepatch-SLE15-SP6_Update_16` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 346 CVEs	before 1-150600.13.3.1	1-150600.13.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1.150600.12.32.1	6.4.0-150600.23.73.1.150600.12.32.1
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 79 CVEs	before 5.3.18-150300.223.1	5.3.18-150300.223.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 79 CVEs	before 5.3.18-150300.223.1	5.3.18-150300.223.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 79 CVEs	before 5.3.18-150300.223.1	5.3.18-150300.223.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 79 CVEs	before 5.3.18-150300.223.1	5.3.18-150300.223.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1.150500.6.59.1	5.14.21-150500.55.124.1.150500.6.59.1
`kernel-source` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-livepatch-SLE15-SP5_Update_31` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 378 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1.150500.6.59.1	5.14.21-150500.55.124.1.150500.6.59.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1.150500.6.59.1	5.14.21-150500.55.124.1.150500.6.59.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1.150500.6.59.1	5.14.21-150500.55.124.1.150500.6.59.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1.150500.6.59.1	5.14.21-150500.55.124.1.150500.6.59.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP3 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-livepatch-SLE15-SP3_Update_62` SUSE:Linux Enterprise Live Patching 15 SP3 From an advisory covering 84 CVEs	before 1-150300.7.3.1	1-150300.7.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP3 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1.150300.18.132.1	5.3.18-150300.59.221.1.150300.18.132.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-preempt` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1.150300.18.132.1	5.3.18-150300.59.221.1.150300.18.132.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-preempt` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1.150300.18.132.1	5.3.18-150300.59.221.1.150300.18.132.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-preempt` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-default` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1.150300.18.132.1	5.3.18-150300.59.221.1.150300.18.132.1
`kernel-default` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1.150300.18.132.1	5.3.18-150300.59.221.1.150300.18.132.1
`kernel-64kb` SUSE:Enterprise Storage 7.1 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-default` SUSE:Enterprise Storage 7.1 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-default-base` SUSE:Enterprise Storage 7.1 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1.150300.18.132.1	5.3.18-150300.59.221.1.150300.18.132.1
`kernel-docs` SUSE:Enterprise Storage 7.1 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-obs-build` SUSE:Enterprise Storage 7.1 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-preempt` SUSE:Enterprise Storage 7.1 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-source` SUSE:Enterprise Storage 7.1 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-syms` SUSE:Enterprise Storage 7.1 From an advisory covering 84 CVEs	before 5.3.18-150300.59.221.1	5.3.18-150300.59.221.1
`kernel-default` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 326 CVEs	before 5.14.21-150400.24.179.1	5.14.21-150400.24.179.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 326 CVEs	before 5.14.21-150400.24.179.1.150400.24.92.1	5.14.21-150400.24.179.1.150400.24.92.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1040.45~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 15 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	5.15.0-1040.45~20.04.1
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1042.49~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 17 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.1	5.15.0-1042.49~20.04.1
`linux-gcp-5.15` Ubuntu:20.04:LTS	before 5.15.0-1038.46~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 15 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.1	5.15.0-1038.46~20.04.1
`linux-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-78.85~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 15 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.1	5.15.0-78.85~20.04.1
`linux-intel-iotg-5.15` Ubuntu:20.04:LTS	before 5.15.0-1036.41~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 11 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.1	5.15.0-1036.41~20.04.1
`linux-lowlatency-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-78.85~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 14 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.1	5.15.0-78.85~20.04.1
`linux-nvidia-tegra-5.15` Ubuntu:20.04:LTS	before 5.15.0-1016.16~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1	5.15.0-1016.16~20.04.1
`linux-oracle-5.15` Ubuntu:20.04:LTS	before 5.15.0-1039.45~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 14 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.1	5.15.0-1039.45~20.04.1
`linux-riscv-5.15` Ubuntu:20.04:LTS	before 5.15.0-1037.41~20.04.2, plus listed versions 5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1 Show 12 moreShow less 5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.2	5.15.0-1037.41~20.04.2
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux` Ubuntu:22.04:LTS	before 5.15.0-78.85, plus listed versions 5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23 Show 28 moreShow less 5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.83	5.15.0-78.85
