CVE-2024-53222

zram: fix NULL pointer in comp_algorithm_show()

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

zram: fix NULL pointer in comp_algorithm_show()

LTP reported a NULL pointer dereference as followed:

CPU: 7 UID: 0 PID: 5995 Comm: cat Kdump: loaded Not tainted 6.12.0-rc6+ #3 Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __pi_strcmp+0x24/0x140 lr : zcomp_available_show+0x60/0x100 [zram] sp : ffff800088b93b90 x29: ffff800088b93b90 x28: 0000000000000001 x27: 0000000000400cc0 x26: 0000000000000ffe x25: ffff80007b3e2388 x24: 0000000000000000 x23: ffff80007b3e2390 x22: ffff0004041a9000 x21: ffff80007b3e2900 x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000000 x10: ffff80007b3e2900 x9 : ffff80007b3cb280 x8 : 0101010101010101 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000040 x4 : 0000000000000000 x3 : 00656c722d6f7a6c x2 : 0000000000000000 x1 : ffff80007b3e2900 x0 : 0000000000000000 Call trace: __pi_strcmp+0x24/0x140 comp_algorithm_show+0x40/0x70 [zram] dev_attr_show+0x28/0x80 sysfs_kf_seq_show+0x90/0x140 kernfs_seq_show+0x34/0x48 seq_read_iter+0x1d4/0x4e8 kernfs_fop_read_iter+0x40/0x58 new_sync_read+0x9c/0x168 vfs_read+0x1a8/0x1f8 ksys_read+0x74/0x108 __arm64_sys_read+0x24/0x38 invoke_syscall+0x50/0x120 el0_svc_common.constprop.0+0xc8/0xf0 do_el0_svc+0x24/0x38 el0_svc+0x38/0x138 el0t_64_sync_handler+0xc0/0xc8 el0t_64_sync+0x188/0x190

The zram->comp_algs[ZRAM_PRIMARY_COMP] can be NULL in zram_add() if comp_algorithm_set() has not been called. User can access the zram device by sysfs after device_add_disk(), so there is a time window to trigger the NULL pointer dereference. Move it ahead device_add_disk() to make sure when user can access the zram device, it is ready. comp_algorithm_set() is protected by zram->init_lock in other places and no such problem.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.22%Up 0.2 points since Dec 28, 2024

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

zram: fix NULL pointer in comp_algorithm_show()

LTP reported a NULL pointer dereference as followed:

Record: CVE-2024-53222
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-476
Updated: 2026-11-02

CVE List No score

zram: fix NULL pointer in comp_algorithm_show()

In the Linux kernel, the following vulnerability has been resolved:

zram: fix NULL pointer in comp_algorithm_show()

LTP reported a NULL pointer dereference as followed:

Record: CVE-2024-53222
Updated: 2026-11-02

EUVDEUVD-2024-51894 No score

In the Linux kernel, the following vulnerability has been resolved:

zram: fix NULL pointer in comp_algorithm_show()

LTP reported a NULL pointer dereference as followed:

Record: EUVD-2024-51894
Updated: 2026-11-02

GitHub AdvisoriesGHSA-rxh5-6q4f-cfwp 5.5

In the Linux kernel, the following vulnerability has been resolved: zram: fix NULL pointer in...

In the Linux kernel, the following vulnerability has been resolved:

zram: fix NULL pointer in comp_algorithm_show()

LTP reported a NULL pointer dereference as followed:

Record: GHSA-rxh5-6q4f-cfwp
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-476
Updated: 2026-11-02

OSVAZL-55192 5.5

CVE-2024-53222 affecting package kernel for versions less than 6.6.85.1-1

In the Linux kernel, the following vulnerability has been resolved:

zram: fix NULL pointer in comp_algorithm_show()

LTP reported a NULL pointer dereference as followed:

Record: AZL-55192
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-05

OSVBELL-CVE-2024-53222 5.5

Record: BELL-CVE-2024-53222
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 32 moreShow less

