CVE-2023-53556

iavf: Fix use-after-free in free_netdev

7.8 HighFix available

What does this mean?

: 7.8v3.1, from CVE List
: 0.15%4th percentile
Fixed in: 6.1.42-r0linux-lts
Published: September 16, 2024
Modified: November 11, 2026
Weakness: CWE-416
Also known as: BELL-CVE-2023-53556CLSA-2026-1773047921CLSA-2026-1773048865CLSA-2026-1773139548CLSA-2026-1788170774CLSA-2026-1788257079CLSA-2026-1788259625CLSA-2026-1789373487
Show 24 moreShow less
CLSA-2026-1789373515DEBIAN-CVE-2023-53556EUVD-2025-32305GHSA-f95c-c99f-h2mqRHSA-2023:5069RHSA-2023:5627RHSA-2023:6583RHSA-2023:7077SUSE-SU-2025:21040-1SUSE-SU-2025:21052-1SUSE-SU-2025:21056-1SUSE-SU-2025:21064-1SUSE-SU-2025:4057-1SUSE-SU-2025:4111-1SUSE-SU-2025:4128-1SUSE-SU-2025:4132-1SUSE-SU-2025:4139-1SUSE-SU-2025:4140-1SUSE-SU-2025:4141-1SUSE-SU-2025:4149-1SUSE-SU-2025:4189-1SUSE-SU-2025:4301-1SUSE-SU-2025:4320-1UBUNTU-CVE-2023-53556

In the Linux kernel, the following vulnerability has been resolved:

iavf: Fix use-after-free in free_netdev

We do netif_napi_add() for all allocated q_vectors[], but potentially do netif_napi_del() for part of them, then kfree q_vectors and leave invalid pointers at dev->napi_list.

Reproducer:

[root@host ~]# cat repro.sh #!/bin/bash

pf_dbsf="0000:41:00.0" vf0_dbsf="0000:41:02.0" g_pids=()

function do_set_numvf() { echo 2 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) echo 0 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) }

function do_set_channel() { local nic=$(ls -1 --indicator-style=none /sys/bus/pci/devices/${vf0_dbsf}/net/) [ -z "$nic" ] && { sleep $((RANDOM%3)) ; return 1; } ifconfig $nic 192.168.18.5 netmask 255.255.255.0 ifconfig $nic up ethtool -L $nic combined 1 ethtool -L $nic combined 4 sleep $((RANDOM%3)) }

function on_exit() { local pid for pid in "${g_pids[@]}"; do kill -0 "$pid" &>/dev/null && kill "$pid" &>/dev/null done g_pids=() }

trap "on_exit; exit" EXIT

while :; do do_set_numvf ; done & g_pids+=($!) while :; do do_set_channel ; done & g_pids+=($!)

wait

Result:

[ 4093.900222] ================================================================== [ 4093.900230] BUG: KASAN: use-after-free in free_netdev+0x308/0x390 [ 4093.900232] Read of size 8 at addr ffff88b4dc145640 by task repro.sh/6699 [ 4093.900233] [ 4093.900236] CPU: 10 PID: 6699 Comm: repro.sh Kdump: loaded Tainted: G O --------- -t - 4.18.0 #1 [ 4093.900238] Hardware name: Powerleader PR2008AL/H12DSi-N6, BIOS 2.0 04/09/2021 [ 4093.900239] Call Trace: [ 4093.900244] dump_stack+0x71/0xab [ 4093.900249] print_address_description+0x6b/0x290 [ 4093.900251] ? free_netdev+0x308/0x390 [ 4093.900252] kasan_report+0x14a/0x2b0 [ 4093.900254] free_netdev+0x308/0x390 [ 4093.900261] iavf_remove+0x825/0xd20 [iavf] [ 4093.900265] pci_device_remove+0xa8/0x1f0 [ 4093.900268] device_release_driver_internal+0x1c6/0x460 [ 4093.900271] pci_stop_bus_device+0x101/0x150 [ 4093.900273] pci_stop_and_remove_bus_device+0xe/0x20 [ 4093.900275] pci_iov_remove_virtfn+0x187/0x420 [ 4093.900277] ? pci_iov_add_virtfn+0xe10/0xe10 [ 4093.900278] ? pci_get_subsys+0x90/0x90 [ 4093.900280] sriov_disable+0xed/0x3e0 [ 4093.900282] ? bus_find_device+0x12d/0x1a0 [ 4093.900290] i40e_free_vfs+0x754/0x1210 [i40e] [ 4093.900298] ? i40e_reset_all_vfs+0x880/0x880 [i40e] [ 4093.900299] ? pci_get_device+0x7c/0x90 [ 4093.900300] ? pci_get_subsys+0x90/0x90 [ 4093.900306] ? pci_vfs_assigned.part.7+0x144/0x210 [ 4093.900309] ? __mutex_lock_slowpath+0x10/0x10 [ 4093.900315] i40e_pci_sriov_configure+0x1fa/0x2e0 [i40e] [ 4093.900318] sriov_numvfs_store+0x214/0x290 [ 4093.900320] ? sriov_totalvfs_show+0x30/0x30 [ 4093.900321] ? __mutex_lock_slowpath+0x10/0x10 [ 4093.900323] ? __check_object_size+0x15a/0x350 [ 4093.900326] kernfs_fop_write+0x280/0x3f0 [ 4093.900329] vfs_write+0x145/0x440 [ 4093.900330] ksys_write+0xab/0x160 [ 4093.900332] ? __ia32_sys_read+0xb0/0xb0 [ 4093.900334] ? fput_many+0x1a/0x120 [ 4093.900335] ? filp_close+0xf0/0x130 [ 4093.900338] do_syscall_64+0xa0/0x370 [ 4093.900339] ? page_fault+0x8/0x30 [ 4093.900341] entry_SYSCALL_64_after_hwframe+0x65/0xca [ 4093.900357] RIP: 0033:0x7f16ad4d22c0 [ 4093.900359] Code: 73 01 c3 48 8b 0d d8 cb 2c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 24 2d 00 00 75 10 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 fe dd 01 00 48 89 04 24 [ 4093.900360] RSP: 002b:00007ffd6491b7f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 4093.900362] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f16ad4d22c0 [ 4093.900363] RDX: 0000000000000002 RSI: 0000000001a41408 RDI: 0000000000000001 [ 4093.900364] RBP: 0000000001a41408 R08: 00007f16ad7a1780 R09: 00007f16ae1f2700 [ 4093.9003 ---truncated---

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.15%Up 0.1 points since Oct 5, 2025

What each source reports

CVE List Score used7.8

iavf: Fix use-after-free in free_netdev

In the Linux kernel, the following vulnerability has been resolved:

iavf: Fix use-after-free in free_netdev

We do netif_napi_add() for all allocated q_vectors[], but potentially do netif_napi_del() for part of them, then kfree q_vectors and leave invalid pointers at dev->napi_list.

