CVE-2023-53860
dm: don't attempt to queue IO under RCU protection
In the Linux kernel, the following vulnerability has been resolved:
dm: don't attempt to queue IO under RCU protection
dm looks up the table for IO based on the request type, with an assumption that if the request is marked REQ_NOWAIT, it's fine to attempt to submit that IO while under RCU read lock protection. This is not OK, as REQ_NOWAIT just means that we should not be sleeping waiting on other IO, it does not mean that we can't potentially schedule.
A simple test case demonstrates this quite nicely:
int main(int argc, char *argv[]) { struct iovec iov; int fd;
fd = open("/dev/dm-0", O_RDONLY | O_DIRECT);
posix_memalign(&iov.iov_base, 4096, 4096);
iov.iov_len = 4096;
preadv2(fd, &iov, 1, 0, RWF_NOWAIT);
return 0;
}
which will instantly spew:
BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5580, name: dm-nowait preempt_count: 0, expected: 0 RCU nest depth: 1, expected: 0 INFO: lockdep is turned off. CPU: 7 PID: 5580 Comm: dm-nowait Not tainted 6.6.0-rc1-g39956d2dcd81 #132 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x11d/0x1b0 __might_resched+0x3c3/0x5e0 ? preempt_count_sub+0x150/0x150 mempool_alloc+0x1e2/0x390 ? mempool_resize+0x7d0/0x7d0 ? lock_sync+0x190/0x190 ? lock_release+0x4b7/0x670 ? internal_get_user_pages_fast+0x868/0x2d40 bio_alloc_bioset+0x417/0x8c0 ? bvec_alloc+0x200/0x200 ? internal_get_user_pages_fast+0xb8c/0x2d40 bio_alloc_clone+0x53/0x100 dm_submit_bio+0x27f/0x1a20 ? lock_release+0x4b7/0x670 ? blk_try_enter_queue+0x1a0/0x4d0 ? dm_dax_direct_access+0x260/0x260 ? rcu_is_watching+0x12/0xb0 ? blk_try_enter_queue+0x1cc/0x4d0 __submit_bio+0x239/0x310 ? __bio_queue_enter+0x700/0x700 ? kvm_clock_get_cycles+0x40/0x60 ? ktime_get+0x285/0x470 submit_bio_noacct_nocheck+0x4d9/0xb80 ? should_fail_request+0x80/0x80 ? preempt_count_sub+0x150/0x150 ? lock_release+0x4b7/0x670 ? __bio_add_page+0x143/0x2d0 ? iov_iter_revert+0x27/0x360 submit_bio_noacct+0x53e/0x1b30 submit_bio_wait+0x10a/0x230 ? submit_bio_wait_endio+0x40/0x40 __blkdev_direct_IO_simple+0x4f8/0x780 ? blkdev_bio_end_io+0x4c0/0x4c0 ? stack_trace_save+0x90/0xc0 ? __bio_clone+0x3c0/0x3c0 ? lock_release+0x4b7/0x670 ? lock_sync+0x190/0x190 ? atime_needs_update+0x3bf/0x7e0 ? timestamp_truncate+0x21b/0x2d0 ? inode_owner_or_capable+0x240/0x240 blkdev_direct_IO.part.0+0x84a/0x1810 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 ? blkdev_read_iter+0x40d/0x530 ? reacquire_held_locks+0x4e0/0x4e0 ? __blkdev_direct_IO_simple+0x780/0x780 ? rcu_is_watching+0x12/0xb0 ? __mark_inode_dirty+0x297/0xd50 ? preempt_count_add+0x72/0x140 blkdev_read_iter+0x2a4/0x530 do_iter_readv_writev+0x2f2/0x3c0 ? generic_copy_file_range+0x1d0/0x1d0 ? fsnotify_perm.part.0+0x25d/0x630 ? security_file_permission+0xd8/0x100 do_iter_read+0x31b/0x880 ? import_iovec+0x10b/0x140 vfs_readv+0x12d/0x1a0 ? vfs_iter_read+0xb0/0xb0 ? rcu_is_watching+0x12/0xb0 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 do_preadv+0x1b3/0x260 ? do_readv+0x370/0x370 __x64_sys_preadv2+0xef/0x150 do_syscall_64+0x39/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5af41ad806 Code: 41 54 41 89 fc 55 44 89 c5 53 48 89 cb 48 83 ec 18 80 3d e4 dd 0d 00 00 74 7a 45 89 c1 49 89 ca 45 31 c0 b8 47 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 be 00 00 00 48 85 c0 79 4a 48 8b 0d da 55 RSP: 002b:00007ffd3145c7f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5af41ad806 RDX: 0000000000000001 RSI: 00007ffd3145c850 RDI: 0000000000000003 RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000008 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 00007ffd3145c850 R14: 000055f5f0431dd8 R15: 0000000000000001 </TASK>
where in fact it is ---truncated---
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used 7.8
dm: don't attempt to queue IO under RCU protection
In the Linux kernel, the following vulnerability has been resolved:
dm: don't attempt to queue IO under RCU protection
dm looks up the table for IO based on the request type, with an assumption that if the request is marked REQ_NOWAIT, it's fine to attempt to submit that IO while under RCU read lock protection. This is not OK, as REQ_NOWAIT just means that we should not be sleeping waiting on other IO, it does not mean that we can't potentially schedule.
A simple test case demonstrates this quite nicely:
int main(int argc, char *argv[]) { struct iovec iov; int fd;
fd = open("/dev/dm-0", O_RDONLY | O_DIRECT);
posix_memalign(&iov.iov_base, 4096, 4096);
iov.iov_len = 4096;
preadv2(fd, &iov, 1, 0, RWF_NOWAIT);
return 0;
}
which will instantly spew:
BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5580, name: dm-nowait preempt_count: 0, expected: 0 RCU nest depth: 1, expected: 0 INFO: lockdep is turned off. CPU: 7 PID: 5580 Comm: dm-nowait Not tainted 6.6.0-rc1-g39956d2dcd81 #132 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x11d/0x1b0 __might_resched+0x3c3/0x5e0 ? preempt_count_sub+0x150/0x150 mempool_alloc+0x1e2/0x390 ? mempool_resize+0x7d0/0x7d0 ? lock_sync+0x190/0x190 ? lock_release+0x4b7/0x670 ? internal_get_user_pages_fast+0x868/0x2d40 bio_alloc_bioset+0x417/0x8c0 ? bvec_alloc+0x200/0x200 ? internal_get_user_pages_fast+0xb8c/0x2d40 bio_alloc_clone+0x53/0x100 dm_submit_bio+0x27f/0x1a20 ? lock_release+0x4b7/0x670 ? blk_try_enter_queue+0x1a0/0x4d0 ? dm_dax_direct_access+0x260/0x260 ? rcu_is_watching+0x12/0xb0 ? blk_try_enter_queue+0x1cc/0x4d0 __submit_bio+0x239/0x310 ? __bio_queue_enter+0x700/0x700 ? kvm_clock_get_cycles+0x40/0x60 ? ktime_get+0x285/0x470 submit_bio_noacct_nocheck+0x4d9/0xb80 ? should_fail_request+0x80/0x80 ? preempt_count_sub+0x150/0x150 ? lock_release+0x4b7/0x670 ? __bio_add_page+0x143/0x2d0 ? iov_iter_revert+0x27/0x360 submit_bio_noacct+0x53e/0x1b30 submit_bio_wait+0x10a/0x230 ? submit_bio_wait_endio+0x40/0x40 __blkdev_direct_IO_simple+0x4f8/0x780 ? blkdev_bio_end_io+0x4c0/0x4c0 ? stack_trace_save+0x90/0xc0 ? __bio_clone+0x3c0/0x3c0 ? lock_release+0x4b7/0x670 ? lock_sync+0x190/0x190 ? atime_needs_update+0x3bf/0x7e0 ? timestamp_truncate+0x21b/0x2d0 ? inode_owner_or_capable+0x240/0x240 blkdev_direct_IO.part.0+0x84a/0x1810 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 ? blkdev_read_iter+0x40d/0x530 ? reacquire_held_locks+0x4e0/0x4e0 ? __blkdev_direct_IO_simple+0x780/0x780 ? rcu_is_watching+0x12/0xb0 ? __mark_inode_dirty+0x297/0xd50 ? preempt_count_add+0x72/0x140 blkdev_read_iter+0x2a4/0x530 do_iter_readv_writev+0x2f2/0x3c0 ? generic_copy_file_range+0x1d0/0x1d0 ? fsnotify_perm.part.0+0x25d/0x630 ? security_file_permission+0xd8/0x100 do_iter_read+0x31b/0x880 ? import_iovec+0x10b/0x140 vfs_readv+0x12d/0x1a0 ? vfs_iter_read+0xb0/0xb0 ? rcu_is_watching+0x12/0xb0 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 do_preadv+0x1b3/0x260 ? do_readv+0x370/0x370 __x64_sys_preadv2+0xef/0x150 do_syscall_64+0x39/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5af41ad806 Code: 41 54 41 89 fc 55 44 89 c5 53 48 89 cb 48 83 ec 18 80 3d e4 dd 0d 00 00 74 7a 45 89 c1 49 89 ca 45 31 c0 b8 47 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 be 00 00 00 48 85 c0 79 4a 48 8b 0d da 55 RSP: 002b:00007ffd3145c7f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5af41ad806 RDX: 0000000000000001 RSI: 00007ffd3145c850 RDI: 0000000000000003 RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000008 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 00007ffd3145c850 R14: 000055f5f0431dd8 R15: 0000000000000001 </TASK>
where in fact it is ---truncated---
- Record
CVE-2023-53860- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2023-60136 7.8
In the Linux kernel, the following vulnerability has been resolved:
dm: don't attempt to queue IO under RCU protection
dm looks up the table for IO based on the request type, with an assumption that if the request is marked REQ_NOWAIT, it's fine to attempt to submit that IO while under RCU read lock protection. This is not OK, as REQ_NOWAIT just means that we should not be sleeping waiting on other IO, it does not mean that we can't potentially schedule.