OSVDEBIAN-CVE-2024-53222 5.5

In the Linux kernel, the following vulnerability has been resolved: zram: fix NULL pointer in comp_algorithm_show() LTP reported a NULL pointer dereference as followed: CPU: 7 UID: 0 PID: 5995 Comm: cat Kdump: loaded Not tainted 6.12.0-rc6+ #3 Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __pi_strcmp+0x24/0x140 lr : zcomp_available_show+0x60/0x100 [zram] sp : ffff800088b93b90 x29: ffff800088b93b90 x28: 0000000000000001 x27: 0000000000400cc0 x26: 0000000000000ffe x25: ffff80007b3e2388 x24: 0000000000000000 x23: ffff80007b3e2390 x22: ffff0004041a9000 x21: ffff80007b3e2900 x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000000 x10: ffff80007b3e2900 x9 : ffff80007b3cb280 x8 : 0101010101010101 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000040 x4 : 0000000000000000 x3 : 00656c722d6f7a6c x2 : 0000000000000000 x1 : ffff80007b3e2900 x0 : 0000000000000000 Call trace: __pi_strcmp+0x24/0x140 comp_algorithm_show+0x40/0x70 [zram] dev_attr_show+0x28/0x80 sysfs_kf_seq_show+0x90/0x140 kernfs_seq_show+0x34/0x48 seq_read_iter+0x1d4/0x4e8 kernfs_fop_read_iter+0x40/0x58 new_sync_read+0x9c/0x168 vfs_read+0x1a8/0x1f8 ksys_read+0x74/0x108 __arm64_sys_read+0x24/0x38 invoke_syscall+0x50/0x120 el0_svc_common.constprop.0+0xc8/0xf0 do_el0_svc+0x24/0x38 el0_svc+0x38/0x138 el0t_64_sync_handler+0xc0/0xc8 el0t_64_sync+0x188/0x190 The zram->comp_algs[ZRAM_PRIMARY_COMP] can be NULL in zram_add() if comp_algorithm_set() has not been called. User can access the zram device by sysfs after device_add_disk(), so there is a time window to trigger the NULL pointer dereference. Move it ahead device_add_disk() to make sure when user can access the zram device, it is ready. comp_algorithm_set() is protected by zram->init_lock in other places and no such problem.

Record: DEBIAN-CVE-2024-53222
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2025-1110 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock

A deadlock may happen since the i3c_master_register() acquires &i3cbus->lock twice. See the log below. Use i3cdev->desc->info instead of calling i3c_device_info() to avoid acquiring the lock twice.

v2:

Modified the title and commit message

============================================ WARNING: possible recursive locking detected 6.11.0-mainline

init/1 is trying to acquire lock: f1ffff80a6a40dc0 (&i3cbus->lock){++++}-{3:3}, at: i3c_bus_normaluse_lock

but task is already holding lock: f1ffff80a6a40dc0 (&i3cbus->lock){++++}-{3:3}, at: i3c_master_register

other info that might help us debug this: Possible unsafe locking scenario:

   CPU0
   ----

lock(&i3cbus->lock); lock(&i3cbus->lock);

*** DEADLOCK ***

May be due to missing lock nesting notation

2 locks held by init/1: #0: fcffff809b6798f8 (&dev->mutex){....}-{3:3}, at: __driver_attach #1: f1ffff80a6a40dc0 (&i3cbus->lock){++++}-{3:3}, at: i3c_master_register