Reproducer:

[root@host ~]# cat repro.sh #!/bin/bash

pf_dbsf="0000:41:00.0" vf0_dbsf="0000:41:02.0" g_pids=()

function do_set_numvf() { echo 2 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) echo 0 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) }

function on_exit() { local pid for pid in "${g_pids[@]}"; do kill -0 "$pid" &>/dev/null && kill "$pid" &>/dev/null done g_pids=() }

trap "on_exit; exit" EXIT

while :; do do_set_numvf ; done & g_pids+=($!) while :; do do_set_channel ; done & g_pids+=($!)

wait

Result:

Record: CVE-2023-53556
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2025-323057.8

In the Linux kernel, the following vulnerability has been resolved:

iavf: Fix use-after-free in free_netdev

We do netif_napi_add() for all allocated q_vectors[], but potentially do netif_napi_del() for part of them, then kfree q_vectors and leave invalid pointers at dev->napi_list.

Reproducer:

[root@host ~]# cat repro.sh #!/bin/bash

pf_dbsf="0000:41:00.0" vf0_dbsf="0000:41:02.0" g_pids=()

function do_set_numvf() { echo 2 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) echo 0 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) }

function on_exit() { local pid for pid in "${g_pids[@]}"; do kill -0 "$pid" &>/dev/null && kill "$pid" &>/dev/null done g_pids=() }

trap "on_exit; exit" EXIT

while :; do do_set_numvf ; done & g_pids+=($!) while :; do do_set_channel ; done & g_pids+=($!)

wait

Result:

Record: EUVD-2025-32305
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-f95c-c99f-h2mq7.8

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in...

In the Linux kernel, the following vulnerability has been resolved:

iavf: Fix use-after-free in free_netdev

We do netif_napi_add() for all allocated q_vectors[], but potentially do netif_napi_del() for part of them, then kfree q_vectors and leave invalid pointers at dev->napi_list.

Reproducer:

[root@host ~]# cat repro.sh #!/bin/bash

pf_dbsf="0000:41:00.0" vf0_dbsf="0000:41:02.0" g_pids=()

function do_set_numvf() { echo 2 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) echo 0 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) }

function on_exit() { local pid for pid in "${g_pids[@]}"; do kill -0 "$pid" &>/dev/null && kill "$pid" &>/dev/null done g_pids=() }

trap "on_exit; exit" EXIT

while :; do do_set_numvf ; done & g_pids+=($!) while :; do do_set_channel ; done & g_pids+=($!)

wait

Result:

Record: GHSA-f95c-c99f-h2mq
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

NVD7.8

In the Linux kernel, the following vulnerability has been resolved:

iavf: Fix use-after-free in free_netdev

We do netif_napi_add() for all allocated q_vectors[], but potentially do netif_napi_del() for part of them, then kfree q_vectors and leave invalid pointers at dev->napi_list.

Reproducer:

[root@host ~]# cat repro.sh #!/bin/bash

pf_dbsf="0000:41:00.0" vf0_dbsf="0000:41:02.0" g_pids=()

function do_set_numvf() { echo 2 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) echo 0 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) }

function on_exit() { local pid for pid in "${g_pids[@]}"; do kill -0 "$pid" &>/dev/null && kill "$pid" &>/dev/null done g_pids=() }

trap "on_exit; exit" EXIT

while :; do do_set_numvf ; done & g_pids+=($!) while :; do do_set_channel ; done & g_pids+=($!)

wait

Result:

Record: CVE-2023-53556
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

OSVBELL-CVE-2023-535567.8

Record: BELL-CVE-2023-53556
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV7.8

iavf: Fix use-after-free in free_netdev

In the Linux kernel, the following vulnerability has been resolved:

iavf: Fix use-after-free in free_netdev

We do netif_napi_add() for all allocated q_vectors[], but potentially do netif_napi_del() for part of them, then kfree q_vectors and leave invalid pointers at dev->napi_list.

Reproducer:

[root@host ~]# cat repro.sh #!/bin/bash

pf_dbsf="0000:41:00.0" vf0_dbsf="0000:41:02.0" g_pids=()

function do_set_numvf() { echo 2 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) echo 0 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) }

function on_exit() { local pid for pid in "${g_pids[@]}"; do kill -0 "$pid" &>/dev/null && kill "$pid" &>/dev/null done g_pids=() }

trap "on_exit; exit" EXIT

while :; do do_set_numvf ; done & g_pids+=($!) while :; do do_set_channel ; done & g_pids+=($!)

wait

Result:

Record: CVE-2023-53556
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 29 moreShow less

