CVE-2023-53559

ip_vti: fix potential slab-use-after-free in decode_session6

7.8 HighFix available

What does this mean?

: 7.8v3.1, from CVE List
: 0.15%4th percentile
Fixed in: 6.1.50-r0linux-lts
Published: September 24, 2024
Modified: November 6, 2026
Weakness: CWE-416
Also known as: BELL-CVE-2023-53559CLSA-2025-1764151168CLSA-2026-1773832495CLSA-2026-1773872435CLSA-2026-1775779453CLSA-2026-1777614651CLSA-2026-1777614954DEBIAN-CVE-2023-53559
Show 23 moreShow less
EUVD-2025-32314GHSA-6v4x-gf5x-r6w5RHSA-2024:2394RHSA-2024:3138RXSA-2024:3138SUSE-SU-2025:21040-1SUSE-SU-2025:21052-1SUSE-SU-2025:21056-1SUSE-SU-2025:21064-1SUSE-SU-2025:4057-1SUSE-SU-2025:4111-1SUSE-SU-2025:4128-1SUSE-SU-2025:4132-1SUSE-SU-2025:4135-1SUSE-SU-2025:4139-1SUSE-SU-2025:4140-1SUSE-SU-2025:4141-1SUSE-SU-2025:4149-1SUSE-SU-2025:4188-1SUSE-SU-2025:4189-1SUSE-SU-2025:4301-1SUSE-SU-2025:4320-1UBUNTU-CVE-2023-53559

In the Linux kernel, the following vulnerability has been resolved:

ip_vti: fix potential slab-use-after-free in decode_session6

When ip_vti device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may occur when ip_vti device sends IPv6 packets. As commit f855691975bb ("xfrm6: Fix the nexthdr offset in _decode_session6.") showed, xfrm_decode_session was originally intended only for the receive path. IP6CB(skb)->nhoff is not set during transmission. Therefore, set the cb field in the skb to 0 before sending packets.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.15%Up 0.1 points since Oct 5, 2025

What each source reports

CVE List Score used 7.8

ip_vti: fix potential slab-use-after-free in decode_session6

In the Linux kernel, the following vulnerability has been resolved:

ip_vti: fix potential slab-use-after-free in decode_session6

Record: CVE-2023-53559
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2025-32314 7.8

In the Linux kernel, the following vulnerability has been resolved:

ip_vti: fix potential slab-use-after-free in decode_session6

Record: EUVD-2025-32314
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-6v4x-gf5x-r6w5 7.8

In the Linux kernel, the following vulnerability has been resolved: ip_vti: fix potential slab...

In the Linux kernel, the following vulnerability has been resolved:

ip_vti: fix potential slab-use-after-free in decode_session6

Record: GHSA-6v4x-gf5x-r6w5
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

ip_vti: fix potential slab-use-after-free in decode_session6

Record: CVE-2023-53559
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

OSVBELL-CVE-2023-53559 7.8

Record: BELL-CVE-2023-53559
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

ip_vti: fix potential slab-use-after-free in decode_session6

In the Linux kernel, the following vulnerability has been resolved:

ip_vti: fix potential slab-use-after-free in decode_session6

Record: CVE-2023-53559
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 28 moreShow less

OSVDEBIAN-CVE-2023-53559 7.8

In the Linux kernel, the following vulnerability has been resolved: ip_vti: fix potential slab-use-after-free in decode_session6 When ip_vti device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may occur when ip_vti device sends IPv6 packets. As commit f855691975bb ("xfrm6: Fix the nexthdr offset in _decode_session6.") showed, xfrm_decode_session was originally intended only for the receive path. IP6CB(skb)->nhoff is not set during transmission. Therefore, set the cb field in the skb to 0 before sending packets.

Record: DEBIAN-CVE-2023-53559
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:2394 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2024:2394
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:3138 8.0

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2024:3138
CVSS 3.1: 8.0 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRXSA-2024:3138 8.0

Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux SIG Cloud 8.10 Release Notes linked from the References section.

Record: RXSA-2024:3138
CVSS 3.1: 8.0 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-53559 6.8

Record: UBUNTU-CVE-2023-53559
CVSS 4.0: 6.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-06

