CVE-2023-53531

null_blk: fix poll request timeout handling

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

null_blk: fix poll request timeout handling

When doing io_uring benchmark on /dev/nullb0, it's easy to crash the kernel if poll requests timeout triggered, as reported by David. [1]

BUG: kernel NULL pointer dereference, address: 0000000000000008 Workqueue: kblockd blk_mq_timeout_work RIP: 0010:null_timeout_rq+0x4e/0x91 Call Trace: ? null_timeout_rq+0x4e/0x91 blk_mq_handle_expired+0x31/0x4b bt_iter+0x68/0x84 ? bt_tags_iter+0x81/0x81 __sbitmap_for_each_set.constprop.0+0xb0/0xf2 ? __blk_mq_complete_request_remote+0xf/0xf bt_for_each+0x46/0x64 ? __blk_mq_complete_request_remote+0xf/0xf ? percpu_ref_get_many+0xc/0x2a blk_mq_queue_tag_busy_iter+0x14d/0x18e blk_mq_timeout_work+0x95/0x127 process_one_work+0x185/0x263 worker_thread+0x1b5/0x227

This is indeed a race problem between null_timeout_rq() and null_poll().

null_poll() null_timeout_rq() spin_lock(&nq->poll_lock) list_splice_init(&nq->poll_list, &list) spin_unlock(&nq->poll_lock)

while (!list_empty(&list)) req = list_first_entry() list_del_init() ... blk_mq_add_to_batch() // req->rq_next = NULL spin_lock(&nq->poll_lock)

				// rq->queuelist->next == NULL
				list_del_init(&rq->queuelist)

				spin_unlock(&nq->poll_lock)

Fix these problems by setting requests state to MQ_RQ_COMPLETE under nq->poll_lock protection, in which null_timeout_rq() can safely detect this race and early return.

Note this patch just fix the kernel panic when request timeout happen.

[1] https://lore.kernel.org/all/[email protected]/

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.15%Up 0.1 points since Oct 1, 2025

What each source reports

CVE List Score used 7.8

null_blk: fix poll request timeout handling

In the Linux kernel, the following vulnerability has been resolved:

null_blk: fix poll request timeout handling

When doing io_uring benchmark on /dev/nullb0, it's easy to crash the kernel if poll requests timeout triggered, as reported by David. [1]

This is indeed a race problem between null_timeout_rq() and null_poll().

null_poll() null_timeout_rq() spin_lock(&nq->poll_lock) list_splice_init(&nq->poll_list, &list) spin_unlock(&nq->poll_lock)

while (!list_empty(&list)) req = list_first_entry() list_del_init() ... blk_mq_add_to_batch() // req->rq_next = NULL spin_lock(&nq->poll_lock)

				// rq->queuelist->next == NULL
				list_del_init(&rq->queuelist)

				spin_unlock(&nq->poll_lock)

Fix these problems by setting requests state to MQ_RQ_COMPLETE under nq->poll_lock protection, in which null_timeout_rq() can safely detect this race and early return.

Note this patch just fix the kernel panic when request timeout happen.

[1] https://lore.kernel.org/all/[email protected]/

Record: CVE-2023-53531
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2025-32735 7.8

In the Linux kernel, the following vulnerability has been resolved:

null_blk: fix poll request timeout handling

When doing io_uring benchmark on /dev/nullb0, it's easy to crash the kernel if poll requests timeout triggered, as reported by David. [1]

This is indeed a race problem between null_timeout_rq() and null_poll().

null_poll() null_timeout_rq() spin_lock(&nq->poll_lock) list_splice_init(&nq->poll_list, &list) spin_unlock(&nq->poll_lock)

while (!list_empty(&list)) req = list_first_entry() list_del_init() ... blk_mq_add_to_batch() // req->rq_next = NULL spin_lock(&nq->poll_lock)

				// rq->queuelist->next == NULL
				list_del_init(&rq->queuelist)

				spin_unlock(&nq->poll_lock)

Fix these problems by setting requests state to MQ_RQ_COMPLETE under nq->poll_lock protection, in which null_timeout_rq() can safely detect this race and early return.

Note this patch just fix the kernel panic when request timeout happen.

[1] https://lore.kernel.org/all/[email protected]/

Record: EUVD-2025-32735
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-vv6q-p28j-9w24 5.5

In the Linux kernel, the following vulnerability has been resolved: null_blk: fix poll request...