OSVDEBIAN-CVE-2023-535567.8

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix use-after-free in free_netdev We do netif_napi_add() for all allocated q_vectors[], but potentially do netif_napi_del() for part of them, then kfree q_vectors and leave invalid pointers at dev->napi_list. Reproducer: [root@host ~]# cat repro.sh #!/bin/bash pf_dbsf="0000:41:00.0" vf0_dbsf="0000:41:02.0" g_pids=() function do_set_numvf() { echo 2 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) echo 0 >/sys/bus/pci/devices/${pf_dbsf}/sriov_numvfs sleep $((RANDOM%3+1)) } function do_set_channel() { local nic=$(ls -1 --indicator-style=none /sys/bus/pci/devices/${vf0_dbsf}/net/) [ -z "$nic" ] && { sleep $((RANDOM%3)) ; return 1; } ifconfig $nic 192.168.18.5 netmask 255.255.255.0 ifconfig $nic up ethtool -L $nic combined 1 ethtool -L $nic combined 4 sleep $((RANDOM%3)) } function on_exit() { local pid for pid in "${g_pids[@]}"; do kill -0 "$pid" &>/dev/null && kill "$pid" &>/dev/null done g_pids=() } trap "on_exit; exit" EXIT while :; do do_set_numvf ; done & g_pids+=($!) while :; do do_set_channel ; done & g_pids+=($!) wait Result: [ 4093.900222] ================================================================== [ 4093.900230] BUG: KASAN: use-after-free in free_netdev+0x308/0x390 [ 4093.900232] Read of size 8 at addr ffff88b4dc145640 by task repro.sh/6699 [ 4093.900233] [ 4093.900236] CPU: 10 PID: 6699 Comm: repro.sh Kdump: loaded Tainted: G O --------- -t - 4.18.0 #1 [ 4093.900238] Hardware name: Powerleader PR2008AL/H12DSi-N6, BIOS 2.0 04/09/2021 [ 4093.900239] Call Trace: [ 4093.900244] dump_stack+0x71/0xab [ 4093.900249] print_address_description+0x6b/0x290 [ 4093.900251] ? free_netdev+0x308/0x390 [ 4093.900252] kasan_report+0x14a/0x2b0 [ 4093.900254] free_netdev+0x308/0x390 [ 4093.900261] iavf_remove+0x825/0xd20 [iavf] [ 4093.900265] pci_device_remove+0xa8/0x1f0 [ 4093.900268] device_release_driver_internal+0x1c6/0x460 [ 4093.900271] pci_stop_bus_device+0x101/0x150 [ 4093.900273] pci_stop_and_remove_bus_device+0xe/0x20 [ 4093.900275] pci_iov_remove_virtfn+0x187/0x420 [ 4093.900277] ? pci_iov_add_virtfn+0xe10/0xe10 [ 4093.900278] ? pci_get_subsys+0x90/0x90 [ 4093.900280] sriov_disable+0xed/0x3e0 [ 4093.900282] ? bus_find_device+0x12d/0x1a0 [ 4093.900290] i40e_free_vfs+0x754/0x1210 [i40e] [ 4093.900298] ? i40e_reset_all_vfs+0x880/0x880 [i40e] [ 4093.900299] ? pci_get_device+0x7c/0x90 [ 4093.900300] ? pci_get_subsys+0x90/0x90 [ 4093.900306] ? pci_vfs_assigned.part.7+0x144/0x210 [ 4093.900309] ? __mutex_lock_slowpath+0x10/0x10 [ 4093.900315] i40e_pci_sriov_configure+0x1fa/0x2e0 [i40e] [ 4093.900318] sriov_numvfs_store+0x214/0x290 [ 4093.900320] ? sriov_totalvfs_show+0x30/0x30 [ 4093.900321] ? __mutex_lock_slowpath+0x10/0x10 [ 4093.900323] ? __check_object_size+0x15a/0x350 [ 4093.900326] kernfs_fop_write+0x280/0x3f0 [ 4093.900329] vfs_write+0x145/0x440 [ 4093.900330] ksys_write+0xab/0x160 [ 4093.900332] ? __ia32_sys_read+0xb0/0xb0 [ 4093.900334] ? fput_many+0x1a/0x120 [ 4093.900335] ? filp_close+0xf0/0x130 [ 4093.900338] do_syscall_64+0xa0/0x370 [ 4093.900339] ? page_fault+0x8/0x30 [ 4093.900341] entry_SYSCALL_64_after_hwframe+0x65/0xca [ 4093.900357] RIP: 0033:0x7f16ad4d22c0 [ 4093.900359] Code: 73 01 c3 48 8b 0d d8 cb 2c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 24 2d 00 00 75 10 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 fe dd 01 00 48 89 04 24 [ 4093.900360] RSP: 002b:00007ffd6491b7f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 4093.900362] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f16ad4d22c0 [ 4093.900363] RDX: 0000000000000002 RSI: 0000000001a41408 RDI: 0000000000000001 [ 4093.900364] RBP: 0000000001a41408 R08: 00007f16ad7a1780 R09: 00007f16ae1f2700 [ 4093.9003 ---truncated---

Record: DEBIAN-CVE-2023-53556
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:50698.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2023:5069
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:56277.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2023:5627
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:65838.2

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2023:6583
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:70777.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2023:7077
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-535567.8

Record: UBUNTU-CVE-2023-53556
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-11

OSVCLSA-2026-1773047921No score

kernel: Fix of 70 CVEs

wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
ASoC: topology: Fix references to freed memory {CVE-2024-41069}
net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739}
drivers: base: Free devm resources when unregistering a device {CVE-2023-53596}
usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685}
net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
ext4: fix use-after-free in ext4_orphan_cleanup {CVE-2022-50673}
xfrm: fix slab-use-after-free in decode_session6 {CVE-2023-53500}
net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538}
NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL {CVE-2023-53680}
perf/core: Exit early on perf_mmap() fail {CVE-2025-38565}
i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911}
fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271}
virtio_net: fix xdp_rxq_info bug after suspend/resume {CVE-2022-49687}
NFSD: Fix the behavior of READ near OFFSET_MAX {CVE-2022-48827}
usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022}
Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35967}
netfilter: nf_tables: prefer nft_chain_validate {CVE-2024-41042}
netfilter: validate user input for expected length {CVE-2024-35896}
erspan: do not use skb_mac_header() in ndo_start_xmit() {CVE-2023-53053}
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
i40e: remove read access to debugfs files {CVE-2025-39901}
wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937}
Bluetooth: hci_sock: Prevent race in socket write iter and sock bind {CVE-2025-68305}
RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem {CVE-2025-38022}
netfilter: allow exp not to be removed in nf_ct_find_expectation {CVE-2023-52927}
dm-bufio: don't schedule in atomic context {CVE-2025-37928}
HID: multitouch: Add NULL check in mt_input_configured {CVE-2024-58020}
netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX {CVE-2025-38201}
fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866}
tracing/histograms: Add histograms to hist_vars if they have referenced variables {CVE-2023-53560}
netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619}
drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() {CVE-2024-35791}
scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521}
dm cache: Fix UAF in destroy() {CVE-2022-50496}
xhci: Remove device endpoints from bandwidth list when freeing the device {CVE-2022-50470}
Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386}
mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats {CVE-2025-68800}
net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
igb: Do not bring the device up after non-fatal error {CVE-2024-50040}
wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891}
HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824}
fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304}
HID: multitouch: Correct devm device reference for hidinput input_dev name {CVE-2023-53454}
udf: Do not bother merging very long extents {CVE-2023-53506}
wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() {CVE-2022-50551}
ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587}
dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path…