stack backtrace: CPU: 6 UID: 0 PID: 1 Comm: init Call trace: dump_backtrace+0xfc/0x17c show_stack+0x18/0x28 dump_stack_lvl+0x40/0xc0 dump_stack+0x18/0x24 print_deadlock_bug+0x388/0x390 __lock_acquire+0x18bc/0x32ec lock_acquire+0x134/0x2b0 down_read+0x50/0x19c i3c_bus_normaluse_lock+0x14/0x24 i3c_device_get_info+0x24/0x58 i3c_device_uevent+0x34/0xa4 dev_uevent+0x310/0x384 kobject_uevent_env+0x244/0x414 kobject_uevent+0x14/0x20 device_add+0x278/0x460 device_register+0x20/0x34 i3c_master_register_new_i3c_devs+0x78/0x154 i3c_master_register+0x6a0/0x6d4 mtk_i3c_master_probe+0x3b8/0x4d8 platform_probe+0xa0/0xe0 really_probe+0x114/0x454 __driver_probe_device+0xa0/0x15c driver_probe_device+0x3c/0x1ac __driver_attach+0xc4/0x1f0 bus_for_each_dev+0x104/0x160 driver_attach+0x24/0x34 bus_add_driver+0x14c/0x294 driver_register+0x68/0x104 __platform_driver_register+0x20/0x30 init_module+0x20/0xfe4 do_one_initcall+0x184/0x464 do_init_module+0x58/0x1ec load_module+0xefc/0x10c8 __arm64_sys_finit_module+0x238/0x33c invoke_syscall+0x58/0x10c el0_svc_common+0xa8/0xdc do_el0_svc+0x1c/0x28 el0_svc+0x50/0xac el0t_64_sync_handler+0x70/0xbc el0t_64_sync+0x1a8/0x1ac(CVE-2024-43098)

In the Linux kernel, the following vulnerability has been resolved:

MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed

This avoids warning:

[ 0.118053] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:283

Caused by get_c0_compare_int on secondary CPU.

We also skipped saving IRQ number to struct clock_event_device *cd as it's never used by clockevent core, as per comments it's only meant for "non CPU local devices".(CVE-2024-46832)

In the Linux kernel, the following vulnerability has been resolved:

pinmux: Use sequential access to access desc->pinmux data

When two client of the same gpio call pinctrl_select_state() for the same functionality, we are seeing NULL pointer issue while accessing desc->mux_owner.

Let's say two processes A, B executing in pin_request() for the same pin and process A updates the desc->mux_usecount but not yet updated the desc->mux_owner while process B see the desc->mux_usecount which got updated by A path and further executes strcmp and while accessing desc->mux_owner it crashes with NULL pointer.

Serialize the access to mux related setting with a mutex lock.

cpu0 (process A)			cpu1(process B)

pinctrl_select_state() { pinctrl_select_state() { pin_request() { pin_request() { ... .... } else { desc->mux_usecount++; desc->mux_usecount && strcmp(desc->mux_owner, owner)) {

     if…

Record: OESA-2025-1110
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1111 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock

A deadlock may happen since the i3c_master_register() acquires &i3cbus->lock twice. See the log below. Use i3cdev->desc->info instead of calling i3c_device_info() to avoid acquiring the lock twice.

v2:

Modified the title and commit message

============================================ WARNING: possible recursive locking detected 6.11.0-mainline

init/1 is trying to acquire lock: f1ffff80a6a40dc0 (&i3cbus->lock){++++}-{3:3}, at: i3c_bus_normaluse_lock

but task is already holding lock: f1ffff80a6a40dc0 (&i3cbus->lock){++++}-{3:3}, at: i3c_master_register

other info that might help us debug this: Possible unsafe locking scenario:

   CPU0
   ----

lock(&i3cbus->lock); lock(&i3cbus->lock);

*** DEADLOCK ***

May be due to missing lock nesting notation

2 locks held by init/1: #0: fcffff809b6798f8 (&dev->mutex){....}-{3:3}, at: __driver_attach #1: f1ffff80a6a40dc0 (&i3cbus->lock){++++}-{3:3}, at: i3c_master_register

In the Linux kernel, the following vulnerability has been resolved:

pinmux: Use sequential access to access desc->pinmux data

When two client of the same gpio call pinctrl_select_state() for the same functionality, we are seeing NULL pointer issue while accessing desc->mux_owner.