OSVCLSA-2025-1764151168 No score

kernel: Fix of 40 CVEs

perf/aux: Fix AUX buffer serialization {CVE-2024-46713}
block: fix uaf for flush rq while iterating tags {CVE-2024-53170}
zram: fix potential UAF of zram table {CVE-2025-21671}
sched: sch_cake: add bounds checks to host bulk flow fairness counts {CVE-2025-21647}
bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors {CVE-2024-56675}
net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789}
isofs: Prevent the use of too small fid {CVE-2025-37780}
net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749}
sctp: detect and prevent references to a freed transport in sendmsg {CVE-2025-23142}
ipv6: sr: Fix MAC comparison to be constant-time {CVE-2025-39702}
RDMA/rxe: Fix incomplete state save in rxe_requester {CVE-2023-53539}
crypto: xts - Handle EBUSY correctly {CVE-2023-53494}
Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252}
af_unix: Fix data-races around user->unix_inflight. {CVE-2023-53204}
fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-50367}
wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072}
wifi: rtlwifi: remove unused dualmac control leftovers
wifi: rtlwifi: remove unused timer and related code
partitions: mac: fix handling of bogus partition table {CVE-2025-21772}
ipmr: do not call mr_mfc_uses_dev() for unres entries {CVE-2025-21719}
wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014}
net: mdio: validate parameter addr in mdiobus_get_phy() {CVE-2023-53019}
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751}
NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() {CVE-2025-39730}
net/mlx5e: Check for NOT_READY flag state after locking {CVE-2023-53581}
null_blk: Always check queue mode setting from configfs {CVE-2023-53576}
ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559}
rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() {CVE-2023-53558}
pstore/ram: Check start of empty przs during init {CVE-2023-53331}
wifi: ath11k: fix memory leak in WMI firmware stats {CVE-2023-53602}
wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta {CVE-2023-53229}
net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() {CVE-2022-50486}
RDMA/core: Make sure "ib_port" is valid when access sysfs node {CVE-2022-50475}
RDMA/rxe: Fix mr->map double free {CVE-2022-50543}
scsi: qla2xxx: Fix end of loop test
scsi: qla2xxx: Fix mem access after free
scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
scsi: target: Fix multiple LUN_RESET handling {CVE-2023-53586}
scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675}
scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses {CVE-2023-53675}
scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() {CVE-2023-53675}
scsi: lpfc: Fix buffer free/clear order in deferred receive path {CVE-2025-39841}
nbd: fix incomplete validation of ioctl arg {CVE-2023-53513}
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817}
bnxt: avoid overflow in bnxt_get_nvram_directory() {CVE-2023-53661}

Record: CLSA-2025-1764151168
Updated: 2026-11-02

OSVCLSA-2026-1773832495 No score

Fix of 132 CVEs

CVE-2023-53515
- virtio-mmio: don't break lifecycle of vm_dev {CVE-2023-53515}
CVE-2025-39967
- fbcon: fix integer overflow in fbcon_do_set_font {CVE-2025-39967}
- fbcon: Fix OOB access in font allocation {CVE-2025-39967}
CVE-2025-38702
- fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702}
CVE-2025-38563
- perf/core: Prevent VMA split of buffer mappings {CVE-2025-38563}
CVE-2025-39869
- dmaengine: ti: edma: Fix memory allocation size for queue_priority_map {CVE-2025-39869}
CVE-2023-53577
- bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577}
CVE-2023-53608
- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() {CVE-2023-53608}
CVE-2023-53604
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path {CVE-2023-53604}
CVE-2023-53619
- netfilter: Replace printk() with pr_*() and define pr_fmt() {CVE-2023-53619}
- netfilter: use kvmalloc_array to allocate memory for hashtable {CVE-2023-53619}
- netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619}
CVE-2025-38680
- media: uvcvideo: Fix 1-byte out-of-bounds read in {CVE-2025-38680}
CVE-2023-53454
- HID: multitouch: Correct devm device reference for hidinput {CVE-2023-53454}
CVE-2025-38699
- scsi: bfa: Double-free fix {CVE-2025-38699}
- ubi: ensure that VID header offset + VID header size <= alloc, size {CVE-2023-53265}
- scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676}
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in {CVE-2025-38699}
CVE-2023-53596
- drivers: base: Free devm resources when unregistering a {CVE-2023-53596}
CVE-2023-53622
- gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622}
- HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition {CVE-2023-53622}
CVE-2023-53090
- drm/amdkfd: Fix an illegal memory access {CVE-2023-53090}
CVE-2023-53116
- nvmet: avoid potential UAF in nvmet_req_complete() {CVE-2023-53116}
CVE-2023-53138
- net: caif: Fix use-after-free in cfusbl_device_notify() {CVE-2023-53138}
CVE-2023-53035
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() {CVE-2023-53035}
CVE-2023-53668
- ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668}
CVE-2023-53616
- jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount {CVE-2023-53616}
CVE-2023-53554
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() {CVE-2023-53554}
CVE-2023-53587
- ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587}
CVE-2023-53541
- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write {CVE-2023-53541}
CVE-2023-53559
- ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559}
CVE-2023-53484
- lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484}
- lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() {CVE-2023-53484}
CVE-2025-39824
- HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824}
CVE-2025-38715
- hfs: fix slab-out-of-bounds in hfs_bnode_read() {CVE-2025-38715}
CVE-2023-53153
- wifi: cfg80211: Fix use after free for wext {CVE-2023-53153}
CVE-2025-38555
- usb: gadget : fix use-after-free in composite_dev_cleanup() {CVE-2025-38555}
CVE-2025-39743
- jfs: truncate good inode pages when hard link is 0 {CVE-2025-39743}
CVE-2025-39945
- cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945}
CVE-2023-53506
- udf: Do not bother merging very…