Record: CLSA-2026-1773047921
Updated: 2026-11-02

OSVCLSA-2026-1773048865No score

kernel: Fix of 53 CVEs

xhci: Remove device endpoints from bandwidth list when freeing the device {CVE-2022-50470}
HID: multitouch: Add NULL check in mt_input_configured {CVE-2024-58020}
netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX {CVE-2025-38201}
fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866}
tracing/histograms: Add histograms to hist_vars if they have referenced variables {CVE-2023-53560}
netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619}
scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521}
dm cache: Fix UAF in destroy() {CVE-2022-50496}
Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386}
VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102}
sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240}
wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf {CVE-2023-53524}
xfrm: fix slab-use-after-free in decode_session6 {CVE-2023-53500}
ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587}
Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35967}
NFSD: Fix the behavior of READ near OFFSET_MAX {CVE-2022-48827}
NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL {CVE-2023-53680}
mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory {CVE-2025-39883}
fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685}
erspan: do not use skb_mac_header() in ndo_start_xmit() {CVE-2023-53053}
net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911}
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
i40e: remove read access to debugfs files {CVE-2025-39901}
Bluetooth: hci_sock: Prevent race in socket write iter and sock bind {CVE-2025-68305}
RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem {CVE-2025-38022}
usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022}
netfilter: allow exp not to be removed in nf_ct_find_expectation {CVE-2023-52927}
dm-bufio: don't schedule in atomic context {CVE-2025-37928}
ACPI: EC: Fix oops when removing custom query handlers {CVE-2023-54244}
mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats {CVE-2025-68800}
net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() {CVE-2023-54114}
igb: Do not bring the device up after non-fatal error {CVE-2024-50040}
HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494}
drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras {CVE-2023-53471}
wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891}
HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824}
fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304}
HID: multitouch: Correct devm device reference for hidinput input_dev name {CVE-2023-53454}
udf: Do not bother merging very long extents {CVE-2023-53506}
wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() {CVE-2022-50551}
dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path {CVE-2023-53604}
gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622}
iavf: Fix use-after-free in free_netdev {CVE-2023-53556}
cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945}
kernfs: fix use-after-free in __kernfs_remove {CVE-2022-50432}
net/sched: act_mirred: don't override retval if we already lost the skb…

Record: CLSA-2026-1773048865
Updated: 2026-11-02

OSVCLSA-2026-1773139548No score

kernel: Fix of 78 CVEs

fix: fbdev: fix potential buffer overflow in do_register_framebuffer()
qed: Don't collect too many protection override GRC elements {CVE-2025-39949}
drm/amd/display: Avoid a NULL pointer dereference {CVE-2025-39693}
pNFS: Fix uninited ptr deref in block/scsi layout {CVE-2025-38691}
netfilter: nf_reject: don't leak dst refcount for loopback packets {CVE-2025-38732}
ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() {CVE-2025-71085}
fs: dlm: fix use after free in midcomms commit {CVE-2023-53629}
svcrdma: use rc_pageoff for memcpy byte offset {CVE-2025-68811}
bpf: Disable preemption in bpf_perf_event_output {CVE-2023-54303}
scsi: target: iscsit: Free cmds before session free {CVE-2023-54184}
fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322}
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem {CVE-2025-38022}
memcg: protect concurrent access to mem_cgroup_idr {CVE-2024-43892}
ACPI: EC: Fix oops when removing custom query handlers {CVE-2023-54244}
KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration {CVE-2023-54296}
net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() {CVE-2023-54114}
net: tls: avoid hanging tasks on the tx_lock {CVE-2023-54306}
usb: typec: bus: verify partner exists in typec_altmode_attention {CVE-2023-54299}
scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization {CVE-2023-54234}
rxrpc: Fix timeout of a call that hasn't yet been granted a channel {CVE-2023-54195}
block, bfq: Fix division by zero error on zero wsum {CVE-2023-54242}
wifi: cfg80211: reject auth/assoc to AP with our address {CVE-2023-53540}
wifi: iwlwifi: mvm: don't trust firmware n_channels {CVE-2023-53589}
wifi: mac80211: check for station first in client probe {CVE-2023-53588}
bonding: do not assume skb mac_header is set {CVE-2023-53601}
drm/i915: Make intel_get_crtc_new_encoder() less oopsy {CVE-2023-53571}
wifi: rtw88: delete timer and free skb queue when unloading {CVE-2023-53574}
net: bcmgenet: Add a check for oversized packets {CVE-2023-53535}
media: uvcvideo: Fix memory leak in uvc_gpio_parse {CVE-2022-50882}
md/raid10: fix memleak of md thread {CVE-2023-54294}
usb: typec: altmodes/displayport: fix pin_assignment_show {CVE-2023-54186}
scsi: qedf: Fix NULL dereference in error handling {CVE-2023-54289}
HID: multitouch: Add NULL check in mt_input_configured {CVE-2024-58020}
driver core: fix potential null-ptr-deref in device_add() {CVE-2023-54321}
net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull {CVE-2023-53125}
rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() {CVE-2023-54246}
bpf: Address KCSAN report on bpf_lru_list {CVE-2023-54283}
usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec {CVE-2026-22998}
drm/i915: fix race condition UAF in i915_perf_add_config_ioctl {CVE-2023-54202}
mmc: via-sdmmc: fix return value check of mmc_add_host() {CVE-2022-50846}
bpf: Disable preemption in bpf_event_output {CVE-2023-54173}
net/mlx5e: Move representor neigh cleanup to profile cleanup_tx {CVE-2023-54148}
net/mlx5: Handle pairing of E-switch via uplink un/load APIs {CVE-2023-53347}
net/mlx5e: Fix cleanup null-ptr deref on encap lock {CVE-2023-53105}
smb3: fix for slab out of bounds on mount to ksmbd {CVE-2025-38728}
perf/core: Exit early on perf_mmap() fail {CVE-2025-38565}
HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494}
HID: core: ensure __hid_request reserves the report ID as the first byte
HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495}
HID: intel-ish-hid: Fix kernel panic during warm reset {CVE-2023-53392}
xfs: do not propagate ENODATA…