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws` Ubuntu:22.04:LTS	before 5.15.0-1040.45, plus listed versions 5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7 Show 24 moreShow less 5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.44	5.15.0-1040.45
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-azure` Ubuntu:22.04:LTS	before 5.15.0-1042.49, plus listed versions 5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6 Show 25 moreShow less 5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.48	5.15.0-1042.49
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-fde` Ubuntu:22.04:LTS	before 5.15.0-1042.49.1, plus listed versions 5.15.0-1019.24.15.15.0-1024.30.15.15.0-1029.36.15.15.0-1030.37.15.15.0-1031.38.1 Show 8 moreShow less 5.15.0-1033.40.15.15.0-1034.41.15.15.0-1035.42.15.15.0-1036.43.15.15.0-1037.44.15.15.0-1038.45.15.15.0-1039.46.15.15.0-1041.48.1	5.15.0-1042.49.1
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-gcp` Ubuntu:22.04:LTS	before 5.15.0-1038.46, plus listed versions 5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7 Show 22 moreShow less 5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.245.15.0-1019.255.15.0-1021.285.15.0-1022.295.15.0-1025.325.15.0-1026.335.15.0-1027.345.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1032.405.15.0-1034.425.15.0-1035.435.15.0-1036.445.15.0-1037.45	5.15.0-1038.46
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-gke` Ubuntu:22.04:LTS	before 5.15.0-1038.43, plus listed versions 5.15.0-1002.25.15.0-1003.35.15.0-1004.55.15.0-1005.65.15.0-1006.7 Show 21 moreShow less 5.15.0-1008.105.15.0-1010.135.15.0-1011.145.15.0-1014.175.15.0-1015.185.15.0-1016.195.15.0-1017.205.15.0-1019.235.15.0-1020.255.15.0-1023.285.15.0-1024.295.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1036.415.15.0-1037.42	5.15.0-1038.43
`linux-gkeop` Ubuntu:22.04:LTS	before 5.15.0-1024.29, plus listed versions 5.15.0-1001.25.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7 Show 14 moreShow less 5.15.0-1007.105.15.0-1008.125.15.0-1011.155.15.0-1012.165.15.0-1013.175.15.0-1015.195.15.0-1016.215.15.0-1017.225.15.0-1018.235.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.28	5.15.0-1024.29
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-ibm` Ubuntu:22.04:LTS	before 5.15.0-1034.37, plus listed versions 5.15.0-1002.25.15.0-1003.35.15.0-1004.45.15.0-1005.55.15.0-1007.8 Show 19 moreShow less 5.15.0-1009.115.15.0-1010.125.15.0-1012.145.15.0-1013.155.15.0-1015.175.15.0-1017.205.15.0-1018.215.15.0-1021.245.15.0-1022.255.15.0-1023.265.15.0-1025.285.15.0-1026.295.15.0-1027.305.15.0-1028.315.15.0-1029.325.15.0-1030.335.15.0-1031.345.15.0-1032.355.15.0-1033.36	5.15.0-1034.37
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-intel-iotg` Ubuntu:22.04:LTS	before 5.15.0-1036.41, plus listed versions 5.15.0-1004.65.15.0-1008.115.15.0-1010.145.15.0-1013.175.15.0-1015.20 Show 14 moreShow less 5.15.0-1016.215.15.0-1017.225.15.0-1018.235.15.0-1021.265.15.0-1023.285.15.0-1025.305.15.0-1026.315.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1033.385.15.0-1034.395.15.0-1035.40	5.15.0-1036.41
`linux-kvm` Ubuntu:22.04:LTS	before 5.15.0-1038.43, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1002.2 Show 25 moreShow less 5.15.0-1004.45.15.0-1005.55.15.0-1007.75.15.0-1008.85.15.0-1010.115.15.0-1012.145.15.0-1013.165.15.0-1016.195.15.0-1017.215.15.0-1018.225.15.0-1019.235.15.0-1020.245.15.0-1021.265.15.0-1024.295.15.0-1025.305.15.0-1026.315.15.0-1028.335.15.0-1029.345.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1037.42	5.15.0-1038.43
`linux-lowlatency` Ubuntu:22.04:LTS	before 5.15.0-78.85, plus listed versions 5.15.0-22.225.15.0-23.235.15.0-24.245.15.0-27.285.15.0-30.31 Show 25 moreShow less 5.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.535.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.83	5.15.0-78.85
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-nvidia` Ubuntu:22.04:LTS	before 5.15.0-1029.29, plus listed versions 5.15.0-1005.55.15.0-1007.75.15.0-1010.105.15.0-1015.155.15.0-1017.17 Show 6 moreShow less 5.15.0-1018.185.15.0-1023.235.15.0-1025.255.15.0-1026.265.15.0-1027.275.15.0-1028.28	5.15.0-1029.29
`linux-nvidia-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15	None known
`linux-nvidia-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15 Show 6 moreShow less 6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25	None known
`linux-nvidia-tegra` Ubuntu:22.04:LTS	before 5.15.0-1016.16, plus listed versions 5.15.0-1009.95.15.0-1010.105.15.0-1012.125.15.0-1013.135.15.0-1014.145.15.0-1015.15	5.15.0-1016.16
`linux-nvidia-tegra-igx` Ubuntu:22.04:LTS	before 5.15.0-1002.2, plus listed versions 5.15.0-1001.1	5.15.0-1002.2
`linux-oem-5.17` Ubuntu:22.04:LTS	All versions, plus listed versions 5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13 Show 21 moreShow less 5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36	None known
`linux-oem-6.0` Ubuntu:22.04:LTS	All versions, plus listed versions 6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10 Show 11 moreShow less 6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-53492 is a high vulnerability (CVSS 7.8) in Linux, published September 16, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 6th percentile. Fixed in linux-lts 6.1.42-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 219 package rows, 29 versions, 4,370 references and the rest of 15 source descriptions. The JSON record has them.