Record: CLSA-2026-1773832495
Updated: 2026-11-02

OSVCLSA-2026-1773872435 No score

Fix of 137 CVEs

Miscellaneous Ubuntu changes
- update-from-bionic-master repo has been updated
Miscellaneous upstream changes
- debian: add control and changeg files [ Ubuntu: 4.15.0-254.265 ]
CVE-2023-53515
- virtio-mmio: don't break lifecycle of vm_dev {CVE-2023-53515}
CVE-2025-39967
- fbcon: fix integer overflow in fbcon_do_set_font {CVE-2025-39967}
- fbcon: Fix OOB access in font allocation {CVE-2025-39967}
CVE-2025-38702
- fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702}
CVE-2025-38563
- perf/core: Prevent VMA split of buffer mappings {CVE-2025-38563}
CVE-2025-39869
- dmaengine: ti: edma: Fix memory allocation size for queue_priority_map {CVE-2025-39869}
CVE-2023-53577
- bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577}
CVE-2023-53608
- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() {CVE-2023-53608}
CVE-2023-53604
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path {CVE-2023-53604}
CVE-2023-53619
- netfilter: Replace printk() with pr_*() and define pr_fmt() {CVE-2023-53619}
- netfilter: use kvmalloc_array to allocate memory for hashtable {CVE-2023-53619}
- netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619}
CVE-2025-38680
- media: uvcvideo: Fix 1-byte out-of-bounds read in {CVE-2025-38680}
CVE-2023-53454
- HID: multitouch: Correct devm device reference for hidinput {CVE-2023-53454}
CVE-2025-38699
- scsi: bfa: Double-free fix {CVE-2025-38699}
- ubi: ensure that VID header offset + VID header size <= alloc, size {CVE-2023-53265}
- scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676}
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in {CVE-2025-38699}
CVE-2023-53596
- drivers: base: Free devm resources when unregistering a {CVE-2023-53596}
CVE-2023-53622
- gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622}
- HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition {CVE-2023-53622}
CVE-2023-53090
- drm/amdkfd: Fix an illegal memory access {CVE-2023-53090}
CVE-2023-53116
- nvmet: avoid potential UAF in nvmet_req_complete() {CVE-2023-53116}
CVE-2023-53138
- net: caif: Fix use-after-free in cfusbl_device_notify() {CVE-2023-53138}
CVE-2023-53035
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() {CVE-2023-53035}
CVE-2023-53668
- ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668}
CVE-2023-53616
- jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount {CVE-2023-53616}
CVE-2023-53554
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() {CVE-2023-53554}
CVE-2023-53587
- ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587}
CVE-2023-53541
- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write {CVE-2023-53541}
CVE-2023-53559
- ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559}
CVE-2023-53484
- lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484}
- lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() {CVE-2023-53484}
CVE-2025-39824
- HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824}
CVE-2025-38715
- hfs: fix slab-out-of-bounds in hfs_bnode_read() {CVE-2025-38715}
CVE-2023-53153
- wifi: cfg80211: Fix use after free for wext {CVE-2023-53153}
CVE-2025-38555
- usb: gadget : fix use-after-free in composite_dev_cleanup() {CVE-2025-38555}
CVE-2025-39743
- jfs: truncate good inode…

Record: CLSA-2026-1773872435
Updated: 2026-11-02

OSVCLSA-2026-1775779453 No score

Fix of 119 CVEs

CVE-2025-39743
- jfs: truncate good inode pages when hard link is 0 {CVE-2025-39743}
CVE-2025-39685
- comedi: pcl726: Prevent invalid irq number {CVE-2025-39685}
CVE-2025-38713
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() {CVE-2025-38713}
CVE-2025-38699
- scsi: bfa: Double-free fix {CVE-2025-38699}
CVE-2025-38697
- jfs: upper bound check of tree index in dbAllocAG {CVE-2025-38697}
CVE-2025-38680
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680}
CVE-2025-38677
- f2fs: fix to avoid out-of-boundary access in dnode page {CVE-2025-38677}
CVE-2025-38572
- ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572}
CVE-2025-38538
- dmaengine: nbpfaxi: Fix memory corruption in probe() {CVE-2025-38538}
CVE-2025-38530
- comedi: pcl812: Fix bit shift out of bounds {CVE-2025-38530}
CVE-2025-38529
- comedi: aio_iiro_16: Fix bit shift out of bounds {CVE-2025-38529}
CVE-2025-38494
- HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494}
CVE-2025-38482
- comedi: das6402: Fix bit shift out of bounds {CVE-2025-38482}
CVE-2025-38428
- Input: ims-pcu - check record size in ims_pcu_flash_firmware() {CVE-2025-38428}
CVE-2025-38416
- NFC: nci: uart: Set tty->disc_data only in success path {CVE-2025-38416}
CVE-2025-38415
- Squashfs: check return result of sb_min_blocksize {CVE-2025-38415}
CVE-2025-38403
- vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403}
CVE-2025-38286
- pinctrl: at91: Fix possible out-of-boundary access {CVE-2025-38286}
CVE-2025-38245
- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245}
CVE-2025-38212
- ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212}
CVE-2025-38204
- jfs: fix array-index-out-of-bounds read in add_missing_indices {CVE-2025-38204}
CVE-2025-38157
- wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}
CVE-2025-38079
- crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
CVE-2025-38051
- smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}
CVE-2023-53676
- scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676}
CVE-2023-53675
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675}
CVE-2023-53668
- ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668}
CVE-2023-53622
- gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622}
CVE-2023-53616
- jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount {CVE-2023-53616}
CVE-2023-53608
- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() {CVE-2023-53608}
CVE-2023-53587
- ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587}
CVE-2023-53569
- ext2: Check block size validity during mount {CVE-2023-53569}
CVE-2023-53559
- ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559}
CVE-2023-53541
- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write {CVE-2023-53541}
CVE-2023-53521
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521}
CVE-2023-53506
- udf: Do not bother merging very long extents {CVE-2023-53506}
CVE-2023-53485
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev {CVE-2023-53485}
CVE-2023-53484
- lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484}
CVE-2023-53454
- HID: multitouch: Correct devm device reference for hidinput input_dev name…