Record: CLSA-2026-1773139548
Updated: 2026-11-02

OSVCLSA-2026-1788170774No score

kernel: Fix of 132 CVEs

sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
fanotify: fix false positive on permission events {CVE-2026-46150}
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
Bluetooth: serialize accept_q access {CVE-2026-52918}
ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
libceph: remove debugfs files before client teardown {CVE-2026-68153}
libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
libceph: bound…

Record: CLSA-2026-1788170774
Updated: 2026-11-02

OSVCLSA-2026-1788257079No score

kernel: Fix of 131 CVEs

sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
fanotify: fix false positive on permission events {CVE-2026-46150}
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
Bluetooth: serialize accept_q access {CVE-2026-52918}
ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
libceph: remove debugfs files before client teardown {CVE-2026-68153}
libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
libceph: bound…

Record: CLSA-2026-1788257079
Updated: 2026-11-02

OSVCLSA-2026-1788259625No score

kernel: Fix of 132 CVEs

sctp: fix potential deadlock on &net->sctp.addr_wq_lock {CVE-2024-0639}
sctp: delay auto_asconf init until binding the first addr {CVE-2021-23133}
netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}
drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}
btrfs: fix use-after-free when attempting to join an aborted transaction {CVE-2025-21753}
btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
team: fix header_ops type confusion with non-Ethernet ports {CVE-2026-31502}
xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
xen/privcmd: add IOCTL_PRIVCMD_RESTRICT {CVE-2026-31788}
Bluetooth: L2CAP: make l2cap_connect() return void {CVE-2024-36013}
btrfs: fix incorrect splitting in btrfs_drop_extent_map_range {CVE-2023-54121}
netfilter: nf_conntrack: defer invalid log until after unlock {CVE-2026-74624}
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
dm cache: fix flushing uninitialized delayed_work on cache_ctr error {CVE-2024-50280}
audit: fix recursive locking deadlock in audit_dupe_exe() {CVE-2026-68096}
RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}
net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}
inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
fanotify: fix false positive on permission events {CVE-2026-46150}
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}
Bluetooth: serialize accept_q access {CVE-2026-52918}
ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
RDMA/bnxt_re: zero shared page before exposing to userspace {CVE-2026-74584}
sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" {CVE-2023-53153}
net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
drm/amdgpu/vce: fix integer overflow in image size {CVE-2026-68108}
ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}
ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
libceph: remove debugfs files before client teardown {CVE-2026-68153}
libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
libceph: reject zero bucket types in crush_decode {CVE-2026-68154}
libceph: bound…

Record: CLSA-2026-1788259625
Updated: 2026-11-02

OSVCLSA-2026-1789373487No score

Fix of 123 CVEs

CVE-2025-68214
- timers: Fix NULL function pointer race in timer_shutdown_sync() {CVE-2025-68214}
CVE-2024-58093
- PCI/ASPM: Fix link state exit during switch upstream function removal {CVE-2024-58093}
CVE-2026-72463
- xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
CVE-2026-64600
- xfs: resample the data fork mapping after cycling ILOCK {CVE-2026-64600}
CVE-2026-64095
- batman-adv: bla: avoid double decrement of bla.num_requests {CVE-2026-64095}
CVE-2026-64274
- Input: goodix - clamp the device-reported contact count {CVE-2026-64274}
CVE-2026-64273
- Input: iforce - bound the device-reported force-feedback effect index {CVE-2026-64273}
CVE-2026-64270
- Input: mms114 - reject an oversized device packet size {CVE-2026-64270}
CVE-2026-64188
- net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() {CVE-2026-64188}
CVE-2026-64096
- batman-adv: mcast: fix use-after-free in orig_node RCU release {CVE-2026-64096}
CVE-2026-64093
- batman-adv: tp_meter: directly shut down timer on cleanup {CVE-2026-64093}
CVE-2026-64091
- batman-adv: tt: fix TOCTOU race for reported vlans {CVE-2026-64091}
CVE-2026-64298
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
CVE-2026-64276
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
CVE-2026-64271
- Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}
CVE-2026-64266
- fuse: re-lock request before returning from fuse_ref_folio() {CVE-2026-64266}
CVE-2026-64218
- batman-adv: bla: fix report_work leak on backbone_gw purge {CVE-2026-64218}
CVE-2026-64191
- i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
CVE-2026-64115
- vsock/vmci: fix UAF when peer resets connection during handshake {CVE-2026-64115}
CVE-2026-64114
- ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
CVE-2026-64113
- ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
CVE-2026-64103
- scsi: isci: Fix use-after-free in device removal path {CVE-2026-64103}
CVE-2026-43249
- 9p/xen: protect xen_9pfs_front_free against concurrent calls {CVE-2026-43249}
CVE-2025-39686
- comedi: Make insn_rw_emulate_bits() do insn->n samples {CVE-2025-39686}
CVE-2025-38068
- crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
CVE-2025-39901
- i40e: remove read access to debugfs files {CVE-2025-39901}
CVE-2023-54207
- HID: uclogic: Correct devm device reference for hidinput input_dev name {CVE-2023-54207}
CVE-2023-53446
- PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free {CVE-2023-53446}
CVE-2022-50422
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
CVE-2022-50066
- net: atlantic: fix aq_vec index out of range error {CVE-2022-50066}
CVE-2025-71152
- net: dsa: properly keep track of master (conduit) reference {CVE-2025-71152}
CVE-2026-53131
- netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}
CVE-2026-31685
- netfilter: ip6t_eui64: reject invalid MAC header for all packets {CVE-2026-31685}
CVE-2026-31768
- iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() {CVE-2026-31768}
CVE-2026-43458
- serial: caif: hold tty->link reference in ldisc_open and ser_release {CVE-2026-43458}
- serial: caif: hold tty->link reference in ldisc_open and ser_release {CVE-2026-43458}
CVE-2023-53338
- lwt: Fix return values of BPF xmit ops {CVE-2023-53338}
CVE-2026-43076…