In the Linux kernel, the following vulnerability has been resolved:

null_blk: fix poll request timeout handling

When doing io_uring benchmark on /dev/nullb0, it's easy to crash the kernel if poll requests timeout triggered, as reported by David. [1]

This is indeed a race problem between null_timeout_rq() and null_poll().

null_poll() null_timeout_rq() spin_lock(&nq->poll_lock) list_splice_init(&nq->poll_list, &list) spin_unlock(&nq->poll_lock)

while (!list_empty(&list)) req = list_first_entry() list_del_init() ... blk_mq_add_to_batch() // req->rq_next = NULL spin_lock(&nq->poll_lock)

				// rq->queuelist->next == NULL
				list_del_init(&rq->queuelist)

				spin_unlock(&nq->poll_lock)

Fix these problems by setting requests state to MQ_RQ_COMPLETE under nq->poll_lock protection, in which null_timeout_rq() can safely detect this race and early return.

Note this patch just fix the kernel panic when request timeout happen.

[1] https://lore.kernel.org/all/[email protected]/

Record: GHSA-vv6q-p28j-9w24
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-476
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

null_blk: fix poll request timeout handling

When doing io_uring benchmark on /dev/nullb0, it's easy to crash the kernel if poll requests timeout triggered, as reported by David. [1]

This is indeed a race problem between null_timeout_rq() and null_poll().

null_poll() null_timeout_rq() spin_lock(&nq->poll_lock) list_splice_init(&nq->poll_list, &list) spin_unlock(&nq->poll_lock)

while (!list_empty(&list)) req = list_first_entry() list_del_init() ... blk_mq_add_to_batch() // req->rq_next = NULL spin_lock(&nq->poll_lock)

				// rq->queuelist->next == NULL
				list_del_init(&rq->queuelist)

				spin_unlock(&nq->poll_lock)

Fix these problems by setting requests state to MQ_RQ_COMPLETE under nq->poll_lock protection, in which null_timeout_rq() can safely detect this race and early return.

Note this patch just fix the kernel panic when request timeout happen.

[1] https://lore.kernel.org/all/[email protected]/

Record: CVE-2023-53531
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-476
Updated: 2026-11-02

OSVBELL-CVE-2023-53531 5.5

Record: BELL-CVE-2023-53531
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 7.8

null_blk: fix poll request timeout handling

In the Linux kernel, the following vulnerability has been resolved:

null_blk: fix poll request timeout handling

When doing io_uring benchmark on /dev/nullb0, it's easy to crash the kernel if poll requests timeout triggered, as reported by David. [1]

This is indeed a race problem between null_timeout_rq() and null_poll().

null_poll() null_timeout_rq() spin_lock(&nq->poll_lock) list_splice_init(&nq->poll_list, &list) spin_unlock(&nq->poll_lock)

while (!list_empty(&list)) req = list_first_entry() list_del_init() ... blk_mq_add_to_batch() // req->rq_next = NULL spin_lock(&nq->poll_lock)

				// rq->queuelist->next == NULL
				list_del_init(&rq->queuelist)

				spin_unlock(&nq->poll_lock)

Fix these problems by setting requests state to MQ_RQ_COMPLETE under nq->poll_lock protection, in which null_timeout_rq() can safely detect this race and early return.

Note this patch just fix the kernel panic when request timeout happen.

[1] https://lore.kernel.org/all/[email protected]/

Record: CVE-2023-53531
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 16 moreShow less

OSVDEBIAN-CVE-2023-53531 5.5

In the Linux kernel, the following vulnerability has been resolved: null_blk: fix poll request timeout handling When doing io_uring benchmark on /dev/nullb0, it's easy to crash the kernel if poll requests timeout triggered, as reported by David. [1] BUG: kernel NULL pointer dereference, address: 0000000000000008 Workqueue: kblockd blk_mq_timeout_work RIP: 0010:null_timeout_rq+0x4e/0x91 Call Trace: ? null_timeout_rq+0x4e/0x91 blk_mq_handle_expired+0x31/0x4b bt_iter+0x68/0x84 ? bt_tags_iter+0x81/0x81 __sbitmap_for_each_set.constprop.0+0xb0/0xf2 ? __blk_mq_complete_request_remote+0xf/0xf bt_for_each+0x46/0x64 ? __blk_mq_complete_request_remote+0xf/0xf ? percpu_ref_get_many+0xc/0x2a blk_mq_queue_tag_busy_iter+0x14d/0x18e blk_mq_timeout_work+0x95/0x127 process_one_work+0x185/0x263 worker_thread+0x1b5/0x227 This is indeed a race problem between null_timeout_rq() and null_poll(). null_poll() null_timeout_rq() spin_lock(&nq->poll_lock) list_splice_init(&nq->poll_list, &list) spin_unlock(&nq->poll_lock) while (!list_empty(&list)) req = list_first_entry() list_del_init() ... blk_mq_add_to_batch() // req->rq_next = NULL spin_lock(&nq->poll_lock) // rq->queuelist->next == NULL list_del_init(&rq->queuelist) spin_unlock(&nq->poll_lock) Fix these problems by setting requests state to MQ_RQ_COMPLETE under nq->poll_lock protection, in which null_timeout_rq() can safely detect this race and early return. Note this patch just fix the kernel panic when request timeout happen. [1] https://lore.kernel.org/all/[email protected]/