Record: CLSA-2026-1775779453
Updated: 2026-11-02

OSVCLSA-2026-1777614651 No score

kernel: Fix of 55 CVEs

crypto: algif_aead - Fix minimum RX size check for decryption
crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
crypto: authencesn - Fix src offset when decrypting in-place
crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
crypto: authenc - use memcpy_sglist() instead of null skcipher
crypto: algif_aead - snapshot IV for async AEAD requests
crypto: algif_aead - Revert to operating out-of-place
crypto: algif_aead - use memcpy_sglist() instead of null skcipher
crypto: scatterwalk - Backport memcpy_sglist()
crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec {CVE-2026-22998}
xfrm: add NULL check in xfrm_update_ae_params {CVE-2023-3772}
sctp: check send stream number after wait_for_sndbuf {CVE-2023-53296}
ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value {CVE-2022-50327}
ext4: fix uninititialized value in 'ext4_evict_inode' {CVE-2022-50546}
tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). {CVE-2025-40149}
bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577}
net: add dst_dev_rcu() helper for safe dst->dev access {CVE-2025-40135}
net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204}
net: add skb_header_pointer_careful() helper
net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve {CVE-2023-4623}
ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559}
e1000e: fix heap overflow in e1000_set_eeprom {CVE-2025-39898}
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751}
md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request {CVE-2023-53380}
HID: uclogic: Correct devm device reference for hidinput input_dev name {CVE-2023-54207}
ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() {CVE-2022-50698}
selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() {CVE-2022-50699}
scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() {CVE-2023-54014}
ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() {CVE-2025-71085}
ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193}
drm/i915/gvt: fix gvt debugfs destroy {CVE-2023-54098}
nfsd: provide locking for v4_end_grace {CVE-2026-22980}
dm flakey: don't corrupt the zero page {CVE-2023-54317}
drm/amdkfd: Fix double release compute pasid {CVE-2022-50303}
RDMA/srpt: Fix a use-after-free {CVE-2022-50129}
RDMA/srpt: Introduce a reference count in struct srpt_device
RDMA/srpt: Duplicate port name members
KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
ipvlan: add ipvlan_route_v6_outbound() helper {CVE-2023-52796}
mmc: core: use scnprintf() instead of sprintf() in sysfs show functions {CVE-2022-49267}
rcu: Fix rcu_read_unlock() deadloop due to IRQ work {CVE-2025-39744}
net/mlx5: Add a timeout to acquire the command queue semaphore {CVE-2024-38556}
virtio-net: ensure the received length does not exceed allocated size {CVE-2025-38375}
cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
RDMA/mlx5: Return the firmware result upon destroying QP/RQ {CVE-2023-53286}
RDMA/rxe: Fix mr->map double free {CVE-2022-50543}
wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() {CVE-2022-50881}
tcp: fix a signed-integer-overflow bug in tcp_add_backlog() {CVE-2022-50865}
NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945}
perf/aux: Fix AUX buffer serialization {CVE-2024-46713}
usb: xhci: Fix isochronous Ring Underrun/Overrun event handling {CVE-2025-37882}
usb: xhci: Complete 'error mid TD' transfers when handling Missed Service
usb: xhci: remove…