Record: CLSA-2026-1789373487
Updated: 2026-11-02

OSVCLSA-2026-1789373515No score

Fix of 124 CVEs

CVE-2025-68214
- timers: Fix NULL function pointer race in timer_shutdown_sync() {CVE-2025-68214}
CVE-2024-58093
- PCI/ASPM: Fix link state exit during switch upstream function removal {CVE-2024-58093}
CVE-2026-72463
- xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}
CVE-2026-64600
- xfs: resample the data fork mapping after cycling ILOCK {CVE-2026-64600}
CVE-2026-64095
- batman-adv: bla: avoid double decrement of bla.num_requests {CVE-2026-64095}
CVE-2026-64274
- Input: goodix - clamp the device-reported contact count {CVE-2026-64274}
CVE-2026-64273
- Input: iforce - bound the device-reported force-feedback effect index {CVE-2026-64273}
CVE-2026-64270
- Input: mms114 - reject an oversized device packet size {CVE-2026-64270}
CVE-2026-64188
- net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() {CVE-2026-64188}
CVE-2026-64096
- batman-adv: mcast: fix use-after-free in orig_node RCU release {CVE-2026-64096}
CVE-2026-64093
- batman-adv: tp_meter: directly shut down timer on cleanup {CVE-2026-64093}
CVE-2026-64091
- batman-adv: tt: fix TOCTOU race for reported vlans {CVE-2026-64091}
CVE-2026-64298
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
CVE-2026-64276
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
CVE-2026-64271
- Input: touchwin - reset the packet index on every complete packet {CVE-2026-64271}
CVE-2026-64266
- fuse: re-lock request before returning from fuse_ref_folio() {CVE-2026-64266}
CVE-2026-64218
- batman-adv: bla: fix report_work leak on backbone_gw purge {CVE-2026-64218}
CVE-2026-64191
- i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
CVE-2026-64115
- vsock/vmci: fix UAF when peer resets connection during handshake {CVE-2026-64115}
CVE-2026-64114
- ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
CVE-2026-64113
- ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
CVE-2026-64103
- scsi: isci: Fix use-after-free in device removal path {CVE-2026-64103}
CVE-2026-43249
- 9p/xen: protect xen_9pfs_front_free against concurrent calls {CVE-2026-43249}
CVE-2025-39686
- comedi: Make insn_rw_emulate_bits() do insn->n samples {CVE-2025-39686}
CVE-2025-38068
- crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
CVE-2025-39901
- i40e: remove read access to debugfs files {CVE-2025-39901}
CVE-2023-54207
- HID: uclogic: Correct devm device reference for hidinput input_dev name {CVE-2023-54207}
CVE-2023-53446
- PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free {CVE-2023-53446}
CVE-2022-50422
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
CVE-2022-50066
- net: atlantic: fix aq_vec index out of range error {CVE-2022-50066}
CVE-2025-71152
- net: dsa: properly keep track of master (conduit) reference {CVE-2025-71152}
CVE-2026-53131
- netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}
CVE-2026-31685
- netfilter: ip6t_eui64: reject invalid MAC header for all packets {CVE-2026-31685}
CVE-2026-31768
- iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() {CVE-2026-31768}
CVE-2026-43458
- serial: caif: hold tty->link reference in ldisc_open and ser_release {CVE-2026-43458}
- serial: caif: hold tty->link reference in ldisc_open and ser_release {CVE-2026-43458}
CVE-2023-53338
- lwt: Fix return values of BPF xmit ops {CVE-2023-53338}
CVE-2026-43076…

Record: CLSA-2026-1789373515
Updated: 2026-11-02

OSVSUSE-SU-2025:21040-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21040-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21052-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21052-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21056-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21056-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21064-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21064-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4057-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051). -…

Record: SUSE-SU-2025:4057-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4111-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).
CVE-2025-40088: hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (bsc#1252904).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).

The following non security issues were fixed:

fbcon: Fix OOB access in font allocation (bsc#1252033)
mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).

Record: SUSE-SU-2025:4111-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4128-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr…

Record: SUSE-SU-2025:4128-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4132-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…

Record: SUSE-SU-2025:4132-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4139-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).
CVE-2025-40088: hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (bsc#1252904).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).

The following non security issues were fixed:

fbcon: Fix OOB access in font allocation (bsc#1252033)
mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).

Record: SUSE-SU-2025:4139-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4140-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures…

Record: SUSE-SU-2025:4140-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4141-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…

Record: SUSE-SU-2025:4141-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4149-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-38084: hugetlb: unshare some PMDs when splitting VMAs (bsc#1245498).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245499).
CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
CVE-2025-39797: xfrm: Duplicate SPI Handling (bsc#1249608).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39981: Bluetooth: MGMT: Fix possible UAFs (bsc#1252060).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).

The following non security issues were fixed:

NFS: remove revoked delegation from server's delegation list (bsc#1246211).
NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
fbcon: Fix OOB access in font allocation (bsc#1252033)
kabi fix for NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).
net: mana: Switch to page pool for jumbo frames (bsc#1248754).
net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency (bsc#1248754).
netfilter: nft_objref: validate objref and objrefmap expressions (bsc#1250237). No CVE available yet, please see the bugzilla ticket referenced.