A simple test case demonstrates this quite nicely:
int main(int argc, char *argv[]) { struct iovec iov; int fd;
fd = open("/dev/dm-0", O_RDONLY | O_DIRECT);
posix_memalign(&iov.iov_base, 4096, 4096);
iov.iov_len = 4096;
preadv2(fd, &iov, 1, 0, RWF_NOWAIT);
return 0;
}
which will instantly spew:
BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5580, name: dm-nowait preempt_count: 0, expected: 0 RCU nest depth: 1, expected: 0 INFO: lockdep is turned off. CPU: 7 PID: 5580 Comm: dm-nowait Not tainted 6.6.0-rc1-g39956d2dcd81 #132 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x11d/0x1b0 __might_resched+0x3c3/0x5e0 ? preempt_count_sub+0x150/0x150 mempool_alloc+0x1e2/0x390 ? mempool_resize+0x7d0/0x7d0 ? lock_sync+0x190/0x190 ? lock_release+0x4b7/0x670 ? internal_get_user_pages_fast+0x868/0x2d40 bio_alloc_bioset+0x417/0x8c0 ? bvec_alloc+0x200/0x200 ? internal_get_user_pages_fast+0xb8c/0x2d40 bio_alloc_clone+0x53/0x100 dm_submit_bio+0x27f/0x1a20 ? lock_release+0x4b7/0x670 ? blk_try_enter_queue+0x1a0/0x4d0 ? dm_dax_direct_access+0x260/0x260 ? rcu_is_watching+0x12/0xb0 ? blk_try_enter_queue+0x1cc/0x4d0 __submit_bio+0x239/0x310 ? __bio_queue_enter+0x700/0x700 ? kvm_clock_get_cycles+0x40/0x60 ? ktime_get+0x285/0x470 submit_bio_noacct_nocheck+0x4d9/0xb80 ? should_fail_request+0x80/0x80 ? preempt_count_sub+0x150/0x150 ? lock_release+0x4b7/0x670 ? __bio_add_page+0x143/0x2d0 ? iov_iter_revert+0x27/0x360 submit_bio_noacct+0x53e/0x1b30 submit_bio_wait+0x10a/0x230 ? submit_bio_wait_endio+0x40/0x40 __blkdev_direct_IO_simple+0x4f8/0x780 ? blkdev_bio_end_io+0x4c0/0x4c0 ? stack_trace_save+0x90/0xc0 ? __bio_clone+0x3c0/0x3c0 ? lock_release+0x4b7/0x670 ? lock_sync+0x190/0x190 ? atime_needs_update+0x3bf/0x7e0 ? timestamp_truncate+0x21b/0x2d0 ? inode_owner_or_capable+0x240/0x240 blkdev_direct_IO.part.0+0x84a/0x1810 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 ? blkdev_read_iter+0x40d/0x530 ? reacquire_held_locks+0x4e0/0x4e0 ? __blkdev_direct_IO_simple+0x780/0x780 ? rcu_is_watching+0x12/0xb0 ? __mark_inode_dirty+0x297/0xd50 ? preempt_count_add+0x72/0x140 blkdev_read_iter+0x2a4/0x530 do_iter_readv_writev+0x2f2/0x3c0 ? generic_copy_file_range+0x1d0/0x1d0 ? fsnotify_perm.part.0+0x25d/0x630 ? security_file_permission+0xd8/0x100 do_iter_read+0x31b/0x880 ? import_iovec+0x10b/0x140 vfs_readv+0x12d/0x1a0 ? vfs_iter_read+0xb0/0xb0 ? rcu_is_watching+0x12/0xb0 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 do_preadv+0x1b3/0x260 ? do_readv+0x370/0x370 __x64_sys_preadv2+0xef/0x150 do_syscall_64+0x39/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5af41ad806 Code: 41 54 41 89 fc 55 44 89 c5 53 48 89 cb 48 83 ec 18 80 3d e4 dd 0d 00 00 74 7a 45 89 c1 49 89 ca 45 31 c0 b8 47 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 be 00 00 00 48 85 c0 79 4a 48 8b 0d da 55 RSP: 002b:00007ffd3145c7f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5af41ad806 RDX: 0000000000000001 RSI: 00007ffd3145c850 RDI: 0000000000000003 RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000008 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 00007ffd3145c850 R14: 000055f5f0431dd8 R15: 0000000000000001 </TASK>
where in fact it is ---truncated---
- Record
EUVD-2023-60136- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-g5v9-7ppc-vg8p 7.8
In the Linux kernel, the following vulnerability has been resolved: dm: don't attempt to queue...
In the Linux kernel, the following vulnerability has been resolved:
dm: don't attempt to queue IO under RCU protection
dm looks up the table for IO based on the request type, with an assumption that if the request is marked REQ_NOWAIT, it's fine to attempt to submit that IO while under RCU read lock protection. This is not OK, as REQ_NOWAIT just means that we should not be sleeping waiting on other IO, it does not mean that we can't potentially schedule.
A simple test case demonstrates this quite nicely:
int main(int argc, char *argv[]) { struct iovec iov; int fd;
fd = open("/dev/dm-0", O_RDONLY | O_DIRECT);
posix_memalign(&iov.iov_base, 4096, 4096);
iov.iov_len = 4096;
preadv2(fd, &iov, 1, 0, RWF_NOWAIT);
return 0;
}
which will instantly spew:
BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5580, name: dm-nowait preempt_count: 0, expected: 0 RCU nest depth: 1, expected: 0 INFO: lockdep is turned off. CPU: 7 PID: 5580 Comm: dm-nowait Not tainted 6.6.0-rc1-g39956d2dcd81 #132 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x11d/0x1b0 __might_resched+0x3c3/0x5e0 ? preempt_count_sub+0x150/0x150 mempool_alloc+0x1e2/0x390 ? mempool_resize+0x7d0/0x7d0 ? lock_sync+0x190/0x190 ? lock_release+0x4b7/0x670 ? internal_get_user_pages_fast+0x868/0x2d40 bio_alloc_bioset+0x417/0x8c0 ? bvec_alloc+0x200/0x200 ? internal_get_user_pages_fast+0xb8c/0x2d40 bio_alloc_clone+0x53/0x100 dm_submit_bio+0x27f/0x1a20 ? lock_release+0x4b7/0x670 ? blk_try_enter_queue+0x1a0/0x4d0 ? dm_dax_direct_access+0x260/0x260 ? rcu_is_watching+0x12/0xb0 ? blk_try_enter_queue+0x1cc/0x4d0 __submit_bio+0x239/0x310 ? __bio_queue_enter+0x700/0x700 ? kvm_clock_get_cycles+0x40/0x60 ? ktime_get+0x285/0x470 submit_bio_noacct_nocheck+0x4d9/0xb80 ? should_fail_request+0x80/0x80 ? preempt_count_sub+0x150/0x150 ? lock_release+0x4b7/0x670 ? __bio_add_page+0x143/0x2d0 ? iov_iter_revert+0x27/0x360 submit_bio_noacct+0x53e/0x1b30 submit_bio_wait+0x10a/0x230 ? submit_bio_wait_endio+0x40/0x40 __blkdev_direct_IO_simple+0x4f8/0x780 ? blkdev_bio_end_io+0x4c0/0x4c0 ? stack_trace_save+0x90/0xc0 ? __bio_clone+0x3c0/0x3c0 ? lock_release+0x4b7/0x670 ? lock_sync+0x190/0x190 ? atime_needs_update+0x3bf/0x7e0 ? timestamp_truncate+0x21b/0x2d0 ? inode_owner_or_capable+0x240/0x240 blkdev_direct_IO.part.0+0x84a/0x1810 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 ? blkdev_read_iter+0x40d/0x530 ? reacquire_held_locks+0x4e0/0x4e0 ? __blkdev_direct_IO_simple+0x780/0x780 ? rcu_is_watching+0x12/0xb0 ? __mark_inode_dirty+0x297/0xd50 ? preempt_count_add+0x72/0x140 blkdev_read_iter+0x2a4/0x530 do_iter_readv_writev+0x2f2/0x3c0 ? generic_copy_file_range+0x1d0/0x1d0 ? fsnotify_perm.part.0+0x25d/0x630 ? security_file_permission+0xd8/0x100 do_iter_read+0x31b/0x880 ? import_iovec+0x10b/0x140 vfs_readv+0x12d/0x1a0 ? vfs_iter_read+0xb0/0xb0 ? rcu_is_watching+0x12/0xb0 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 do_preadv+0x1b3/0x260 ? do_readv+0x370/0x370 __x64_sys_preadv2+0xef/0x150 do_syscall_64+0x39/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5af41ad806 Code: 41 54 41 89 fc 55 44 89 c5 53 48 89 cb 48 83 ec 18 80 3d e4 dd 0d 00 00 74 7a 45 89 c1 49 89 ca 45 31 c0 b8 47 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 be 00 00 00 48 85 c0 79 4a 48 8b 0d da 55 RSP: 002b:00007ffd3145c7f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5af41ad806 RDX: 0000000000000001 RSI: 00007ffd3145c850 RDI: 0000000000000003 RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000008 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 00007ffd3145c850 R14: 000055f5f0431dd8 R15: 0000000000000001 </TASK>
where in fact it is ---truncated---
- Record
GHSA-g5v9-7ppc-vg8p- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
NVD 7.8
In the Linux kernel, the following vulnerability has been resolved:
dm: don't attempt to queue IO under RCU protection
dm looks up the table for IO based on the request type, with an assumption that if the request is marked REQ_NOWAIT, it's fine to attempt to submit that IO while under RCU read lock protection. This is not OK, as REQ_NOWAIT just means that we should not be sleeping waiting on other IO, it does not mean that we can't potentially schedule.