Record: CLSA-2026-1777614651
Updated: 2026-11-02

OSVCLSA-2026-1777614954 No score

kernel: Fix of 39 CVEs

crypto: algif_aead - Fix minimum RX size check for decryption
crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl
crypto: authencesn - Fix src offset when decrypting in-place
crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption
crypto: authenc - use memcpy_sglist() instead of null skcipher
crypto: algif_aead - snapshot IV for async AEAD requests
crypto: algif_aead - Revert to operating out-of-place
crypto: algif_aead - use memcpy_sglist() instead of null skcipher
crypto: scatterwalk - Backport memcpy_sglist()
crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
macvlan: fix possible UAF in macvlan_forward_source() {CVE-2026-23001}
tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). {CVE-2025-40149}
bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577}
net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() {CVE-2023-53578}
migrate: correct lock ordering for hugetlb file folios {CVE-2026-23097}
net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve {CVE-2023-4623}
e1000e: fix heap overflow in e1000_set_eeprom {CVE-2025-39898}
ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751}
md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request {CVE-2023-53380}
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
tls: separate no-async decryption request handling from async {CVE-2024-58240}
ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689}
HID: uclogic: Correct devm device reference for hidinput input_dev name {CVE-2023-54207}
ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() {CVE-2025-71085}
ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
nfsd: provide locking for v4_end_grace {CVE-2026-22980}
ext4: fix uninititialized value in 'ext4_evict_inode' {CVE-2022-50546}
ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559}
dm flakey: don't corrupt the zero page {CVE-2023-54317}
net: add dst_dev_rcu() helper for safe dst->dev access {CVE-2025-40135}
xhci: simplify event ring dequeue tracking for transfer events
i40e: increase max descriptors for XL710
perf/core: Prevent VMA split of buffer mappings {CVE-2025-38563}
net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
ipvlan: add ipvlan_route_v6_outbound() helper {CVE-2023-52796}
net: phylink: add lock for serializing concurrent pl->phydev writes with resolver {CVE-2025-39905}
kyber: fix out of bounds access when preempted {CVE-2021-46984}
page_pool: Fix use-after-free in page_pool_recycle_in_ring {CVE-2025-38129}
scsi: mpi3mr: Use number of bits to manage bitmap sizes {CVE-2023-53376}
crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
ipv6: use RCU for dst->dev access in ip6_xmit, ip6_output, ip6_finish_output2 {CVE-2025-40135} {CVE-2025-40158}
HID: hyperv: Correctly access fields declared as __le16 {CVE-2025-38103}
i40e: add validation for ring_len param {CVE-2025-39973}
mmc: core: use sysfs_emit() instead of sprintf() {CVE-2022-49267}
cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
drm/amdkfd: Fix double release compute pasid {CVE-2022-50303}
drm/amd/display: Check dce_hwseq before dereferencing it {CVE-2025-38361}
RDMA/rxe: Fix mr->map double free {CVE-2022-50543}
virtio-net: ensure the received length does not exceed allocated size {CVE-2025-38375}
crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}

Record: CLSA-2026-1777614954
Updated: 2026-11-02

OSVSUSE-SU-2025:21040-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21040-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21052-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21052-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21056-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21056-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21064-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…

Record: SUSE-SU-2025:21064-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4057-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051). -…

Record: SUSE-SU-2025:4057-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4111-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).
CVE-2025-40088: hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (bsc#1252904).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).

The following non security issues were fixed:

fbcon: Fix OOB access in font allocation (bsc#1252033)
mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).

Record: SUSE-SU-2025:4111-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4128-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr…

Record: SUSE-SU-2025:4128-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4132-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…

Record: SUSE-SU-2025:4132-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4135-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise FIXME kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
CVE-2022-50388: nvme: fix multipath crash caused by flush request when blktrace is enabled (bsc#1250293).
CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250784).
CVE-2022-50432: kernfs: fix use-after-free in __kernfs_remove (bsc#1250851).
CVE-2022-50488: block, bfq: fix possible uaf for 'bfqq->bic' (bsc#1251201).
CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
CVE-2023-53282: scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1250311).
CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
CVE-2023-53395: ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (bsc#1250358).
CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
CVE-2023-53722: md: raid1: fix potential OOB in raid1_remove_disk() (bsc#1252499).
CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).

Record: SUSE-SU-2025:4135-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4139-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).
CVE-2025-40088: hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (bsc#1252904).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).

The following non security issues were fixed:

fbcon: Fix OOB access in font allocation (bsc#1252033)
mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).

Record: SUSE-SU-2025:4139-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4140-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures…

Record: SUSE-SU-2025:4140-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4141-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…

Record: SUSE-SU-2025:4141-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4149-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-38084: hugetlb: unshare some PMDs when splitting VMAs (bsc#1245498).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245499).
CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
CVE-2025-39797: xfrm: Duplicate SPI Handling (bsc#1249608).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39981: Bluetooth: MGMT: Fix possible UAFs (bsc#1252060).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).

The following non security issues were fixed:

NFS: remove revoked delegation from server's delegation list (bsc#1246211).
NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
fbcon: Fix OOB access in font allocation (bsc#1252033)
kabi fix for NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).
net: mana: Switch to page pool for jumbo frames (bsc#1248754).
net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency (bsc#1248754).
netfilter: nft_objref: validate objref and objrefmap expressions (bsc#1250237). No CVE available yet, please see the bugzilla ticket referenced.

Record: SUSE-SU-2025:4149-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4188-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
CVE-2022-50388: nvme: fix multipath crash caused by flush request when blktrace is enabled (bsc#1250293).
CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250784).
CVE-2022-50432: kernfs: fix use-after-free in __kernfs_remove (bsc#1250851).
CVE-2022-50488: block, bfq: fix possible uaf for 'bfqq->bic' (bsc#1251201).
CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
CVE-2023-53282: scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1250311).
CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
CVE-2023-53395: ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (bsc#1250358).
CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
CVE-2023-53722: md: raid1: fix potential OOB in raid1_remove_disk() (bsc#1252499).
CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).