Record: SUSE-SU-2025:4149-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4189-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2021-4460: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning (bsc#1250764).
CVE-2022-48631: ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (bsc#1223475).
CVE-2022-50236: iommu/mediatek: Fix crash on isr after kexec() (bsc#1249702).
CVE-2022-50249: memory: of: Fix refcount leak bug in of_get_ddr_timings() (bsc#1249747).
CVE-2022-50280: pnode: terminate at peers of source (bsc#1249806).
CVE-2022-50293: btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range (bsc#1249752).
CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
CVE-2022-50350: scsi: target: iscsi: Fix a race condition between login_work and the login thread (bsc#1250261).
CVE-2022-50356: net: sched: sfb: fix null pointer access issue when sfb_init() fails (bsc#1250040).
CVE-2022-50367: fs: fix UAF/GPF bug in nilfs_mdt_destroy (bsc#1250277).
CVE-2022-50394: i2c: ismt: Fix an out-of-bounds bug in ismt_access() (bsc#1250107).
CVE-2022-50395: integrity: Fix memory leakage in keyring allocation error path (bsc#1250211).
CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250784).
CVE-2022-50443: drm/rockchip: lvds: fix PM usage counter unbalance in poweron (bsc#1250768).
CVE-2022-50459: scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() (bsc#1250850).
CVE-2022-50481: cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (bsc#1251051).
CVE-2022-50485: ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (bsc#1251197).
CVE-2022-50505: iommu/amd: Fix pci device refcount leak in ppr_notifier() (bsc#1251086).
CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
CVE-2022-50542: media: si470x: Fix use-after-free in si470x_int_in_callback() (bsc#1251330).
CVE-2022-50571: btrfs: call __btrfs_remove_free_space_cache_locked on cache load failure (bsc#1252487).
CVE-2023-53183: btrfs: exit gracefully if reloc roots don't match (bsc#1249863).
CVE-2023-53185: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (bsc#1249820).
CVE-2023-53188: net: openvswitch: fix race on port output (bsc#1249854).
CVE-2023-53191: irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains (bsc#1249721).
CVE-2023-53204: af_unix: Fix data-races around user->unix_inflight (bsc#1249682).
CVE-2023-53271: ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() (bsc#1249916).
CVE-2023-53282: scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1250311).
CVE-2023-53289: media: bdisp: Add missing check for create_workqueue (bsc#1249941).
CVE-2023-53292: blk-mq: protect q->elevator by ->sysfs_lock in blk_mq_elv_switch_none (bsc#1250163).
CVE-2023-53338: lwt: Fix return values of BPF xmit ops (bsc#1250074).
CVE-2023-53339: btrfs: fix BUG_ON condition in btrfs_cancel_balance (bsc#1250329).
CVE-2023-53373: crypto: seqiv - Handle EBUSY correctly (bsc#1250137).
CVE-2023-53433: net: add vlan_get_protocol_and_depth() helper (bsc#1250164).
CVE-2023-53476: iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() (bsc#1250839).
CVE-2023-53477: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation (bsc#1250840).
CVE-2023-53484: lib: cpu_rmap: Avoid use after free on rmap->obj array entries (bsc#1250895).
CVE-2023-53517: tipc: do not update mtu if msg_max is too small in mtu negotiation (bsc#1250919).
CVE-2023-53519: media: v4l2-mem2mem: add lock to protect parameter num_rdy (bsc#1250964).
CVE-2023-53540: wifi: cfg80211: reject auth/assoc to AP with our address (bsc#1251053).
CVE-2023-53548: net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (bsc#1251066).
CVE-2023-53556: iavf: Fix use-after-free in free_netdev (bsc#1251059). -…

Record: SUSE-SU-2025:4189-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4301-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319 bsc#1252236).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation…

Record: SUSE-SU-2025:4301-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4320-1No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-38084: hugetlb: unshare some PMDs when splitting VMAs (bsc#1245498).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245499).
CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
CVE-2025-39797: xfrm: Duplicate SPI Handling (bsc#1249608).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39981: Bluetooth: MGMT: Fix possible UAFs (bsc#1252060).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).

The following non security issues were fixed:

NFS: remove revoked delegation from server's delegation list (bsc#1246211).
NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
fbcon: Fix OOB access in font allocation (bsc#1252033)
kabi fix for NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).
net: mana: Switch to page pool for jumbo frames (bsc#1248754).
net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency (bsc#1248754).
netfilter: nft_objref: validate objref and objrefmap expressions (bsc#1250237).
rpm/check-for-config-changes: ignore CONFIG_SCHED_PROXY_EXEC, too (bsc#1250946)