Record: DEBIAN-CVE-2023-53531
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9315
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-53531 5.5

Record: UBUNTU-CVE-2023-53531
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVCLSA-2026-1783362244 No score

kernel: Fix of 122 CVEs

KVM: x86: Fix shadow paging use-after-free due to unexpected role {CVE-2026-46113}
KVM: x86: Fix shadow paging use-after-free due to unexpected GFN {CVE-2026-46113}
Bluetooth: bcsp: receive data only if registered {CVE-2025-40308}
xen/privcmd: unregister xenstore notifier on module exit {CVE-2026-31788}
xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts {CVE-2026-43429}
net: usb: rtl8150: enable basic endpoint checking {CVE-2025-21708}
net: usb: kaweth: validate USB endpoints {CVE-2026-23312}
net: usb: kalmia: validate USB endpoints {CVE-2026-23365}
net: usb: pegasus: validate USB endpoints {CVE-2026-23290}
net: usb: pegasus: enable basic endpoint checking {CVE-2026-43156}
USB: usbcore: Introduce usb_bulk_msg_killable() {CVE-2026-43429}
USB: core: Add routines for endpoint checks in old drivers {CVE-2026-43156}
nf_tables: nft_dynset: fix possible stateful expression memleak in error path {CVE-2026-23399}
tpm: Cap the number of PCR banks {CVE-2025-71077}
clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() {CVE-2023-53704}
dm: fix a race condition in retrieve_deps {CVE-2023-54324}
ice: fix Tx scheduler error handling in XDP callback {CVE-2025-38127}
mlx5: fix skb leak while fifo resync and push {CVE-2023-54238}
mmc: vub300: fix return value check of mmc_add_host() {CVE-2022-50251}
bonding: annotate data-races around slave->last_rx {CVE-2026-23212}
RDMA/irdma: Fix data race on CQP completion stats {CVE-2023-54302}
bpf: cpumap: Fix memory leak in cpu_map_update_elem {CVE-2023-53441}
fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38215}
trace/fgraph: Fix the warning caused by missing unregister notifier {CVE-2025-39829}
vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects {CVE-2025-39850}
team: prevent adding a device which is already a team device lower {CVE-2024-58071}
net: stmmac: move the EST lock to struct stmmac_priv {CVE-2024-38594}
drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too {CVE-2024-50108}
rxrpc: Fix handling of received connection abort {CVE-2024-58053}
bnxt_en: Fix out-of-bound memcpy() during ethtool -w {CVE-2025-37911}
scsi: storvsc: Ratelimit warning logs to prevent VM denial of service {CVE-2025-21690}
net: atlantic: Fix DMA mapping for PTP hwts ring {CVE-2024-26680}
wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() {CVE-2024-47713}
drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) {CVE-2024-49905}
dm: fix NULL pointer dereference in __dm_suspend() {CVE-2025-40134}
smb: client: validate the whole DACL before rewriting it in cifsacl {CVE-2026-31709}
PM: runtime: Fix a race condition related to device removal {CVE-2026-23452}
ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces {CVE-2026-43436}
nvme-pci: Fix race bug in nvme_poll_irqdisable() {CVE-2026-43448}
sctp: add mutual exclusion in proc_sctp_do_udp_port() {CVE-2025-22062}
cachefiles: fix dentry leak in cachefiles_open_file() {CVE-2024-49870}
mm: revert "mm: shmem: fix data-race in shmem_getattr()" {CVE-2024-53136}
memcg: fix soft lockup in the OOM process {CVE-2024-57977}
resource: fix region_intersects() vs add_memory_driver_managed() {CVE-2024-49878}
r8169: add tally counter fields added with RTL8125 {CVE-2024-49973}
svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() {CVE-2024-53215}
ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths {CVE-2026-43066}
wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() {CVE-2025-71273}
net: netlink: af_netlink: Prevent empty skb by adding a check on len. {CVE-2021-47606}
extcon: Modify extcon device to be created after driver data is set {CVE-2022-49308}
tick/nohz: unexport __init-annotated tick_nohz_full_setup() {CVE-2022-49675}
bridge:…