Serialize the access to mux related setting with a mutex lock.

cpu0 (process A)			cpu1(process B)

pinctrl_select_state() { pinctrl_select_state() { pin_request() { pin_request() { ... .... } else { desc->mux_usecount++; desc->mux_usecount && strcmp(desc->mux_owner, owner)) {

     if (desc-&gt;mux_usecount &gt; 1)
           return 0;
     desc-&gt;mux_owner = owner;

} }(CVE-2024-47141)

In the Linux kernel, the following vulnerability has been resolved:

net/smc: check smcd_v2_ext_offset when receiving proposal msg

When receiving proposal msg in server, the field smcd_v2_ext_offset in proposal msg is from the remote client and can not be fully trusted. Once the value of smcd_v2_ext_offset exceed the max value, there has the chance to access wrong address, and crash may…

Record: OESA-2025-1111
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1113 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

pinmux: Use sequential access to access desc->pinmux data

When two client of the same gpio call pinctrl_select_state() for the same functionality, we are seeing NULL pointer issue while accessing desc->mux_owner.

Serialize the access to mux related setting with a mutex lock.

cpu0 (process A)			cpu1(process B)

pinctrl_select_state() { pinctrl_select_state() { pin_request() { pin_request() { ... .... } else { desc->mux_usecount++; desc->mux_usecount && strcmp(desc->mux_owner, owner)) {

     if (desc-&gt;mux_usecount &gt; 1)
           return 0;
     desc-&gt;mux_owner = owner;

} }(CVE-2024-47141)

In the Linux kernel, the following vulnerability has been resolved:

net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg

When receiving proposal msg in server, the field iparea_offset and the field ipv6_prefixes_cnt in proposal msg are from the remote client and can not be fully trusted. Especially the field iparea_offset, once exceed the max value, there has the chance to access wrong address, and crash may happen.

This patch checks iparea_offset and ipv6_prefixes_cnt before using them.(CVE-2024-49571)

In the Linux kernel, the following vulnerability has been resolved:

spi: mpc52xx: Add cancel_work_sync before module remove

If we remove the module which will call mpc52xx_spi_remove it will free 'ms' through spi_unregister_controller. while the work ms->work will be used. The sequence of operations that may lead to a UAF bug.

Fix it by ensuring that the work is canceled before proceeding with the cleanup in mpc52xx_spi_remove.(CVE-2024-50051)

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: fix potential array underflow in ucsi_ccg_sync_control()

The "command" variable can be controlled by the user via debugfs. The worry is that if con_index is zero then "&uc->ucsi->connector[con_index

1]" would be an array underflow.(CVE-2024-53203)

In the Linux kernel, the following vulnerability has been resolved:

zram: fix NULL pointer in comp_algorithm_show()

LTP reported a NULL pointer dereference as followed:

Record: OESA-2025-1113
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1114 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

pinmux: Use sequential access to access desc->pinmux data

When two client of the same gpio call pinctrl_select_state() for the same functionality, we are seeing NULL pointer issue while accessing desc->mux_owner.

Serialize the access to mux related setting with a mutex lock.

cpu0 (process A)			cpu1(process B)

pinctrl_select_state() { pinctrl_select_state() { pin_request() { pin_request() { ... .... } else { desc->mux_usecount++; desc->mux_usecount && strcmp(desc->mux_owner, owner)) {

     if (desc-&gt;mux_usecount &gt; 1)
           return 0;
     desc-&gt;mux_owner = owner;

} }(CVE-2024-47141)

In the Linux kernel, the following vulnerability has been resolved:

net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg

This patch checks iparea_offset and ipv6_prefixes_cnt before using them.(CVE-2024-49571)

In the Linux kernel, the following vulnerability has been resolved:

spi: mpc52xx: Add cancel_work_sync before module remove

Fix it by ensuring that the work is canceled before proceeding with the cleanup in mpc52xx_spi_remove.(CVE-2024-50051)

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: fix potential array underflow in ucsi_ccg_sync_control()

The "command" variable can be controlled by the user via debugfs. The worry is that if con_index is zero then "&uc->ucsi->connector[con_index