Record: SUSE-SU-2025:4320-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`linux-lts` Alpaquita:23	6.1.38-r0 up to 6.1.42-r0	6.1.42-r0
`linux-lts` Alpaquita:stream	6.1.112-r0 up to 6.6.58-r0	6.6.58-r0
`bpftool` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-core` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-cross-headers` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-debug` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-debug-core` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-debug-devel` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-debug-modules` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-debug-modules-extra` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-debug-modules-internal` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-devel` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-headers` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-ipaclones-internal` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-modules` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-modules-extra` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-modules-internal` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-selftests-internal` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-tools` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-tools-libs` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`kernel-tools-libs-devel` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`perf` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`python3-perf` TuxCare:CentOS:8.5 From an advisory covering 70 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els35	4.18.0-348.7.1.el8_5.tuxcare.els35
`bpftool` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-core` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-cross-headers` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-debug` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-debug-core` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-debug-devel` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-debug-modules` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-debug-modules-extra` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-debug-modules-internal` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-devel` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-headers` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-ipaclones-internal` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-modules` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-modules-extra` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-modules-internal` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-selftests-internal` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-tools` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-tools-libs` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`kernel-tools-libs-devel` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`perf` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`python3-perf` TuxCare:CentOS:8.4 From an advisory covering 53 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els35	4.18.0-305.25.1.el8_4.tuxcare.els35
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.7.els29	7.0.0-284.1101.el9_2.tuxcare.7.els29
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-core` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-cross-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-doc` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`kernel-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 78 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els29	5.14.0-284.1101.el9_2.tuxcare.7.els29
`Kernel` Linux	3.14.0 up to 5.4.251, 5.5.0 up to 5.10.188, 5.11.0 up to 5.15.123, 5.16.0 up to 6.1.42, 6.2.0 up to 6.4.7	5.4.2515.10.1885.15.1236.1.426.4.7
`linux` Debian:12	before 6.1.52-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+1	6.1.52-1
`linux` Debian:13	before 6.4.11-1	6.4.11-1
`linux` Debian:14	before 6.4.11-1	6.4.11-1
`bpftool-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:7.0.0-284.30.1.el9_2	0:7.0.0-284.30.1.el9_2
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`bpftool` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:7.0.0-284.30.1.el9_2	0:7.0.0-284.30.1.el9_2
`bpftool-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:7.0.0-284.30.1.el9_2	0:7.0.0-284.30.1.el9_2
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-tools` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-tools-libs` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-zfcpdump` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-zfcpdump-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-zfcpdump-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`perf-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 15 CVEs	before 0:5.14.0-284.30.1.el9_2	0:5.14.0-284.30.1.el9_2
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 191 CVEs	before 6.4.0-36.1	6.4.0-36.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 191 CVEs	before 6.4.0-36.1.21.13	6.4.0-36.1.21.13
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 191 CVEs	before 6.4.0-36.1	6.4.0-36.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 191 CVEs	before 6.4.0-36.1	6.4.0-36.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 191 CVEs	before 6.4.0-38.1	6.4.0-38.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 191 CVEs	before 6.4.0-38.1	6.4.0-38.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 191 CVEs	before 6.4.0-36.1	6.4.0-36.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 191 CVEs	before 6.4.0-36.1.21.13	6.4.0-36.1.21.13
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 191 CVEs	before 6.4.0-36.1	6.4.0-36.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 191 CVEs	before 6.4.0-36.1	6.4.0-36.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 191 CVEs	before 6.4.0-38.1	6.4.0-38.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 191 CVEs	before 6.4.0-38.1	6.4.0-38.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1.150700.17.15.1	6.4.0-150700.53.22.1.150700.17.15.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-livepatch-SLE15-SP7_Update_6` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 462 CVEs	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-default` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-livepatch-SLE15-SP4_Update_46` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 173 CVEs	before 1-150400.9.5.1	1-150400.9.5.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-docs` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default` SUSE:Manager Proxy LTS 4.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Manager Proxy LTS 4.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-source` SUSE:Manager Proxy LTS 4.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-syms` SUSE:Manager Proxy LTS 4.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default` SUSE:Manager Server LTS 4.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Manager Server LTS 4.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-source` SUSE:Manager Server LTS 4.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-syms` SUSE:Manager Server LTS 4.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.8.55.1	6.4.0-150600.8.55.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.8.55.1	6.4.0-150600.8.55.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.8.55.1	6.4.0-150600.8.55.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1.150600.12.34.2	6.4.0-150600.23.78.1.150600.12.34.2
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`linux` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less 3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70	None known
`linux-aws` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	None known
`linux-azure` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	None known
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	None known
`linux` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	None known
`linux-aws` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	None known
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	None known
`linux-azure` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	None known
`linux-gcp` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	None known
`linux-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	None known
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-kvm` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	None known
`linux-oracle` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	All versions, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	None known
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	None known
`linux-aws` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1113.123~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1113.123~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1119.126~18.04.2, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1119.126~18.04.2
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1117.126~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1117.126~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-166.183~18.04.2, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-166.183~18.04.2
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1060.65~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 32 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.1	5.4.0-1060.65~18.04.1
`linux-kvm` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1112.121~18.04.4, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1112.121~18.04.4
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1097.109~18.04.2, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1097.109~18.04.2
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	None known
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83	None known
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:20.04:LTS	before 5.4.0-166.183, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	5.4.0-166.183
`linux-aws` Ubuntu:20.04:LTS	before 5.4.0-1113.123, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	5.4.0-1113.123
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1049.54~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 22 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.1	5.15.0-1049.54~20.04.1
`linux-azure` Ubuntu:20.04:LTS	before 5.4.0-1119.126, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	5.4.0-1119.126
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1051.59~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 24 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.1	5.15.0-1051.59~20.04.1
`linux-bluefield` Ubuntu:20.04:LTS	before 5.4.0-1074.80, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 33 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.79	5.4.0-1074.80
`linux-gcp` Ubuntu:20.04:LTS	before 5.4.0-1117.126, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80	5.4.0-1117.126
`linux-gcp-5.15` Ubuntu:20.04:LTS	before 5.15.0-1046.54~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 22 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.2	5.15.0-1046.54~20.04.1
`linux-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-88.98~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 22 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.1	5.15.0-88.98~20.04.1
`linux-ibm` Ubuntu:20.04:LTS	before 5.4.0-1060.65, plus listed versions 5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8 Show 39 moreShow less 5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.64	5.4.0-1060.65
`linux-ibm-5.15` Ubuntu:20.04:LTS	before 5.15.0-1042.45~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.15.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.1	5.15.0-1042.45~20.04.1
`linux-intel-iotg-5.15` Ubuntu:20.04:LTS	before 5.15.0-1045.51~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 16 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.1	5.15.0-1045.51~20.04.1
`linux-iot` Ubuntu:20.04:LTS	before 5.4.0-1025.26, plus listed versions 5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11 Show 12 moreShow less 5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.25	5.4.0-1025.26
`linux-kvm` Ubuntu:20.04:LTS	before 5.4.0-1102.108, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78	5.4.0-1102.108
`linux-lowlatency-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-88.98~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 21 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.1	5.15.0-88.98~20.04.1
`linux-nvidia-tegra-5.15` Ubuntu:20.04:LTS	before 5.15.0-1019.19~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.15.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.1	5.15.0-1019.19~20.04.1
`linux-oracle` Ubuntu:20.04:LTS	before 5.4.0-1112.121, plus listed versions 5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1034.365.4.0-1035.385.4.0-1037.405.4.0-1038.415.4.0-1039.425.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1045.495.4.0-1046.505.4.0-1048.525.4.0-1049.535.4.0-1052.565.4.0-1053.575.4.0-1054.585.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1061.655.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1066.715.4.0-1067.725.4.0-1069.755.4.0-1070.765.4.0-1071.775.4.0-1073.795.4.0-1076.83	5.4.0-1112.121

History

History
Recorded	Changed	Sources
Nov 11, 2026	affected	OSV
Nov 10, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-53556 is a high vulnerability (CVSS 7.8) in Linux, published September 16, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. Fixed in linux-lts 6.1.42-r0.