Record: SUSE-SU-2025:4188-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4189-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2021-4460: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning (bsc#1250764).
CVE-2022-48631: ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (bsc#1223475).
CVE-2022-50236: iommu/mediatek: Fix crash on isr after kexec() (bsc#1249702).
CVE-2022-50249: memory: of: Fix refcount leak bug in of_get_ddr_timings() (bsc#1249747).
CVE-2022-50280: pnode: terminate at peers of source (bsc#1249806).
CVE-2022-50293: btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range (bsc#1249752).
CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
CVE-2022-50350: scsi: target: iscsi: Fix a race condition between login_work and the login thread (bsc#1250261).
CVE-2022-50356: net: sched: sfb: fix null pointer access issue when sfb_init() fails (bsc#1250040).
CVE-2022-50367: fs: fix UAF/GPF bug in nilfs_mdt_destroy (bsc#1250277).
CVE-2022-50394: i2c: ismt: Fix an out-of-bounds bug in ismt_access() (bsc#1250107).
CVE-2022-50395: integrity: Fix memory leakage in keyring allocation error path (bsc#1250211).
CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250784).
CVE-2022-50443: drm/rockchip: lvds: fix PM usage counter unbalance in poweron (bsc#1250768).
CVE-2022-50459: scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() (bsc#1250850).
CVE-2022-50481: cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (bsc#1251051).
CVE-2022-50485: ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (bsc#1251197).
CVE-2022-50505: iommu/amd: Fix pci device refcount leak in ppr_notifier() (bsc#1251086).
CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
CVE-2022-50542: media: si470x: Fix use-after-free in si470x_int_in_callback() (bsc#1251330).
CVE-2022-50571: btrfs: call __btrfs_remove_free_space_cache_locked on cache load failure (bsc#1252487).
CVE-2023-53183: btrfs: exit gracefully if reloc roots don't match (bsc#1249863).
CVE-2023-53185: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (bsc#1249820).
CVE-2023-53188: net: openvswitch: fix race on port output (bsc#1249854).
CVE-2023-53191: irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains (bsc#1249721).
CVE-2023-53204: af_unix: Fix data-races around user->unix_inflight (bsc#1249682).
CVE-2023-53271: ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() (bsc#1249916).
CVE-2023-53282: scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1250311).
CVE-2023-53289: media: bdisp: Add missing check for create_workqueue (bsc#1249941).
CVE-2023-53292: blk-mq: protect q->elevator by ->sysfs_lock in blk_mq_elv_switch_none (bsc#1250163).
CVE-2023-53338: lwt: Fix return values of BPF xmit ops (bsc#1250074).
CVE-2023-53339: btrfs: fix BUG_ON condition in btrfs_cancel_balance (bsc#1250329).
CVE-2023-53373: crypto: seqiv - Handle EBUSY correctly (bsc#1250137).
CVE-2023-53433: net: add vlan_get_protocol_and_depth() helper (bsc#1250164).
CVE-2023-53476: iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() (bsc#1250839).
CVE-2023-53477: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation (bsc#1250840).
CVE-2023-53484: lib: cpu_rmap: Avoid use after free on rmap->obj array entries (bsc#1250895).
CVE-2023-53517: tipc: do not update mtu if msg_max is too small in mtu negotiation (bsc#1250919).
CVE-2023-53519: media: v4l2-mem2mem: add lock to protect parameter num_rdy (bsc#1250964).
CVE-2023-53540: wifi: cfg80211: reject auth/assoc to AP with our address (bsc#1251053).
CVE-2023-53548: net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (bsc#1251066).
CVE-2023-53556: iavf: Fix use-after-free in free_netdev (bsc#1251059). -…

Record: SUSE-SU-2025:4189-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4301-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319 bsc#1252236).
CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation…

Record: SUSE-SU-2025:4301-1
Updated: 2026-11-02

OSVSUSE-SU-2025:4320-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-38084: hugetlb: unshare some PMDs when splitting VMAs (bsc#1245498).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245499).
CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
CVE-2025-39797: xfrm: Duplicate SPI Handling (bsc#1249608).
CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
CVE-2025-39981: Bluetooth: MGMT: Fix possible UAFs (bsc#1252060).
CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).

The following non security issues were fixed:

NFS: remove revoked delegation from server's delegation list (bsc#1246211).
NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
fbcon: Fix OOB access in font allocation (bsc#1252033)
kabi fix for NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).
net: mana: Switch to page pool for jumbo frames (bsc#1248754).
net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency (bsc#1248754).
netfilter: nft_objref: validate objref and objrefmap expressions (bsc#1250237).
rpm/check-for-config-changes: ignore CONFIG_SCHED_PROXY_EXEC, too (bsc#1250946)