Record: CLSA-2026-1783362244
Updated: 2026-11-02

OSVSUSE-SU-2025:03600-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do not BUG…

Record: SUSE-SU-2025:03600-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03615-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53257: wifi: mac80211: check S1G action frame size (bsc#1249869).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1245666).
CVE-2025-38380: i2c/designware: Fix an initialization issue (bsc#1247028).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38706: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1249195).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (bsc#1249374).
CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (bsc#1249315).
CVE-2025-39726: s390/ism: fix concurrency management in ism_cmd() (bsc#1249266).
CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1249516).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1249548).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).
CVE-2025-39824: HID: asus: fix UAF via HID_CLAIMED_INPUT validation (bsc#1250007).
CVE-2025-39860: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (bsc#1250247).
CVE-2025-39869: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (bsc#1250406).

The following non-security bugs were fixed:

!CONFIG & reference -> this is bug, immediate fail
CONFIG & no reference -> OK temporarily, must be resolved eventually
Do not self obsolete older kernel variants
Kconfig.suse: Add KABI checkiness macro (config) (bsc#1249186).
Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108).
Update config files. (bsc#1249186) Enable where we define KABI refs + rely on Kconfig deps.
build_bug.h: Add KABI assert (bsc#1249186).
hv_netvsc: Fix panic during namespace deletion with VF (bsc#1248111).
kernel-binary: Another installation ordering fix (bsc#1241353).
kernel-source: Do not list mkspec and its inputs as sources (bsc#1250522).
kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
kernel-syms.spec: Drop…

Record: SUSE-SU-2025:03615-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03634-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38245: atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister() (bsc#1246193).
CVE-2025-38251: atm: clip: prevent NULL deref in clip_push() (bsc#1246181).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38360: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (bsc#1247078).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38439: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (bsc#1247155).
CVE-2025-38441: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (bsc#1247167).
CVE-2025-38444: raid10: cleanup memleak at raid10_make_request (bsc#1247162).
CVE-2025-38445: md/raid1: Fix stack memory use after return in raid1_reshape (bsc#1247229).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38458: atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (bsc#1247116).
CVE-2025-38459: atm: clip: Fix infinite recursive call of clip_push() (bsc#1247119).
CVE-2025-38464: tipc: Fix use-after-free in tipc_conn_close() (bsc#1247112).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38472: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (bsc#1247313).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (bsc#1247243).
CVE-2025-38491: mptcp: make fallback action and fallback decision…

Record: SUSE-SU-2025:03634-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20851-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do…

Record: SUSE-SU-2025:20851-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20861-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do…

Record: SUSE-SU-2025:20861-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20870-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4:…

Record: SUSE-SU-2025:20870-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20898-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4:…

Record: SUSE-SU-2025:20898-1
Updated: 2026-11-02

OSVSUSE-SU-2025:3751-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do not…

Record: SUSE-SU-2025:3751-1
Updated: 2026-11-02

OSVSUSE-SU-2025:3761-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53257: wifi: mac80211: check S1G action frame size (bsc#1249869).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1245666).
CVE-2025-38380: i2c/designware: Fix an initialization issue (bsc#1247028).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38706: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1249195).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (bsc#1249374).
CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (bsc#1249315).
CVE-2025-39726: s390/ism: fix concurrency management in ism_cmd() (bsc#1249266).
CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1249516).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1249548).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).
CVE-2025-39824: HID: asus: fix UAF via HID_CLAIMED_INPUT validation (bsc#1250007).
CVE-2025-39860: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (bsc#1250247).
CVE-2025-39869: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (bsc#1250406).

The following non-security bugs were fixed:

Kconfig.suse: Add KABI checkiness macro (config) (bsc#1249186).
Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108).
Revert selinux patches that caused regressions (bsc#1249353).
btrfs: avoid NULL pointer dereference if no valid extent tree (bsc#1249158).
build_bug.h: Add KABI assert (bsc#1249186).
hv_netvsc: Fix panic during namespace deletion with VF (bsc#1248111).
kabi/severities: ignore kABI for atheros helper modules The symbols are used only internally by atheros drivers.
kernel-binary: Another installation ordering fix (bsc#1241353).
kernel-source: Do not list mkspec and its inputs as sources (bsc#1250522).
kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
kernel-syms.spec: Drop…

Record: SUSE-SU-2025:3761-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4057-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051). -…

Record: SUSE-SU-2025:4057-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4132-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…

Record: SUSE-SU-2025:4132-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4141-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…