1]" would be an array underflow.(CVE-2024-53203)

In the Linux kernel, the following vulnerability has been resolved:

zram: fix NULL pointer in comp_algorithm_show()

LTP reported a NULL pointer dereference as followed:

Record: OESA-2025-1114
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:20095 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:20095
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:6966 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:6966
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2025:20095 7.8

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)
kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)
kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)
kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)
kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633)
kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)
kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)
kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)
kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)
kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)
kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)
kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)
kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)
kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)
kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)
kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)
kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)
kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)
kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)
kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)
kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)
kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)
kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)
kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)
kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)
kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)
kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)
kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)
kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)
kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)
kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)
kernel: HID: multitouch: Add NULL check in mt_input_configured…

Record: RLSA-2025:20095
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-53222 5.5

Record: UBUNTU-CVE-2024-53222
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVALSA-2025:20095 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)
kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)
kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)
kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)
kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633)
kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)
kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)
kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)
kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)
kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)
kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)
kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)
kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)
kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)
kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)
kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)
kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)
kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)
kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)
kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)
kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)
kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)
kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)
kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)
kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)
kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)
kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)
kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)
kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)
kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)
kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)
kernel: HID:…

Record: ALSA-2025:20095
Updated: 2026-11-02

OSV No score

zram: fix NULL pointer in comp_algorithm_show()

In the Linux kernel, the following vulnerability has been resolved:

zram: fix NULL pointer in comp_algorithm_show()

LTP reported a NULL pointer dereference as followed:

Record: CVE-2024-53222
Updated: 2026-11-02

OSVSUSE-SU-2025:0117-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (bsc#1234282).
CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
CVE-2024-56582: btrfs: fix use-after-free in…

Record: SUSE-SU-2025:0117-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0153-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
CVE-2024-56582: btrfs: fix…

Record: SUSE-SU-2025:0153-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0154-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
CVE-2024-53240: xen/netfront: fix crash when removing device (XSA-465 bsc#1234281).
CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
CVE-2024-56549: cachefiles: Fix…

Record: SUSE-SU-2025:0154-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0289-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).
CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).
CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag…

Record: SUSE-SU-2025:0289-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20165-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20165-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20166-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20166-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20248-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20248-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20249-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20249-1
Updated: 2026-11-02

OSVUSN-7449-1 No score

linux, linux-aws, linux-azure, linux-azure-6.8, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Compressed RAM block device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
UFS subsystem;
DesignWare USB3 driver;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
EROFS file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
StackDepot library;
Bluetooth subsystem;
IP tunnels definitions;
Netfilter;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure;
Signal handling mechanism;
Task handling mechanism;
Timer subsystem;
KUnit library;
Memory management;
9P file system network protocol;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
Packet sockets;
RxRPC session sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
Key management;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
MediaTek ASoC drivers;
QCOM ASoC drivers;
SoC audio core drivers;
STMicroelectronics SoC drivers;
USB sound devices; (CVE-2024-50288, CVE-2024-56568, CVE-2024-50280, CVE-2024-56677, CVE-2024-56620, CVE-2024-53108, CVE-2024-53115, CVE-2024-53061,…

Record: USN-7449-1
Updated: 2026-11-03

OSVUSN-7449-2 No score

linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Compressed RAM block device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
UFS subsystem;
DesignWare USB3 driver;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
EROFS file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
StackDepot library;
Bluetooth subsystem;
IP tunnels definitions;
Netfilter;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure;
Signal handling mechanism;
Task handling mechanism;
Timer subsystem;
KUnit library;
Memory management;
9P file system network protocol;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
Packet sockets;
RxRPC session sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
Key management;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
MediaTek ASoC drivers;
QCOM ASoC drivers;
SoC audio core drivers;
STMicroelectronics SoC drivers;
USB sound devices; (CVE-2022-49034, CVE-2024-56632, CVE-2024-53177, CVE-2024-56679, CVE-2024-48881, CVE-2024-56690, CVE-2024-50216, CVE-2024-50269,…