A simple test case demonstrates this quite nicely:
int main(int argc, char *argv[]) { struct iovec iov; int fd;
fd = open("/dev/dm-0", O_RDONLY | O_DIRECT);
posix_memalign(&iov.iov_base, 4096, 4096);
iov.iov_len = 4096;
preadv2(fd, &iov, 1, 0, RWF_NOWAIT);
return 0;
}
which will instantly spew:
BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5580, name: dm-nowait preempt_count: 0, expected: 0 RCU nest depth: 1, expected: 0 INFO: lockdep is turned off. CPU: 7 PID: 5580 Comm: dm-nowait Not tainted 6.6.0-rc1-g39956d2dcd81 #132 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x11d/0x1b0 __might_resched+0x3c3/0x5e0 ? preempt_count_sub+0x150/0x150 mempool_alloc+0x1e2/0x390 ? mempool_resize+0x7d0/0x7d0 ? lock_sync+0x190/0x190 ? lock_release+0x4b7/0x670 ? internal_get_user_pages_fast+0x868/0x2d40 bio_alloc_bioset+0x417/0x8c0 ? bvec_alloc+0x200/0x200 ? internal_get_user_pages_fast+0xb8c/0x2d40 bio_alloc_clone+0x53/0x100 dm_submit_bio+0x27f/0x1a20 ? lock_release+0x4b7/0x670 ? blk_try_enter_queue+0x1a0/0x4d0 ? dm_dax_direct_access+0x260/0x260 ? rcu_is_watching+0x12/0xb0 ? blk_try_enter_queue+0x1cc/0x4d0 __submit_bio+0x239/0x310 ? __bio_queue_enter+0x700/0x700 ? kvm_clock_get_cycles+0x40/0x60 ? ktime_get+0x285/0x470 submit_bio_noacct_nocheck+0x4d9/0xb80 ? should_fail_request+0x80/0x80 ? preempt_count_sub+0x150/0x150 ? lock_release+0x4b7/0x670 ? __bio_add_page+0x143/0x2d0 ? iov_iter_revert+0x27/0x360 submit_bio_noacct+0x53e/0x1b30 submit_bio_wait+0x10a/0x230 ? submit_bio_wait_endio+0x40/0x40 __blkdev_direct_IO_simple+0x4f8/0x780 ? blkdev_bio_end_io+0x4c0/0x4c0 ? stack_trace_save+0x90/0xc0 ? __bio_clone+0x3c0/0x3c0 ? lock_release+0x4b7/0x670 ? lock_sync+0x190/0x190 ? atime_needs_update+0x3bf/0x7e0 ? timestamp_truncate+0x21b/0x2d0 ? inode_owner_or_capable+0x240/0x240 blkdev_direct_IO.part.0+0x84a/0x1810 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 ? blkdev_read_iter+0x40d/0x530 ? reacquire_held_locks+0x4e0/0x4e0 ? __blkdev_direct_IO_simple+0x780/0x780 ? rcu_is_watching+0x12/0xb0 ? __mark_inode_dirty+0x297/0xd50 ? preempt_count_add+0x72/0x140 blkdev_read_iter+0x2a4/0x530 do_iter_readv_writev+0x2f2/0x3c0 ? generic_copy_file_range+0x1d0/0x1d0 ? fsnotify_perm.part.0+0x25d/0x630 ? security_file_permission+0xd8/0x100 do_iter_read+0x31b/0x880 ? import_iovec+0x10b/0x140 vfs_readv+0x12d/0x1a0 ? vfs_iter_read+0xb0/0xb0 ? rcu_is_watching+0x12/0xb0 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 do_preadv+0x1b3/0x260 ? do_readv+0x370/0x370 __x64_sys_preadv2+0xef/0x150 do_syscall_64+0x39/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5af41ad806 Code: 41 54 41 89 fc 55 44 89 c5 53 48 89 cb 48 83 ec 18 80 3d e4 dd 0d 00 00 74 7a 45 89 c1 49 89 ca 45 31 c0 b8 47 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 be 00 00 00 48 85 c0 79 4a 48 8b 0d da 55 RSP: 002b:00007ffd3145c7f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5af41ad806 RDX: 0000000000000001 RSI: 00007ffd3145c850 RDI: 0000000000000003 RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000008 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 00007ffd3145c850 R14: 000055f5f0431dd8 R15: 0000000000000001 </TASK>
where in fact it is ---truncated---
- Record
CVE-2023-53860- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2023-53860 7.8
- Record
BELL-CVE-2023-53860- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV 7.8
dm: don't attempt to queue IO under RCU protection
In the Linux kernel, the following vulnerability has been resolved:
dm: don't attempt to queue IO under RCU protection
dm looks up the table for IO based on the request type, with an assumption that if the request is marked REQ_NOWAIT, it's fine to attempt to submit that IO while under RCU read lock protection. This is not OK, as REQ_NOWAIT just means that we should not be sleeping waiting on other IO, it does not mean that we can't potentially schedule.
A simple test case demonstrates this quite nicely:
int main(int argc, char *argv[]) { struct iovec iov; int fd;
fd = open("/dev/dm-0", O_RDONLY | O_DIRECT);
posix_memalign(&iov.iov_base, 4096, 4096);
iov.iov_len = 4096;
preadv2(fd, &iov, 1, 0, RWF_NOWAIT);
return 0;
}
which will instantly spew:
BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5580, name: dm-nowait preempt_count: 0, expected: 0 RCU nest depth: 1, expected: 0 INFO: lockdep is turned off. CPU: 7 PID: 5580 Comm: dm-nowait Not tainted 6.6.0-rc1-g39956d2dcd81 #132 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x11d/0x1b0 __might_resched+0x3c3/0x5e0 ? preempt_count_sub+0x150/0x150 mempool_alloc+0x1e2/0x390 ? mempool_resize+0x7d0/0x7d0 ? lock_sync+0x190/0x190 ? lock_release+0x4b7/0x670 ? internal_get_user_pages_fast+0x868/0x2d40 bio_alloc_bioset+0x417/0x8c0 ? bvec_alloc+0x200/0x200 ? internal_get_user_pages_fast+0xb8c/0x2d40 bio_alloc_clone+0x53/0x100 dm_submit_bio+0x27f/0x1a20 ? lock_release+0x4b7/0x670 ? blk_try_enter_queue+0x1a0/0x4d0 ? dm_dax_direct_access+0x260/0x260 ? rcu_is_watching+0x12/0xb0 ? blk_try_enter_queue+0x1cc/0x4d0 __submit_bio+0x239/0x310 ? __bio_queue_enter+0x700/0x700 ? kvm_clock_get_cycles+0x40/0x60 ? ktime_get+0x285/0x470 submit_bio_noacct_nocheck+0x4d9/0xb80 ? should_fail_request+0x80/0x80 ? preempt_count_sub+0x150/0x150 ? lock_release+0x4b7/0x670 ? __bio_add_page+0x143/0x2d0 ? iov_iter_revert+0x27/0x360 submit_bio_noacct+0x53e/0x1b30 submit_bio_wait+0x10a/0x230 ? submit_bio_wait_endio+0x40/0x40 __blkdev_direct_IO_simple+0x4f8/0x780 ? blkdev_bio_end_io+0x4c0/0x4c0 ? stack_trace_save+0x90/0xc0 ? __bio_clone+0x3c0/0x3c0 ? lock_release+0x4b7/0x670 ? lock_sync+0x190/0x190 ? atime_needs_update+0x3bf/0x7e0 ? timestamp_truncate+0x21b/0x2d0 ? inode_owner_or_capable+0x240/0x240 blkdev_direct_IO.part.0+0x84a/0x1810 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 ? blkdev_read_iter+0x40d/0x530 ? reacquire_held_locks+0x4e0/0x4e0 ? __blkdev_direct_IO_simple+0x780/0x780 ? rcu_is_watching+0x12/0xb0 ? __mark_inode_dirty+0x297/0xd50 ? preempt_count_add+0x72/0x140 blkdev_read_iter+0x2a4/0x530 do_iter_readv_writev+0x2f2/0x3c0 ? generic_copy_file_range+0x1d0/0x1d0 ? fsnotify_perm.part.0+0x25d/0x630 ? security_file_permission+0xd8/0x100 do_iter_read+0x31b/0x880 ? import_iovec+0x10b/0x140 vfs_readv+0x12d/0x1a0 ? vfs_iter_read+0xb0/0xb0 ? rcu_is_watching+0x12/0xb0 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 do_preadv+0x1b3/0x260 ? do_readv+0x370/0x370 __x64_sys_preadv2+0xef/0x150 do_syscall_64+0x39/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5af41ad806 Code: 41 54 41 89 fc 55 44 89 c5 53 48 89 cb 48 83 ec 18 80 3d e4 dd 0d 00 00 74 7a 45 89 c1 49 89 ca 45 31 c0 b8 47 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 be 00 00 00 48 85 c0 79 4a 48 8b 0d da 55 RSP: 002b:00007ffd3145c7f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5af41ad806 RDX: 0000000000000001 RSI: 00007ffd3145c850 RDI: 0000000000000003 RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000008 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 00007ffd3145c850 R14: 000055f5f0431dd8 R15: 0000000000000001 </TASK>
where in fact it is ---truncated---
- Record
CVE-2023-53860- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 14 moreShow less
OSVDEBIAN-CVE-2023-53860 7.8
In the Linux kernel, the following vulnerability has been resolved: dm: don't attempt to queue IO under RCU protection dm looks up the table for IO based on the request type, with an assumption that if the request is marked REQ_NOWAIT, it's fine to attempt to submit that IO while under RCU read lock protection. This is not OK, as REQ_NOWAIT just means that we should not be sleeping waiting on other IO, it does not mean that we can't potentially schedule. A simple test case demonstrates this quite nicely: int main(int argc, char *argv[]) { struct iovec iov; int fd; fd = open("/dev/dm-0", O_RDONLY | O_DIRECT); posix_memalign(&iov.iov_base, 4096, 4096); iov.iov_len = 4096; preadv2(fd, &iov, 1, 0, RWF_NOWAIT); return 0; } which will instantly spew: BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5580, name: dm-nowait preempt_count: 0, expected: 0 RCU nest depth: 1, expected: 0 INFO: lockdep is turned off. CPU: 7 PID: 5580 Comm: dm-nowait Not tainted 6.6.0-rc1-g39956d2dcd81 #132 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x11d/0x1b0 __might_resched+0x3c3/0x5e0 ? preempt_count_sub+0x150/0x150 mempool_alloc+0x1e2/0x390 ? mempool_resize+0x7d0/0x7d0 ? lock_sync+0x190/0x190 ? lock_release+0x4b7/0x670 ? internal_get_user_pages_fast+0x868/0x2d40 bio_alloc_bioset+0x417/0x8c0 ? bvec_alloc+0x200/0x200 ? internal_get_user_pages_fast+0xb8c/0x2d40 bio_alloc_clone+0x53/0x100 dm_submit_bio+0x27f/0x1a20 ? lock_release+0x4b7/0x670 ? blk_try_enter_queue+0x1a0/0x4d0 ? dm_dax_direct_access+0x260/0x260 ? rcu_is_watching+0x12/0xb0 ? blk_try_enter_queue+0x1cc/0x4d0 __submit_bio+0x239/0x310 ? __bio_queue_enter+0x700/0x700 ? kvm_clock_get_cycles+0x40/0x60 ? ktime_get+0x285/0x470 submit_bio_noacct_nocheck+0x4d9/0xb80 ? should_fail_request+0x80/0x80 ? preempt_count_sub+0x150/0x150 ? lock_release+0x4b7/0x670 ? __bio_add_page+0x143/0x2d0 ? iov_iter_revert+0x27/0x360 submit_bio_noacct+0x53e/0x1b30 submit_bio_wait+0x10a/0x230 ? submit_bio_wait_endio+0x40/0x40 __blkdev_direct_IO_simple+0x4f8/0x780 ? blkdev_bio_end_io+0x4c0/0x4c0 ? stack_trace_save+0x90/0xc0 ? __bio_clone+0x3c0/0x3c0 ? lock_release+0x4b7/0x670 ? lock_sync+0x190/0x190 ? atime_needs_update+0x3bf/0x7e0 ? timestamp_truncate+0x21b/0x2d0 ? inode_owner_or_capable+0x240/0x240 blkdev_direct_IO.part.0+0x84a/0x1810 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 ? blkdev_read_iter+0x40d/0x530 ? reacquire_held_locks+0x4e0/0x4e0 ? __blkdev_direct_IO_simple+0x780/0x780 ? rcu_is_watching+0x12/0xb0 ? __mark_inode_dirty+0x297/0xd50 ? preempt_count_add+0x72/0x140 blkdev_read_iter+0x2a4/0x530 do_iter_readv_writev+0x2f2/0x3c0 ? generic_copy_file_range+0x1d0/0x1d0 ? fsnotify_perm.part.0+0x25d/0x630 ? security_file_permission+0xd8/0x100 do_iter_read+0x31b/0x880 ? import_iovec+0x10b/0x140 vfs_readv+0x12d/0x1a0 ? vfs_iter_read+0xb0/0xb0 ? rcu_is_watching+0x12/0xb0 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 do_preadv+0x1b3/0x260 ? do_readv+0x370/0x370 __x64_sys_preadv2+0xef/0x150 do_syscall_64+0x39/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5af41ad806 Code: 41 54 41 89 fc 55 44 89 c5 53 48 89 cb 48 83 ec 18 80 3d e4 dd 0d 00 00 74 7a 45 89 c1 49 89 ca 45 31 c0 b8 47 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 be 00 00 00 48 85 c0 79 4a 48 8b 0d da 55 RSP: 002b:00007ffd3145c7f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5af41ad806 RDX: 0000000000000001 RSI: 00007ffd3145c850 RDI: 0000000000000003 RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000008 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 00007ffd3145c850 R14: 000055f5f0431dd8 R15: 0000000000000001 </TASK> where in fact it is ---truncated---
- Record
DEBIAN-CVE-2023-53860- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:2394 7.8
Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- Record
RHSA-2024:2394- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-53860 7.8
In the Linux kernel, the following vulnerability has been resolved: dm: don't attempt to queue IO under RCU protection dm looks up the table for IO based on the request type, with an assumption that if the request is marked REQ_NOWAIT, it's fine to attempt to submit that IO while under RCU read lock protection. This is not OK, as REQ_NOWAIT just means that we should not be sleeping waiting on other IO, it does not mean that we can't potentially schedule. A simple test case demonstrates this quite nicely: int main(int argc, char *argv[]) { struct iovec iov; int fd; fd = open("/dev/dm-0", O_RDONLY | O_DIRECT); posix_memalign(&iov.iov_base, 4096, 4096); iov.iov_len = 4096; preadv2(fd, &iov, 1, 0, RWF_NOWAIT); return 0; } which will instantly spew: BUG: sleeping function called from invalid context at include/linux/sched/mm.h:306 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5580, name: dm-nowait preempt_count: 0, expected: 0 RCU nest depth: 1, expected: 0 INFO: lockdep is turned off. CPU: 7 PID: 5580 Comm: dm-nowait Not tainted 6.6.0-rc1-g39956d2dcd81 #132 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x11d/0x1b0 __might_resched+0x3c3/0x5e0 ? preempt_count_sub+0x150/0x150 mempool_alloc+0x1e2/0x390 ? mempool_resize+0x7d0/0x7d0 ? lock_sync+0x190/0x190 ? lock_release+0x4b7/0x670 ? internal_get_user_pages_fast+0x868/0x2d40 bio_alloc_bioset+0x417/0x8c0 ? bvec_alloc+0x200/0x200 ? internal_get_user_pages_fast+0xb8c/0x2d40 bio_alloc_clone+0x53/0x100 dm_submit_bio+0x27f/0x1a20 ? lock_release+0x4b7/0x670 ? blk_try_enter_queue+0x1a0/0x4d0 ? dm_dax_direct_access+0x260/0x260 ? rcu_is_watching+0x12/0xb0 ? blk_try_enter_queue+0x1cc/0x4d0 __submit_bio+0x239/0x310 ? __bio_queue_enter+0x700/0x700 ? kvm_clock_get_cycles+0x40/0x60 ? ktime_get+0x285/0x470 submit_bio_noacct_nocheck+0x4d9/0xb80 ? should_fail_request+0x80/0x80 ? preempt_count_sub+0x150/0x150 ? lock_release+0x4b7/0x670 ? __bio_add_page+0x143/0x2d0 ? iov_iter_revert+0x27/0x360 submit_bio_noacct+0x53e/0x1b30 submit_bio_wait+0x10a/0x230 ? submit_bio_wait_endio+0x40/0x40 __blkdev_direct_IO_simple+0x4f8/0x780 ? blkdev_bio_end_io+0x4c0/0x4c0 ? stack_trace_save+0x90/0xc0 ? __bio_clone+0x3c0/0x3c0 ? lock_release+0x4b7/0x670 ? lock_sync+0x190/0x190 ? atime_needs_update+0x3bf/0x7e0 ? timestamp_truncate+0x21b/0x2d0 ? inode_owner_or_capable+0x240/0x240 blkdev_direct_IO.part.0+0x84a/0x1810 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 ? blkdev_read_iter+0x40d/0x530 ? reacquire_held_locks+0x4e0/0x4e0 ? __blkdev_direct_IO_simple+0x780/0x780 ? rcu_is_watching+0x12/0xb0 ? __mark_inode_dirty+0x297/0xd50 ? preempt_count_add+0x72/0x140 blkdev_read_iter+0x2a4/0x530 do_iter_readv_writev+0x2f2/0x3c0 ? generic_copy_file_range+0x1d0/0x1d0 ? fsnotify_perm.part.0+0x25d/0x630 ? security_file_permission+0xd8/0x100 do_iter_read+0x31b/0x880 ? import_iovec+0x10b/0x140 vfs_readv+0x12d/0x1a0 ? vfs_iter_read+0xb0/0xb0 ? rcu_is_watching+0x12/0xb0 ? rcu_is_watching+0x12/0xb0 ? lock_release+0x4b7/0x670 do_preadv+0x1b3/0x260 ? do_readv+0x370/0x370 __x64_sys_preadv2+0xef/0x150 do_syscall_64+0x39/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f5af41ad806 Code: 41 54 41 89 fc 55 44 89 c5 53 48 89 cb 48 83 ec 18 80 3d e4 dd 0d 00 00 74 7a 45 89 c1 49 89 ca 45 31 c0 b8 47 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 be 00 00 00 48 85 c0 79 4a 48 8b 0d da 55 RSP: 002b:00007ffd3145c7f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5af41ad806 RDX: 0000000000000001 RSI: 00007ffd3145c850 RDI: 0000000000000003 RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000008 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 R13: 00007ffd3145c850 R14: 000055f5f0431dd8 R15: 0000000000000001 </TASK> where in fact it is ---truncated---
- Record
UBUNTU-CVE-2023-53860- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-11
OSVCLSA-2026-1779375889No score
kernel: Fix of 95 CVEs
- perf/x86/intel/uncore: Fix die ID init and look up bugs {CVE-2026-43344}
- x86/apic: Disable x2apic on resume if the kernel expects so {CVE-2026-43363}
- drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
- dm: remove fake timeout to avoid leak request {CVE-2026-43314}
- md/bitmap: fix GPF in write_page caused by resize race {CVE-2026-43163}
- drm: Account property blob allocations to memcg {CVE-2026-43287}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206}
- Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500}
- net/sched: Fix backlog accounting in qdisc_dequeue_internal {CVE-2025-39677}
- l2tp: avoid one data-race in l2tp_tunnel_del_work() {CVE-2026-23120}
- net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() {CVE-2025-39876}
- espintcp: fix skb leaks {CVE-2025-38057}
- cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() {CVE-2025-37829}
- tipc: fix NULL pointer dereference in tipc_mon_reinit_self() {CVE-2025-37824}
- KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses {CVE-2025-23141}
- virtiofs: add filesystem context source name check {CVE-2025-37773}
- netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets {CVE-2025-22063}
- ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922}
- wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910}
- wifi: ath11k: fix RCU stall while reaping monitor destination ring {CVE-2024-58097}
- net/sctp: Prevent autoclose integer overflow in sctp_association_init() {CVE-2024-57938}
- ubi: fastmap: Fix duplicate slab cache names while attaching {CVE-2024-53172}
- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() {CVE-2024-56369}
- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware {CVE-2024-53157}
- vsock: Fix sk_error_queue memory leak {CVE-2024-53118}
- mm: fix NULL pointer dereference in alloc_pages_bulk_noprof {CVE-2024-53113}
- exec: don't WARN for racy path_noexec check {CVE-2024-50010}
- drm/amd/display: Initialize get_bytes_per_element's default to 1 {CVE-2024-49892}
- ppp: do not assume bh is held in ppp_channel_bridge_input() {CVE-2024-49946}
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link {CVE-2024-47683}
- x86/sgx: Fix deadlock in SGX NUMA node search {CVE-2024-49856}
- pktgen: use cpus_read_lock() in pg_net_init() {CVE-2024-46681}
- nfsd: call cache_put if xdr_reserve_space returns NULL {CVE-2024-47737}
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind {CVE-2024-46739}
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
- net/mlx5: Fix bridge mode operations when there are no VFs {CVE-2024-46857}
- Input: MT - limit max slots {CVE-2024-45008}
- net/mlx5e: SHAMPO, Fix incorrect page release {CVE-2024-46717}
- netfilter: ctnetlink: use helper function to calculate expect ID {CVE-2024-44944}
- lib: objagg: Fix general protection fault {CVE-2024-43846}
- drm/qxl: Add check for drm_cvt_mode {CVE-2024-43829}
- mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems {CVE-2024-42073}
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes {CVE-2024-42101}
- RDMA/mlx5: Add check for srq max_sge attribute {CVE-2024-40990}
- tracing: Build event generation tests only as modules {CVE-2024-41004}
- KEYS: trusted: Fix memory leak in tpm2_key_encode() {CVE-2024-36967}
- epoll: be better about file lifetimes {CVE-2024-38580}
- drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988}
- RDMA/srpt: Add a check for valid 'mad_agent' pointer {CVE-2023-54274}
- x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction {CVE-2023-54172}
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772}
- iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected {CVE-2024-26891}
- dm: don't attempt to queue IO under RCU…
- Record
CLSA-2026-1779375889- Updated
- 2026-11-02
OSVSUSE-SU-2026:0263-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785).
- CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255576).
- CVE-2023-53254: cacheinfo: Fix shared_cpu_map to handle shared caches at different levels (bsc#1249871).
- CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler() (bsc#1254751).
- CVE-2024-56590: Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (bsc#1235038).
- CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
- CVE-2025-40019: crypto: essiv - Check ssize for decryption and in-place encryption (bsc#1252678).
- CVE-2025-40139: net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (bsc#1253409).
- CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
- CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
- CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
- CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
- CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894).
- CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
- CVE-2025-40331: sctp: Prevent TOCTOU out-of-bounds write (bsc#1254615).
- CVE-2025-68732: gpu: host1x: Fix race in syncpt alloc/free (bsc#1255688).
The following non security issues were fixed:
- ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids() (git-fixes).
- ACPI: PRM: Remove unnecessary strict handler address checks (git-fixes).
- ACPI: property: Do not pass NULL handles to acpi_attach_data() (git-fixes).
- ACPI: property: Fix buffer properties extraction for subnodes (git-fixes).
- KVM: SVM: Fix TSC_AUX virtualization setup (git-fixes).
- RDMA/cm: Rate limit destroy CM ID timeout error message (git-fixes).
- RDMA/counter: Check CAP_NET_RAW check in user namespace for RDMA counters (git-fixes).
- RDMA/hns: Fix the modification of max_send_sge (git-fixes).
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (git-fixes).
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (git-fixes).
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (git-fixes).
- RDMA/mlx5: Fix compilation warning when USER_ACCESS isn't set (git-fixes).
- RDMA/nldev: Check CAP_NET_RAW in user namespace for QP modify (git-fixes).
- RDMA/uverbs: Add empty rdma_uattrs_has_raw_cap() declaration (git-fixes).
- RDMA/uverbs: Check CAP_NET_RAW in user namespace for QP create (git-fixes).
- RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (git-fixes).
- RDMA/uverbs: Check CAP_NET_RAW in user namespace for flow create (git-fixes).
- arch/idle: Change arch_cpu_idle() behavior: always exit with IRQs disabled (git-fixes).
- cpuidle/poll: Ensure IRQs stay disabled after cpuidle_state::enter() calls (git-fixes).
- cpuidle: Move IRQ state validation (git-fixes).
- cpuidle: haltpoll: Do not enable interrupts when entering idle (git-fixes).
- dm: free table mempools if not used in __bind (git-fixes).
- padata: Honor the caller's alignment in case of chunk_size 0 (bsc#1237563).
- platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL (git-fixes).
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (git-fixes).
- x86/bugs: Use SBPB in write_ibpb() if applicable (git-fixes).
- x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT (git-fixes).
- x86/tdx: Drop flags from __tdx_hypercall() (git-fixes).
- x86/tdx: Dynamically disable SEPT violations from causing #VEs (git-fixes).
- x86/tdx: Emit warning if IRQs are enabled during HLT #VE handling (git-fixes).
- x86/tdx: Extend TDX_MODULE_CALL to support more TDCALL/SEAMCALL leafs (git-fixes).
- x86/tdx: Fix __noreturn build warning around __tdx_hypercall_failed()…
- Record
SUSE-SU-2026:0263-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0278-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
- CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
- CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
- CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
- CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
- CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
- CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
- CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
- CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
- CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
- CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
- CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
- CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
- CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
- CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
- CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
- CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
- CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
- CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
- CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
- CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
- CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
- CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
- CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
- CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
- CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
- CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
- CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
- CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
- CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
- CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
- CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
- CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
- CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
- CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
- CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
- CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
- CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
- CVE-2025-40287: exfat: fix improper check of dentry.stream.valid_size (bsc#1255030).
- CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM (bsc#1255042).
- CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
- CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
- CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187). -…
- Record
SUSE-SU-2026:0278-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0281-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
- CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
- CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
- CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
- CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
- CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
- CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
- CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
- CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
- CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
- CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
- CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
- CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
- CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
- CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
- CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
- CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
- CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
- CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
- CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
- CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
- CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
- CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
- CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
- CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
- CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
- CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
- CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
- CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
- CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
- CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
- CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
- CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
- CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
- CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
- CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
- CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
- CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
- CVE-2025-40287: exfat: fix improper check of dentry.stream.valid_size (bsc#1255030).
- CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM (bsc#1255042).
- CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
- CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
- CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187). -…
- Record
SUSE-SU-2026:0281-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0293-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
- CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
- CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
- CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
- CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
- CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
- CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
- CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
- CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
- CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
- CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
- CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
- CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
- CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
- CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
- CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
- CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
- CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
- CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
- CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
- CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
- CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
- CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
- CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
- CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
- CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
- CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
- CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
- CVE-2025-40331: sctp: Prevent TOCTOU out-of-bounds write (bsc#1254615).
- CVE-2025-68259: KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (bsc#1255199).
The following non security issues were fixed:
- ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (git-fixes).
- ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (git-fixes).
- ALSA: dice: fix buffer overflow in detect_stream_formats() (git-fixes).
- ALSA: firewire-motu: add bounds check in put_user loop for DSP events (git-fixes).
- ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (git-fixes).
- ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() (git-fixes).
- ALSA: uapi: Fix typo in asound.h comment (git-fixes).
- ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 (stable-fixes).
- ASoC: Intel: catpt: Fix error path in hw_params() (git-fixes).
- ASoC: ak4458: Disable regulator when error happens (git-fixes).
- ASoC: ak5558: Disable regulator when error happens (git-fixes).
- ASoC: codecs: wcd938x: fix OF node leaks on probe failure (git-fixes).
- ASoC: fsl_xcvr: clear the channel status control memory (git-fixes).
- ASoC: qcom: q6adm: the the copp device only during last instance (git-fixes).
- ASoC: qcom: q6asm-dai: perform correct state check before closing (git-fixes).
- ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment…
- Record
SUSE-SU-2026:0293-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0315-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
- CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
- CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
- CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
- CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
- CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
- CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
- CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
- CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
- CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
- CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
- CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
- CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
- CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
- CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
- CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
- CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
- CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
- CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
- CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
- CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
- CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
- CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
- CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
- CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
- CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
- CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
- CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
- CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
- CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
- CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
- CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
- CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
- CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
- CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
- CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
- CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
- CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
- CVE-2025-40287: exfat: fix improper check of dentry.stream.valid_size (bsc#1255030).
- CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM (bsc#1255042).
- CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
- CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
- CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187). -…
- Record
SUSE-SU-2026:0315-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0317-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785).
- CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255576).
- CVE-2023-53254: cacheinfo: Fix shared_cpu_map to handle shared caches at different levels (bsc#1249871).
- CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler() (bsc#1254751).
- CVE-2024-56590: Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (bsc#1235038).
- CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
- CVE-2025-40019: crypto: essiv - Check ssize for decryption and in-place encryption (bsc#1252678).
- CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
- CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
- CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
- CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
- CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
- CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894).
- CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
- CVE-2025-40331: sctp: Prevent TOCTOU out-of-bounds write (bsc#1254615).
- CVE-2025-68732: gpu: host1x: Fix race in syncpt alloc/free (bsc#1255688).
The following non security issues were fixed:
- ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids() (git-fixes).
- ACPI: PRM: Remove unnecessary strict handler address checks (git-fixes).
- ACPI: property: Do not pass NULL handles to acpi_attach_data() (git-fixes).
- ACPI: property: Fix buffer properties extraction for subnodes (git-fixes).
- KVM: SVM: Fix TSC_AUX virtualization setup (git-fixes).
- RDMA/cm: Rate limit destroy CM ID timeout error message (git-fixes).
- RDMA/counter: Check CAP_NET_RAW check in user namespace for RDMA counters (git-fixes).
- RDMA/hns: Fix the modification of max_send_sge (git-fixes).
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (git-fixes).
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (git-fixes).
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (git-fixes).
- RDMA/mlx5: Fix compilation warning when USER_ACCESS isn't set (git-fixes).
- RDMA/nldev: Check CAP_NET_RAW in user namespace for QP modify (git-fixes).
- RDMA/uverbs: Add empty rdma_uattrs_has_raw_cap() declaration (git-fixes).
- RDMA/uverbs: Check CAP_NET_RAW in user namespace for QP create (git-fixes).
- RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create (git-fixes).
- RDMA/uverbs: Check CAP_NET_RAW in user namespace for flow create (git-fixes).
- arch/idle: Change arch_cpu_idle() behavior: always exit with IRQs disabled (git-fixes).
- cpuidle/poll: Ensure IRQs stay disabled after cpuidle_state::enter() calls (git-fixes).
- cpuidle: Move IRQ state validation (git-fixes).
- cpuidle: haltpoll: Do not enable interrupts when entering idle (git-fixes).
- dm: free table mempools if not used in __bind (git-fixes).
- padata: Honor the caller's alignment in case of chunk_size 0 (bsc#1237563).
- platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL (git-fixes).
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (git-fixes).
- x86/bugs: Use SBPB in write_ibpb() if applicable (git-fixes).
- x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT (git-fixes).
- x86/tdx: Drop flags from __tdx_hypercall() (git-fixes).
- x86/tdx: Dynamically disable SEPT violations from causing #VEs (git-fixes).
- x86/tdx: Emit warning if IRQs are enabled during HLT #VE handling (git-fixes).
- x86/tdx: Extend TDX_MODULE_CALL to support more TDCALL/SEAMCALL leafs (git-fixes).