Record: SUSE-SU-2025:4320-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`linux-lts` Alpaquita:23	6.1.45-r0 up to 6.1.50-r0	6.1.50-r0
`linux-lts` Alpaquita:stream	6.1.112-r0 up to 6.6.58-r0	6.6.58-r0
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.7.els24	7.0.0-284.1101.el9_2.tuxcare.7.els24
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-cross-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-doc` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-tools` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-tools-libs` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`kernel-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`libbpf` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els24	2:1.0.0-2.el9_2.tuxcare.7.els24
`libbpf-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els24	2:1.0.0-2.el9_2.tuxcare.7.els24
`libbpf-static` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els24	2:1.0.0-2.el9_2.tuxcare.7.els24
`perf` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`python3-perf` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`rtla` TuxCare:AlmaLinux:9.2 From an advisory covering 39 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els24	5.14.0-284.1101.el9_2.tuxcare.7.els24
`linux-buildinfo-4.15.0-254-tuxcare.els42-generic` TuxCare:Ubuntu:18.04 From an advisory covering 114 CVEs	before 4.15.0-254.265	4.15.0-254.265
`linux-buildinfo-4.15.0-254-tuxcare.els42-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 114 CVEs	before 4.15.0-254.265	4.15.0-254.265
`linux-cloud-tools-4.15.0-254-tuxcare.els42` TuxCare:Ubuntu:18.04 From an advisory covering 114 CVEs	before 4.15.0-254.265	4.15.0-254.265
`linux-cloud-tools-4.15.0-254-tuxcare.els42-generic` TuxCare:Ubuntu:18.04 From an advisory covering 114 CVEs	before 4.15.0-254.265	4.15.0-254.265
`linux-cloud-tools-4.15.0-254-tuxcare.els42-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 114 CVEs	before 4.15.0-254.265	4.15.0-254.265
`linux-cloud-tools-common` TuxCare:Ubuntu:18.04 From an advisory covering 114 CVEs	before 4.15.0-254.265	4.15.0-254.265
`linux-doc` TuxCare:Ubuntu:18.04 From an advisory covering 114 CVEs	before 4.15.0-254.265	4.15.0-254.265
`linux-headers-4.15.0-254-tuxcare.els42` TuxCare:Ubuntu:18.04 From an advisory covering 114 CVEs	before 4.15.0-254.265	4.15.0-254.265
`linux-headers-4.15.0-254-tuxcare.els42-generic` TuxCare:Ubuntu:18.04 From an advisory covering 114 CVEs	before 4.15.0-254.265	4.15.0-254.265
`linux-headers-4.15.0-254-tuxcare.els42-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 114 CVEs	before 4.15.0-254.265	4.15.0-254.265
`linux-image-unsigned-4.15.0-254-tuxcare.els42-generic` TuxCare:Ubuntu:18.04 From an advisory covering 114 CVEs	before 4.15.0-254.265	4.15.0-254.265
`linux-image-unsigned-4.15.0-254-tuxcare.els42-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 114 CVEs	before 4.15.0-254.265	4.15.0-254.265
`linux-libc-dev` TuxCare:Ubuntu:18.04 From an advisory covering 114 CVEs	before 4.15.0-254.265	4.15.0-254.265
`linux-modules-4.15.0-254-tuxcare.els42-generic` TuxCare:Ubuntu:18.04 From an advisory covering 114 CVEs	before 4.15.0-254.265	4.15.0-254.265
`linux-modules-4.15.0-254-tuxcare.els42-lowlatency` TuxCare:Ubuntu:18.04 From an advisory covering 114 CVEs	before 4.15.0-254.265	4.15.0-254.265
`Kernel` Linux	3.19.0 up to 4.14.324, 4.15.0 up to 4.19.293, 4.20.0 up to 5.4.255, 5.5.0 up to 5.10.192, 5.11.0 up to 5.15.128, 5.16.0 up to 6.1.47, 6.2.0 up to 6.4.12	4.14.3244.19.2935.4.2555.10.1925.15.1286.1.476.4.12
`linux` Debian:12	before 6.1.52-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+1	6.1.52-1
`linux` Debian:13	before 6.4.13-1	6.4.13-1
`linux` Debian:14	before 6.4.13-1	6.4.13-1
`bpftool-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:7.3.0-427.13.1.el9_4	0:7.3.0-427.13.1.el9_4
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`rv` Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`bpftool` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:7.3.0-427.13.1.el9_4	0:7.3.0-427.13.1.el9_4
`bpftool-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:7.3.0-427.13.1.el9_4	0:7.3.0-427.13.1.el9_4
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-tools` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-tools-libs` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-uki-virt` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel-zfcpdump` Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs	before 0:5.14.0-427.13.1.el9_4	0:5.14.0-427.13.1.el9_4
`kernel` Rocky Linux:8 From an advisory covering 160 CVEs	before 0:4.18.0-553.123.1.el8_10.cloud.0.1	0:4.18.0-553.123.1.el8_10.cloud.0.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 191 CVEs	before 6.4.0-36.1	6.4.0-36.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 191 CVEs	before 6.4.0-36.1.21.13	6.4.0-36.1.21.13
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 191 CVEs	before 6.4.0-36.1	6.4.0-36.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 191 CVEs	before 6.4.0-36.1	6.4.0-36.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 191 CVEs	before 6.4.0-38.1	6.4.0-38.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 191 CVEs	before 6.4.0-38.1	6.4.0-38.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 191 CVEs	before 6.4.0-36.1	6.4.0-36.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 191 CVEs	before 6.4.0-36.1.21.13	6.4.0-36.1.21.13
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 191 CVEs	before 6.4.0-36.1	6.4.0-36.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 191 CVEs	before 6.4.0-36.1	6.4.0-36.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 191 CVEs	before 6.4.0-38.1	6.4.0-38.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 191 CVEs	before 6.4.0-38.1	6.4.0-38.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1.150700.17.15.1	6.4.0-150700.53.22.1.150700.17.15.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-livepatch-SLE15-SP7_Update_6` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 462 CVEs	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 462 CVEs	before 6.4.0-150700.53.22.1	6.4.0-150700.53.22.1
`kernel-default` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-default` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-livepatch-SLE15-SP4_Update_46` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 173 CVEs	before 1-150400.9.5.1	1-150400.9.5.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-docs` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default` SUSE:Manager Proxy LTS 4.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Manager Proxy LTS 4.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-source` SUSE:Manager Proxy LTS 4.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-syms` SUSE:Manager Proxy LTS 4.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default` SUSE:Manager Server LTS 4.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-default-base` SUSE:Manager Server LTS 4.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1.150400.24.94.2	5.14.21-150400.24.184.1.150400.24.94.2