Record: USN-7449-2
Updated: 2026-11-03

OSVUSN-7450-1 No score

linux-gcp, linux-gke, linux-gkeop vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Compressed RAM block device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
UFS subsystem;
DesignWare USB3 driver;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
EROFS file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
StackDepot library;
Bluetooth subsystem;
IP tunnels definitions;
Netfilter;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure;
Signal handling mechanism;
Task handling mechanism;
Timer subsystem;
KUnit library;
Memory management;
9P file system network protocol;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
Packet sockets;
RxRPC session sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
Key management;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
MediaTek ASoC drivers;
QCOM ASoC drivers;
SoC audio core drivers;
STMicroelectronics SoC drivers;
USB sound devices; (CVE-2024-50051, CVE-2024-56546, CVE-2024-56551, CVE-2024-53236, CVE-2024-50244, CVE-2024-53043, CVE-2024-56694, CVE-2025-21700,…

Record: USN-7450-1
Updated: 2026-11-03

OSVUSN-7451-1 No score

linux-aws-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DAX dirext access to differentiated memory framework;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
Virtio pmem driver;
NVME drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
EROFS file system;
Ext4 file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
Network file system (NFS) superblock;
StackDepot library;
Bluetooth subsystem;
IP tunnels definitions;
Network namespace;
Netfilter;
Network traffic control;
Network sockets;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
Kernel thread helper (kthread);
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure;
Signal handling mechanism;
Task handling mechanism;
Timer subsystem;
KUnit library;
Maple Tree data structure library;
Memory management;
9P file system network protocol;
Ethernet bridge;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
Netlink;
Packet sockets;…

Record: USN-7451-1
Updated: 2026-11-03

OSVUSN-7452-1 No score

linux-gcp-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Compressed RAM block device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
UFS subsystem;
DesignWare USB3 driver;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
EROFS file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
StackDepot library;
Bluetooth subsystem;
IP tunnels definitions;
Netfilter;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure;
Signal handling mechanism;
Task handling mechanism;
Timer subsystem;
KUnit library;
Memory management;
9P file system network protocol;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
Packet sockets;
RxRPC session sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
Key management;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
MediaTek ASoC drivers;
QCOM ASoC drivers;
SoC audio core drivers;
STMicroelectronics SoC drivers;
USB sound devices; (CVE-2024-56724, CVE-2024-50108, CVE-2024-56631, CVE-2024-50236, CVE-2022-49034, CVE-2024-50133, CVE-2024-53108, CVE-2024-56605,…

Record: USN-7452-1
Updated: 2026-11-03

OSVUSN-7453-1 No score

linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Compressed RAM block device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
UFS subsystem;
DesignWare USB3 driver;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
EROFS file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
StackDepot library;
Bluetooth subsystem;
IP tunnels definitions;
Netfilter;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure;
Signal handling mechanism;
Task handling mechanism;
Timer subsystem;
KUnit library;
Memory management;
9P file system network protocol;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
Packet sockets;
RxRPC session sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
Key management;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
MediaTek ASoC drivers;
QCOM ASoC drivers;
SoC audio core drivers;
STMicroelectronics SoC drivers;
USB sound devices; (CVE-2024-53187, CVE-2024-50268, CVE-2024-53161, CVE-2024-56721, CVE-2024-53059, CVE-2024-53217, CVE-2022-49034, CVE-2024-53061,…

Record: USN-7453-1
Updated: 2026-11-03

OSVUSN-7468-1 No score

linux-azure-nvidia vulnerabilities

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
ATA over ethernet (AOE) driver;
RAM backed block device driver;
Network block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DAX dirext access to differentiated memory framework;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
iSCSI Boot Firmware Table Attributes driver;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
Virtio pmem driver;
NVME drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
USB Device Class drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system; …