- x86/tdx: Fix __noreturn build warning around __tdx_hypercall_failed()…
- Record
SUSE-SU-2026:0317-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20477-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
- CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
- CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
- CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
- CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
- CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
- CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
- CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
- CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
- CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
- CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
- CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
- CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
- CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
- CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
- CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
- CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
- CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
- CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
- CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
- CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
- CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
- CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
- CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
- CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
- CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
- CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
- CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
- CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
- CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
- CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
- CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
- CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
- CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
- CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
- CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
- CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
- CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
- CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
- CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
- CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
- CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
- CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
- CVE-2025-40271: fs/proc: fix uaf in…
- Record
SUSE-SU-2026:20477-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20498-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
- CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
- CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
- CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
- CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
- CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
- CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
- CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
- CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
- CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
- CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
- CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
- CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
- CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
- CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
- CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
- CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
- CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
- CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
- CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
- CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
- CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
- CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
- CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
- CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
- CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
- CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
- CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
- CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
- CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
- CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
- CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
- CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
- CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
- CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
- CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
- CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
- CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
- CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
- CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
- CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
- CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
- CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
- CVE-2025-40271: fs/proc: fix uaf in…
- Record
SUSE-SU-2026:20498-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20845-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
- CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
- CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
- CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
- CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
- CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
- CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
- CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
- CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
- CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
- CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
- CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
- CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
- CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
- CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
- CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
- CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
- CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
- CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
- CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
- CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
- CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
- CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
- CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
- CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
- CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
- CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
- CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
- CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
- CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
- CVE-2025-40192: Revert "ipmi: fix msg stack when IPMI is disconnected" (bsc#1253622).
- CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
- CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
- CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
- CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
- CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
- CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
- CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
- CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
- CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
- CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
- CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
- CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer()…
- Record
SUSE-SU-2026:20845-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20876-1No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
- CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
- CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
- CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
- CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
- CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
- CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
- CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
- CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
- CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
- CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
- CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
- CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
- CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
- CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
- CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
- CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
- CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
- CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
- CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
- CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
- CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
- CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
- CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
- CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
- CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
- CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
- CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
- CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
- CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
- CVE-2025-40192: Revert "ipmi: fix msg stack when IPMI is disconnected" (bsc#1253622).
- CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
- CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
- CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
- CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
- CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
- CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
- CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
- CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
- CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
- CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
- CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
- CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer()…
- Record
SUSE-SU-2026:20876-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-ltsAlpaquita:23 | 6.1.54-r0 up to 6.1.56-r0 | 6.1.56-r0 |
linux-ltsAlpaquita:stream | 6.1.112-r0 up to 6.6.58-r0 | 6.6.58-r0 |
bpftoolTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 7.0.0-284.1101.el9_2.tuxcare.11.els1 | 7.0.0-284.1101.el9_2.tuxcare.11.els1 |
kernelTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64kTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-coreTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-debugTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-debug-coreTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-debug-develTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-debug-devel-matchedTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-64k-debug-modulesTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-debug-modules-coreTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-debug-modules-extraTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-debug-modules-internalTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-debug-modules-partnerTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-develTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-devel-matchedTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-modulesTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-modules-coreTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-modules-extraTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-modules-internalTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-64k-modules-partnerTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-abi-stablelistsTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-coreTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-cross-headersTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-debugTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-debug-coreTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-debug-develTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-debug-devel-matchedTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-debug-modulesTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-debug-modules-coreTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-debug-modules-extraTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-debug-modules-internalTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-debug-modules-partnerTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-debug-uki-virtTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-develTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-devel-matchedTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-docTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-headersTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-ipaclones-internalTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-modulesTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-modules-coreTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-modules-extraTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-modules-internalTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-modules-partnerTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-selftests-internalTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-toolsTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-tools-libsTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-tools-libs-develTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
kernel-uki-virtTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
libbpfTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 2:1.0.0-2.el9_2.tuxcare.11.els1 | 2:1.0.0-2.el9_2.tuxcare.11.els1 |
libbpf-develTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 2:1.0.0-2.el9_2.tuxcare.11.els1 | 2:1.0.0-2.el9_2.tuxcare.11.els1 |
libbpf-staticTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 2:1.0.0-2.el9_2.tuxcare.11.els1 | 2:1.0.0-2.el9_2.tuxcare.11.els1 |
perfTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
python3-perfTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
rtlaTuxCare:AlmaLinux:9.2 From an advisory covering 95 CVEs | before 5.14.0-284.1101.el9_2.tuxcare.11.els1 | 5.14.0-284.1101.el9_2.tuxcare.11.els1 |
KernelLinux | 5.19.0 up to 6.1.55, 6.2.0 up to 6.5.5 | 6.1.556.5.5 |
linuxDebian:12 | before 6.1.55-1, plus listed versions 6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1 Show 5 moreShow less6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-1~bpo11+1 | 6.1.55-1 |
linuxDebian:13 | before 6.5.6-1 | 6.5.6-1 |
linuxDebian:14 | before 6.5.6-1 | 6.5.6-1 |
bpftool-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:7.3.0-427.13.1.el9_4 | 0:7.3.0-427.13.1.el9_4 |
kernel-64k-debug-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-debug-develRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-debug-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-develRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debug-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debug-develRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debug-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debuginfo-common-aarch64Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-develRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-docRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-rt-debug-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-rt-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-tools-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-zfcpdump-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-zfcpdump-develRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-zfcpdump-devel-matchedRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
libperf-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
perfRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
perf-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
python3-perf-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
rtlaRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
rvRed Hat:enterprise_linux:9::appstream From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
bpftoolRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:7.3.0-427.13.1.el9_4 | 0:7.3.0-427.13.1.el9_4 |
bpftool-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:7.3.0-427.13.1.el9_4 | 0:7.3.0-427.13.1.el9_4 |
kernelRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64kRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-debugRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-debug-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-debug-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-debug-modulesRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-debug-modules-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-debug-modules-extraRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-modulesRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-modules-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-64k-modules-extraRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-abi-stablelistsRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debugRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debug-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debug-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debug-modulesRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debug-modules-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debug-modules-extraRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debug-uki-virtRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debuginfo-common-aarch64Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debuginfo-common-ppc64leRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-modulesRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-modules-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-modules-extraRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-rt-debug-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-rt-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-toolsRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-tools-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-tools-libsRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-uki-virtRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-zfcpdumpRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-zfcpdump-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-zfcpdump-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-zfcpdump-modulesRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-zfcpdump-modules-coreRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-zfcpdump-modules-extraRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
libperf-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
perf-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 341 CVEs | before 0:5.14.0-427.13.1.el9_4 | 0:5.14.0-427.13.1.el9_4 |
kernel-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 392 CVEs | before 5.14.21-150500.13.118.1 | 5.14.21-150500.13.118.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 392 CVEs | before 5.14.21-150500.13.118.1 | 5.14.21-150500.13.118.1 |
kernel-livepatch-SLE15-SP7-RT_Update_8SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 395 CVEs | before 1-150700.1.3.1 | 1-150700.1.3.1 |
kernel-rtSUSE:Real Time Module 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.7.28.1 | 6.4.0-150700.7.28.1 |
kernel-source-rtSUSE:Real Time Module 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.7.28.1 | 6.4.0-150700.7.28.1 |
kernel-syms-rtSUSE:Real Time Module 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.7.28.1 | 6.4.0-150700.7.28.1 |
kernel-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.20.24.1 | 6.4.0-150700.20.24.1 |
kernel-source-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.20.24.1 | 6.4.0-150700.20.24.1 |
kernel-syms-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.20.24.1 | 6.4.0-150700.20.24.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-livepatch-SLE15-SP6_Update_19SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 334 CVEs | before 1-150600.13.3.1 | 1-150600.13.3.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-64kbSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-defaultSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-default-baseSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1.150600.12.38.1 | 6.4.0-150600.23.84.1.150600.12.38.1 |
kernel-docsSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-obs-buildSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-sourceSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-symsSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1.150600.12.38.1 | 6.4.0-150600.23.84.1.150600.12.38.1 |
kernel-docsSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-obs-buildSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
dtb-aarch64openSUSE:Leap 15.6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-64kbopenSUSE:Leap 15.6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-debugopenSUSE:Leap 15.6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-defaultopenSUSE:Leap 15.6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-default-baseopenSUSE:Leap 15.6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1.150600.12.38.1 | 6.4.0-150600.23.84.1.150600.12.38.1 |
kernel-docsopenSUSE:Leap 15.6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-kvmsmallopenSUSE:Leap 15.6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-obs-buildopenSUSE:Leap 15.6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-obs-qaopenSUSE:Leap 15.6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-sourceopenSUSE:Leap 15.6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-symsopenSUSE:Leap 15.6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-zfcpdumpopenSUSE:Leap 15.6 From an advisory covering 334 CVEs | before 6.4.0-150600.23.84.1 | 6.4.0-150600.23.84.1 |
kernel-64kbSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.53.28.1 | 6.4.0-150700.53.28.1 |
kernel-defaultSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.53.28.1 | 6.4.0-150700.53.28.1 |
kernel-default-baseSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.53.28.1.150700.17.19.1 | 6.4.0-150700.53.28.1.150700.17.19.1 |
kernel-sourceSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.53.28.1 | 6.4.0-150700.53.28.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.53.28.1 | 6.4.0-150700.53.28.1 |
kernel-docsSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.53.28.1 | 6.4.0-150700.53.28.1 |
kernel-obs-buildSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.53.28.1 | 6.4.0-150700.53.28.1 |
kernel-sourceSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.53.28.1 | 6.4.0-150700.53.28.1 |
kernel-symsSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.53.28.1 | 6.4.0-150700.53.28.1 |
kernel-defaultSUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.53.28.1 | 6.4.0-150700.53.28.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.53.28.1 | 6.4.0-150700.53.28.1 |
kernel-livepatch-SLE15-SP7_Update_8SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 395 CVEs | before 1-150700.15.3.1 | 1-150700.15.3.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.53.28.1 | 6.4.0-150700.53.28.1 |
kernel-defaultSUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 395 CVEs | before 6.4.0-150700.53.28.1 | 6.4.0-150700.53.28.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.5 From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.5 From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1.150500.6.65.1 | 5.14.21-150500.55.133.1.150500.6.65.1 |
kernel-sourceSUSE:Linux Enterprise Micro 5.5 From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-livepatch-SLE15-SP5_Update_34SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 392 CVEs | before 1-150500.11.3.1 | 1-150500.11.3.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1.150500.6.65.1 | 5.14.21-150500.55.133.1.150500.6.65.1 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1.150500.6.65.1 | 5.14.21-150500.55.133.1.150500.6.65.1 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-64kbSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-defaultSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-default-baseSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1.150500.6.65.1 | 5.14.21-150500.55.133.1.150500.6.65.1 |
kernel-docsSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-obs-buildSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-sourceSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-symsSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1.150500.6.65.1 | 5.14.21-150500.55.133.1.150500.6.65.1 |
kernel-docsSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-obs-buildSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 392 CVEs | before 5.14.21-150500.55.133.1 | 5.14.21-150500.55.133.1 |
kernel-defaultSUSE:Linux Micro 6.0 From an advisory covering 524 CVEs | before 6.4.0-39.1 | 6.4.0-39.1 |
kernel-default-baseSUSE:Linux Micro 6.0 From an advisory covering 524 CVEs | before 6.4.0-39.1.21.16 | 6.4.0-39.1.21.16 |
kernel-kvmsmallSUSE:Linux Micro 6.0 From an advisory covering 524 CVEs | before 6.4.0-39.1 | 6.4.0-39.1 |
linux-hwe-edgeUbuntu:16.04:LTS | All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1 | None known |
linux-aws-5.0Ubuntu:18.04:LTS | All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30 | None known |
linux-aws-5.3Ubuntu:18.04:LTS | All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37 | None known |
linux-azureUbuntu:18.04:LTS | All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38 | None known |
linux-azure-5.3Ubuntu:18.04:LTS | All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36 | None known |
linux-azure-edgeUbuntu:18.04:LTS | All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2 | None known |
linux-gcpUbuntu:18.04:LTS | All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35 | None known |
linux-gcp-5.3Ubuntu:18.04:LTS | All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1 | None known |
linux-gke-4.15Ubuntu:18.04:LTS | All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84 | None known |
linux-gke-5.4Ubuntu:18.04:LTS | All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1 | None known |
linux-gkeop-5.4Ubuntu:18.04:LTS | All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1 | None known |
linux-hweUbuntu:18.04:LTS | All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72 | None known |
linux-hwe-edgeUbuntu:18.04:LTS | All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2 | None known |
linux-oemUbuntu:18.04:LTS | All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114 | None known |
linux-oracle-5.0Ubuntu:18.04:LTS | All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19 | None known |
linux-oracle-5.3Ubuntu:18.04:LTS | All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1 | None known |
linux-aws-5.11Ubuntu:20.04:LTS | All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1 | None known |
linux-aws-5.13Ubuntu:20.04:LTS | All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1 | None known |
linux-aws-5.8Ubuntu:20.04:LTS | All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1 | None known |
linux-azure-5.11Ubuntu:20.04:LTS | All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2 | None known |
linux-azure-5.13Ubuntu:20.04:LTS | All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1 | None known |
linux-azure-5.8Ubuntu:20.04:LTS | All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1 | None known |
linux-azure-fdeUbuntu:20.04:LTS | All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1 | None known |
linux-gcp-5.11Ubuntu:20.04:LTS | All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3 | None known |
linux-gcp-5.13Ubuntu:20.04:LTS | All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1 | None known |
linux-gcp-5.8Ubuntu:20.04:LTS | All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41 | None known |
linux-gkeUbuntu:20.04:LTS | All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111 | None known |
linux-gke-5.15Ubuntu:20.04:LTS | All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1 | None known |
linux-gkeopUbuntu:20.04:LTS | All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77 | None known |
linux-gkeop-5.15Ubuntu:20.04:LTS | All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1 | None known |
linux-hwe-5.11Ubuntu:20.04:LTS | All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1 | None known |
linux-hwe-5.13Ubuntu:20.04:LTS | All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1 | None known |
linux-hwe-5.8Ubuntu:20.04:LTS | All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1 | None known |
linux-intel-5.13Ubuntu:20.04:LTS | All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19 | None known |
linux-oem-5.10Ubuntu:20.04:LTS | All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61 | None known |
linux-oem-5.13Ubuntu:20.04:LTS | All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36 | None known |
linux-oem-5.14Ubuntu:20.04:LTS | All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67 | None known |
linux-oem-5.6Ubuntu:20.04:LTS | All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60 | None known |
linux-oracle-5.11Ubuntu:20.04:LTS | All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1 | None known |
linux-oracle-5.13Ubuntu:20.04:LTS | All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1 | None known |
linux-oracle-5.8Ubuntu:20.04:LTS | All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1 | None known |
linux-raspi2Ubuntu:20.04:LTS | All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6 | None known |
linux-riscvUbuntu:20.04:LTS | All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45 | None known |
linux-riscv-5.11Ubuntu:20.04:LTS | All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35 | None known |
linux-riscv-5.8Ubuntu:20.04:LTS | All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1 | None known |
linux-allwinner-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1 | None known |
linux-aws-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1 | None known |
linux-aws-6.2Ubuntu:22.04:LTS | All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1 | None known |
linux-aws-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1 | None known |
linux-azure-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2 | None known |
linux-azure-6.2Ubuntu:22.04:LTS | All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1 | None known |
linux-azure-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1 | None known |
linux-azure-fde-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1 | None known |
linux-azure-fde-6.2Ubuntu:22.04:LTS | All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1 | None known |
linux-gcp-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1 | None known |
linux-gcp-6.2Ubuntu:22.04:LTS | All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1 | None known |
linux-gcp-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1 | None known |
linux-hwe-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50 | None known |
linux-hwe-6.2Ubuntu:22.04:LTS | All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1 | None known |
linux-hwe-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1 | None known |
linux-intel-iot-realtimeUbuntu:22.04:LTS | All versions, plus listed versions 5.15.0-1073.75 | None known |
linux-lowlatency-hwe-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30 | None known |
linux-lowlatency-hwe-6.2Ubuntu:22.04:LTS | All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1 | None known |
linux-lowlatency-hwe-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1 | None known |
linux-nvidia-6.2Ubuntu:22.04:LTS | All versions, plus listed versions 6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15 | None known |
linux-nvidia-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15 Show 6 moreShow less6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25 | None known |
linux-oem-5.17Ubuntu:22.04:LTS | All versions, plus listed versions 5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13 Show 21 moreShow less5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36 | None known |
linux-oem-6.0Ubuntu:22.04:LTS | All versions, plus listed versions 6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10 Show 11 moreShow less6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21 | None known |
linux-oem-6.1Ubuntu:22.04:LTS | All versions, plus listed versions 6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9 Show 22 moreShow less6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36 | None known |
linux-oem-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8 Show 14 moreShow less6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28 | None known |
linux-oracle-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1 Show 8 moreShow less6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1 | None known |
linux-realtimeUbuntu:22.04:LTS | All versions, plus listed versions 5.15.0-1032.35 | None known |
linux-riscvUbuntu:22.04:LTS | All versions, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4 Show 18 moreShow less5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32 | None known |
linux-riscv-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1 | None known |
linux-riscv-6.5Ubuntu:22.04:LTS | All versions, plus listed versions 6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1 Show 5 moreShow less6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1 | None known |
linux-starfive-5.19Ubuntu:22.04:LTS | All versions, plus listed versions 5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1 | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-53860 is a high vulnerability (CVSS 7.8) in Linux, published September 24, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 9th percentile. Fixed in linux-lts 6.1.56-r0.