`kernel-source` SUSE:Manager Server LTS 4.3 From an advisory covering 173 CVEs	before 5.14.21-150400.24.184.1	5.14.21-150400.24.184.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.8.55.1	6.4.0-150600.8.55.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.8.55.1	6.4.0-150600.8.55.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.8.55.1	6.4.0-150600.8.55.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1.150600.12.34.2	6.4.0-150600.23.78.1.150600.12.34.2
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.23.78.1	6.4.0-150600.23.78.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 190 CVEs	before 6.4.0-150600.10.58.1	6.4.0-150600.10.58.1
`linux-aws` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	None known
`linux-azure` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	None known
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	None known
`linux` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	None known
`linux-aws` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	None known
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	None known
`linux-azure` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	None known
`linux-gcp` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	None known
`linux-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	None known
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-kvm` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	None known
`linux-oracle` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	All versions, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	None known
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	None known
`linux-aws` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1116.126~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1116.126~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1121.128~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1121.128~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1120.129~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1120.129~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-169.187~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-169.187~18.04.1
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1063.68~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 34 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.1	5.4.0-1063.68~18.04.1
`linux-kvm` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1115.124~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1115.124~18.04.1
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1100.112~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1100.112~18.04.1
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	None known
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83	None known
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:20.04:LTS	before 5.4.0-169.187, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	5.4.0-169.187
`linux-aws` Ubuntu:20.04:LTS	before 5.4.0-1116.126, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	5.4.0-1116.126
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1051.56~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 24 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.1	5.15.0-1051.56~20.04.1
`linux-azure` Ubuntu:20.04:LTS	before 5.4.0-1121.128, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	5.4.0-1121.128
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1053.61~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 26 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.1	5.15.0-1053.61~20.04.1
`linux-bluefield` Ubuntu:20.04:LTS	before 5.4.0-1076.82, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 35 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.81	5.4.0-1076.82
`linux-gcp` Ubuntu:20.04:LTS	before 5.4.0-1120.129, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80	5.4.0-1120.129
`linux-gcp-5.15` Ubuntu:20.04:LTS	before 5.15.0-1048.56~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 24 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.1	5.15.0-1048.56~20.04.1
`linux-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-91.101~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 24 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.1	5.15.0-91.101~20.04.1
`linux-ibm` Ubuntu:20.04:LTS	before 5.4.0-1063.68, plus listed versions 5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8 Show 41 moreShow less 5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.66	5.4.0-1063.68
`linux-ibm-5.15` Ubuntu:20.04:LTS	before 5.15.0-1044.47~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 5 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.1	5.15.0-1044.47~20.04.1
`linux-intel-iotg-5.15` Ubuntu:20.04:LTS	before 5.15.0-1046.52~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 17 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.1	5.15.0-1046.52~20.04.1
`linux-iot` Ubuntu:20.04:LTS	before 5.4.0-1028.29, plus listed versions 5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11 Show 14 moreShow less 5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.27	5.4.0-1028.29
`linux-kvm` Ubuntu:20.04:LTS	before 5.4.0-1104.111, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78	5.4.0-1104.111
`linux-lowlatency-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-91.101~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 23 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.1	5.15.0-91.101~20.04.1
`linux-nvidia-tegra-5.15` Ubuntu:20.04:LTS	before 5.15.0-1020.20~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 4 moreShow less 5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.1	5.15.0-1020.20~20.04.1
`linux-oracle` Ubuntu:20.04:LTS	before 5.4.0-1115.124, plus listed versions 5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1034.365.4.0-1035.385.4.0-1037.405.4.0-1038.415.4.0-1039.425.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1045.495.4.0-1046.505.4.0-1048.525.4.0-1049.535.4.0-1052.565.4.0-1053.575.4.0-1054.585.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1061.655.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1066.715.4.0-1067.725.4.0-1069.755.4.0-1070.765.4.0-1071.775.4.0-1073.795.4.0-1076.83	5.4.0-1115.124
`linux-oracle-5.15` Ubuntu:20.04:LTS	before 5.15.0-1049.55~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 23 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.1	5.15.0-1049.55~20.04.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-53559 is a high vulnerability (CVSS 7.8) in Linux, published September 24, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. Fixed in linux-lts 6.1.50-r0.