Record: SUSE-SU-2025:4141-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`linux-lts` Alpaquita:23	6.1.53-r0 up to 6.1.54-r0	6.1.54-r0
`linux-lts` Alpaquita:stream	6.1.112-r0 up to 6.6.58-r0	6.6.58-r0
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.11.els7	7.0.0-284.1101.el9_2.tuxcare.11.els7
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-core` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-core` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-cross-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-doc` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-tools` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-tools-libs` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`kernel-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`libbpf` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els7	2:1.0.0-2.el9_2.tuxcare.11.els7
`libbpf-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els7	2:1.0.0-2.el9_2.tuxcare.11.els7
`libbpf-static` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els7	2:1.0.0-2.el9_2.tuxcare.11.els7
`perf` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`python3-perf` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`rtla` TuxCare:AlmaLinux:9.2 From an advisory covering 121 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els7	5.14.0-284.1101.el9_2.tuxcare.11.els7
`Kernel` Linux	5.16.0 up to 6.1.54, 6.2.0 up to 6.5.4	6.1.546.5.4
`linux` Debian:12	before 6.1.55-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 5 moreShow less 6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-1~bpo11+1	6.1.55-1
`linux` Debian:13	before 6.5.6-1	6.5.6-1
`linux` Debian:14	before 6.5.6-1	6.5.6-1
`bpftool-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:7.4.0-503.11.1.el9_5	0:7.4.0-503.11.1.el9_5
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`rv` Red Hat:enterprise_linux:9::appstream From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`bpftool` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:7.4.0-503.11.1.el9_5	0:7.4.0-503.11.1.el9_5
`bpftool-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:7.4.0-503.11.1.el9_5	0:7.4.0-503.11.1.el9_5
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-tools` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-tools-libs` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-uki-virt-addons` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-zfcpdump-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 594 CVEs	before 0:5.14.0-503.11.1.el9_5	0:5.14.0-503.11.1.el9_5
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1.150600.12.32.1	6.4.0-150600.23.73.1.150600.12.32.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-livepatch-SLE15-SP6_Update_16` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 346 CVEs	before 1-150600.13.3.1	1-150600.13.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1.150600.12.32.1	6.4.0-150600.23.73.1.150600.12.32.1
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1.150500.6.59.1	5.14.21-150500.55.124.1.150500.6.59.1
`kernel-source` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-livepatch-SLE15-SP5_Update_31` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 378 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1.150500.6.59.1	5.14.21-150500.55.124.1.150500.6.59.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1.150500.6.59.1	5.14.21-150500.55.124.1.150500.6.59.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1.150500.6.59.1	5.14.21-150500.55.124.1.150500.6.59.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1.150500.6.59.1	5.14.21-150500.55.124.1.150500.6.59.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 378 CVEs	before 5.14.21-150500.55.124.1	5.14.21-150500.55.124.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-35.1.21.12	6.4.0-35.1.21.12
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-35.1.21.12	6.4.0-35.1.21.12
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-37.1	6.4.0-37.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-37.1	6.4.0-37.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-37.1	6.4.0-37.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-37.1	6.4.0-37.1
`kernel-livepatch-SLE15-SP6-RT_Update_16` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 346 CVEs	before 1-150600.1.3.1	1-150600.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 378 CVEs	before 5.14.21-150500.13.109.1	5.14.21-150500.13.109.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 378 CVEs	before 5.14.21-150500.13.109.1	5.14.21-150500.13.109.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1.150700.17.15.1	6.4.0-150700.53.22.1.150700.17.15.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-nvidia-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15	None known
`linux-nvidia-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15 Show 6 moreShow less 6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25	None known
`linux-oem-5.17` Ubuntu:22.04:LTS	All versions, plus listed versions 5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13 Show 21 moreShow less 5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36	None known
`linux-oem-6.0` Ubuntu:22.04:LTS	All versions, plus listed versions 6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10 Show 11 moreShow less 6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21	None known
`linux-oem-6.1` Ubuntu:22.04:LTS	All versions, plus listed versions 6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9 Show 22 moreShow less 6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36	None known
`linux-oem-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8 Show 14 moreShow less 6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28	None known
`linux-oracle-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1 Show 8 moreShow less 6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1	None known
`linux-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1032.35	None known
`linux-riscv` Ubuntu:22.04:LTS	All versions, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4 Show 18 moreShow less 5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-53531 is a high vulnerability (CVSS 7.8) in Linux, published November 15, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. Fixed in linux-lts 6.1.54-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 102 package rows, 29 versions, 4,862 references and the rest of 13 source descriptions. The JSON record has them.