References
git.kernel.org/stable/c/d7b2abd87d1fcdb47811f90090a363e7ca15cb14
git.kernel.org/stable/c/699775e9338adcd4eaedea000d32c60250c3114d
git.kernel.org/stable/c/a9ce385344f916cd1c36a33905e564f5581beae9
nvd.nist.gov/vuln/detail/CVE-2023-53860
github.com/advisories/GHSA-g5v9-7ppc-vg8p
docs.bell-sw.com/security/cves/CVE-2023-53860
Show 194 moreShow less
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1779375889.html
nvd.nist.gov/vuln/detail/CVE-2022-48743
nvd.nist.gov/vuln/detail/CVE-2022-49194
nvd.nist.gov/vuln/detail/CVE-2022-49643
nvd.nist.gov/vuln/detail/CVE-2022-49743
nvd.nist.gov/vuln/detail/CVE-2022-49779
nvd.nist.gov/vuln/detail/CVE-2022-49799
nvd.nist.gov/vuln/detail/CVE-2022-49826
nvd.nist.gov/vuln/detail/CVE-2022-49839
nvd.nist.gov/vuln/detail/CVE-2022-49840
nvd.nist.gov/vuln/detail/CVE-2022-49845
nvd.nist.gov/vuln/detail/CVE-2022-49875
nvd.nist.gov/vuln/detail/CVE-2022-49885
nvd.nist.gov/vuln/detail/CVE-2022-49918
nvd.nist.gov/vuln/detail/CVE-2022-49989
nvd.nist.gov/vuln/detail/CVE-2022-50370
nvd.nist.gov/vuln/detail/CVE-2022-50434
nvd.nist.gov/vuln/detail/CVE-2022-50476
nvd.nist.gov/vuln/detail/CVE-2022-50500
nvd.nist.gov/vuln/detail/CVE-2022-50544
github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53860.json
git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
security-tracker.debian.org/tracker/CVE-2023-53860
access.redhat.com/errata/RHSA-2024:2394
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=1918601
bugzilla.redhat.com/show_bug.cgi?id=2049700
bugzilla.redhat.com/show_bug.cgi?id=2133452
bugzilla.redhat.com/show_bug.cgi?id=2151959
bugzilla.redhat.com/show_bug.cgi?id=2177759
bugzilla.redhat.com/show_bug.cgi?id=2185519
bugzilla.redhat.com/show_bug.cgi?id=2188102
bugzilla.redhat.com/show_bug.cgi?id=2210024
bugzilla.redhat.com/show_bug.cgi?id=2213132
bugzilla.redhat.com/show_bug.cgi?id=2218332
bugzilla.redhat.com/show_bug.cgi?id=2219359
bugzilla.redhat.com/show_bug.cgi?id=2221039
bugzilla.redhat.com/show_bug.cgi?id=2221463
bugzilla.redhat.com/show_bug.cgi?id=2221702
bugzilla.redhat.com/show_bug.cgi?id=2226777
bugzilla.redhat.com/show_bug.cgi?id=2226787
bugzilla.redhat.com/show_bug.cgi?id=2226788
bugzilla.redhat.com/show_bug.cgi?id=2231410
bugzilla.redhat.com/show_bug.cgi?id=2239845
bugzilla.redhat.com/show_bug.cgi?id=2239848
issues.redhat.com/browse/RHEL-15897
issues.redhat.com/browse/RHEL-15937
issues.redhat.com/browse/RHEL-16024
issues.redhat.com/browse/RHEL-17986
issues.redhat.com/browse/RHEL-19081
issues.redhat.com/browse/RHEL-2376
issues.redhat.com/browse/RHEL-2421
issues.redhat.com/browse/RHEL-2907
issues.redhat.com/browse/RHEL-3923
issues.redhat.com/browse/RHEL-6012
issues.redhat.com/browse/RHEL-7936
issues.redhat.com/browse/RHEL-9127
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2394.json
access.redhat.com/security/cve/CVE-2020-26555
cve.org/CVERecord?id=CVE-2020-26555
access.redhat.com/security/cve/CVE-2021-47579
cve.org/CVERecord?id=CVE-2021-47579
lore.kernel.org/linux-cve-announce/2024061915-CVE-2021-47579-4f78@gregkh/T
access.redhat.com/security/cve/CVE-2022-0480
cve.org/CVERecord?id=CVE-2022-0480
github.com/kata-containers/kata-containers/issues/3373
lore.kernel.org/linux-mm/20210902215519.AWcuVc3li%25akpm@linux-foundation.org
access.redhat.com/security/cve/CVE-2022-38096
cve.org/CVERecord?id=CVE-2022-38096
access.redhat.com/security/cve/CVE-2022-45934
cve.org/CVERecord?id=CVE-2022-45934
git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit?id=ae4569813a6e931258db627cdfe50dfb4f917d5d
access.redhat.com/security/cve/CVE-2022-48632
cve.org/CVERecord?id=CVE-2022-48632
lore.kernel.org/linux-cve-announce/2024042854-CVE-2022-48632-465f@gregkh/T
access.redhat.com/security/cve/CVE-2022-48947
cve.org/CVERecord?id=CVE-2022-48947
lore.kernel.org/linux-cve-announce/2024102140-CVE-2022-48947-0ab5@gregkh/T
access.redhat.com/security/cve/CVE-2022-49011
cve.org/CVERecord?id=CVE-2022-49011
lore.kernel.org/linux-cve-announce/2024102152-CVE-2022-49011-069a@gregkh/T
access.redhat.com/security/cve/CVE-2022-49322
cve.org/CVERecord?id=CVE-2022-49322
lore.kernel.org/linux-cve-announce/2025022637-CVE-2022-49322-b0f0@gregkh/T
access.redhat.com/security/cve/CVE-2022-49350
cve.org/CVERecord?id=CVE-2022-49350
lore.kernel.org/linux-cve-announce/2025022642-CVE-2022-49350-c5d2@gregkh/T
access.redhat.com/security/cve/CVE-2022-49721
cve.org/CVERecord?id=CVE-2022-49721
lore.kernel.org/linux-cve-announce/2025022632-CVE-2022-49721-b74f@gregkh/T
access.redhat.com/security/cve/CVE-2022-49744
cve.org/CVERecord?id=CVE-2022-49744
lore.kernel.org/linux-cve-announce/2025032758-CVE-2022-49744-8c5a@gregkh/T
access.redhat.com/security/cve/CVE-2022-49754
cve.org/CVERecord?id=CVE-2022-49754
lore.kernel.org/linux-cve-announce/2025032701-CVE-2022-49754-cc36@gregkh/T
access.redhat.com/security/cve/CVE-2022-49940
cve.org/CVERecord?id=CVE-2022-49940
lore.kernel.org/linux-cve-announce/2025061848-CVE-2022-49940-181b@gregkh/T
access.redhat.com/security/cve/CVE-2022-49977
cve.org/CVERecord?id=CVE-2022-49977
lore.kernel.org/linux-cve-announce/2025061819-CVE-2022-49977-3826@gregkh/T
access.redhat.com/security/cve/CVE-2022-50080
cve.org/CVERecord?id=CVE-2022-50080
lore.kernel.org/linux-cve-announce/2025061856-CVE-2022-50080-a32c@gregkh/T
access.redhat.com/security/cve/CVE-2022-50116
cve.org/CVERecord?id=CVE-2022-50116
lore.kernel.org/linux-cve-announce/2025061809-CVE-2022-50116-bf10@gregkh/T
cve.org/CVERecord?id=CVE-2022-50202
lore.kernel.org/linux-cve-announce/2025061840-CVE-2022-50202-48e0@gregkh/T
cve.org/CVERecord?id=CVE-2022-50277
lore.kernel.org/linux-cve-announce/2025091506-CVE-2022-50277-085f@gregkh/T
cve.org/CVERecord?id=CVE-2022-50286
lore.kernel.org/linux-cve-announce/2025091508-CVE-2022-50286-b313@gregkh/T
lore.kernel.org/linux-cve-announce/2025091500-CVE-2022-50313-2fa9@gregkh/T
lore.kernel.org/linux-cve-announce/2025091552-CVE-2022-50318-6f5e@gregkh/T
lore.kernel.org/linux-cve-announce/2025091639-CVE-2022-50346-49b1@gregkh/T
spinics.net/lists/stable-commits/msg285184.html
openwall.com/lists/oss-security/2024/01/12/1
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=cfaa80c91f6f99b9342b6557f0f0e1143e434066
github.com/torvalds/linux/commit/3c4f8333b582487a2d1e02171f1465531cde53e3
zerodayinitiative.com/advisories/ZDI-CAN-20527
github.com/torvalds/linux/commit/3701cd390fd731ee7ae8b8006246c8db82c72bea
github.com/torvalds/linux/commit/af73483f4e8b6f5c68c9aa63257bdd929a9c194a
git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit?id=382c27f4ed28f803b1f1473ac2d8db0afc795a1b
bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/bluffs-vulnerability
intel.com/content/www/us/en/security-center/advisory/intel-sa-00794.html
openwall.com/lists/oss-security/2023/03/28/2
git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit?id=95084403f8c070ccf5d7cbe72352519c1798a40a
patchwork.kernel.org/project/bluetooth/patch/20230322232543.3079578-1-luiz.dentz@gmail.com
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/drivers/bluetooth/hci_ldisc.c?h=v6.6-rc7&id=9c33663af9ad115f90c076a1828129a3fbadea98
zerodayinitiative.com/advisories/ZDI-CAN-18866
zerodayinitiative.com/advisories/ZDI-CAN-18111
seclists.org/oss-sec/2023/q4/14
seclists.org/oss-sec/2023/q3/242
github.com/torvalds/linux/commit/4e076c73e4f6e90816b30fcd4a0d7ab365087255
github.com/torvalds/linux/commit/2e07e8348ea454615e268222ae3fc240421be768
github.com/torvalds/linux/commit/24e90b9e34f9e039f56b5f25f6e6eb92cdd8f4b3
git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit?id=17a0f64cc02d4972e21c733d9f21d1c512963afa
git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit?id=af1689a9b7701d9907dfc84d2a4b57c4bc907144
git.kernel.org/stable/c/28dd788382c43b330480f57cd34cde0840896743
git.kernel.org/stable/c/3426f059eacc33ecc676b0d66539297e1cfafd02
git.kernel.org/stable/c/35fa2394d26e919f63600ce631e6aefc95ec2706
git.kernel.org/stable/c/520e213a0b97b64735a13950e9371e0a5d7a5dc3
git.kernel.org/stable/c/8a27d9d9fc9b5564b8904c3a77a7dea482bfa34e
git.kernel.org/stable/c/8b55b06e737feb2a645b0293ea27e38418876d63
git.kernel.org/stable/c/95084632a65d5c0d682a83b55935560bdcd2a1e3
git.kernel.org/stable/c/b6dcba02ee178282e0d28684d241e0b8462dea6a
git.kernel.org/stable/c/0b813a6a0087451cb702b6eb841f10856f49d088
spinics.net/lists/stable-commits/msg328851.html
kernel.dance/b1db244ffd041a49ecc9618e8feb6b5c1afcdaa7
kernel.dance/f342de4e2f33e0e39165d8639387aa6c19dff660
cisa.gov/known-exploited-vulnerabilities-catalog
github.com/torvalds/linux/commit/944d5fe50f3f03daacfea16300e656a1691c4a23
suse.com/support/update/announcement/2026/suse-su-20260263-1
bugzilla.suse.com/1065729
bugzilla.suse.com/1193629
bugzilla.suse.com/1194869
bugzilla.suse.com/1196823
bugzilla.suse.com/1204957
bugzilla.suse.com/1205567
bugzilla.suse.com/1206451
bugzilla.suse.com/1206843
bugzilla.suse.com/1206889
bugzilla.suse.com/1207051
bugzilla.suse.com/1207088
bugzilla.suse.com/1207315
bugzilla.suse.com/1207611
bugzilla.suse.com/1207620
bugzilla.suse.com/1207622
bugzilla.suse.com/1207636
bugzilla.suse.com/1207644
bugzilla.suse.com/1207646
bugzilla.suse.com/1207652
suse.com/security/cve/CVE-2022-0854
suse.com/security/cve/CVE-2022-48853
suse.com/security/cve/CVE-2022-50614
suse.com/security/cve/CVE-2022-50615
suse.com/security/cve/CVE-2022-50617
suse.com/security/cve/CVE-2022-50618
suse.com/security/cve/CVE-2022-50619
suse.com/security/cve/CVE-2022-50621
suse.com/security/cve/CVE-2022-50622
suse.com/security/cve/CVE-2022-50623
suse.com/security/cve/CVE-2022-50625
suse.com/security/cve/CVE-2022-50626
suse.com/security/cve/CVE-2022-50629
suse.com/security/cve/CVE-2022-50630
suse.com/security/cve/CVE-2022-50633
suse.com/security/cve/CVE-2022-50635
suse.com/security/cve/CVE-2022-50636
suse.com/security/cve/CVE-2022-50638
ubuntu.com/security/CVE-2023-53860
Left out here: 89 package rows, 29 versions, 3,708 references and the rest of 11 source descriptions. The JSON record has them.