Record: USN-7468-1
Updated: 2026-11-03

OSVUSN-7523-1 No score

linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Ublk userspace block driver;
Virtio block driver;
Compressed RAM block device driver;
Bluetooth drivers;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DAX dirext access to differentiated memory framework;
DMA engine subsystem;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
iSCSI Boot Firmware Table Attributes driver;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
Virtio pmem driver;
NVME drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TDX Guest driver;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
VLANs driver;
Kernel Samepage Merging mechanism;
Memory management;
Network file system (NFS) superblock;
Kernel stack handling interfaces;
StackDepot library;
Task handling mechanism;
userfaultfd() syscall;
Bluetooth subsystem;
IP tunnels definitions;
LAPB network protocol;
Network namespace;
Netfilter;
Network traffic control;
Network sockets;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
Control group (cgroup);
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
Kernel thread helper (kthread);
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure; -…

Record: USN-7523-1
Updated: 2026-11-03

OSVUSN-7524-1 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Ublk userspace block driver;
Virtio block driver;
Compressed RAM block device driver;
Bluetooth drivers;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DAX dirext access to differentiated memory framework;
DMA engine subsystem;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
iSCSI Boot Firmware Table Attributes driver;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
Virtio pmem driver;
NVME drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TDX Guest driver;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
VLANs driver;
Kernel Samepage Merging mechanism;
Memory management;
Network file system (NFS) superblock;
Kernel stack handling interfaces;
StackDepot library;
Task handling mechanism;
userfaultfd() syscall;
Bluetooth subsystem;
IP tunnels definitions;
LAPB network protocol;
Network namespace;
Netfilter;
Network traffic control;
Network sockets;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
Control group (cgroup);
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
Kernel thread helper (kthread);
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure; -…

Record: USN-7524-1
Updated: 2026-11-03

OSVUSN-7605-1 No score

linux, linux-aws, linux-gcp, linux-gcp-6.11, linux-hwe-6.11, linux-oracle, linux-raspi, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
PowerPC architecture;
x86 architecture;
Compute Acceleration Framework;
ACPI drivers;
Ublk userspace block driver;
Compressed RAM block device driver;
Bus devices;
AMD CDX bus driver;
Clock framework and drivers;
DMA engine subsystem;
DPLL subsystem;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
IIO subsystem;
InfiniBand drivers;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Network drivers;
Mellanox network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
VideoCore services drivers;
Thermal drivers;
USB DSL drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
W1 Dallas's 1-wire bus driver;
9P distributed file system;
File systems infrastructure;
Ext4 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NTFS3 file system;
Proc file system;
SMB network file system;
Memory Management;
Key Management;
Memory management;
Scheduler infrastructure;
UProbes tracing;
RDMA verbs API;
SoC audio core drivers;
BPF subsystem;
Perf events;
Kernel fork() syscall;
Tracing infrastructure;
Watch queue notification mechanism;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Networking core;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Netfilter;
Network traffic control;
SCTP protocol;
Switch device API;
Wireless networking;
eXpress Data Path;
Key management;
ALSA framework;
SoC Audio for Freescale CPUs drivers; (CVE-2025-21913, CVE-2025-22070, CVE-2025-21918, CVE-2025-21916, CVE-2025-22090, CVE-2025-22040, CVE-2025-21972, CVE-2025-21920, CVE-2025-22071, CVE-2025-21989, CVE-2025-22037, CVE-2025-22068, CVE-2025-38049, CVE-2025-21980, CVE-2025-21956, CVE-2025-21962, CVE-2025-21929, CVE-2025-37785, CVE-2025-37889, CVE-2025-21990, CVE-2025-21966, CVE-2025-38240, CVE-2025-22058, CVE-2025-22072, CVE-2025-22056, CVE-2025-21963, CVE-2025-23134, CVE-2025-22075, CVE-2025-22054, CVE-2025-22064, CVE-2025-22027, CVE-2025-21927, CVE-2025-21943, CVE-2025-22081, CVE-2025-21975, CVE-2025-39735, CVE-2025-22088, CVE-2025-21996, CVE-2025-22009, CVE-2025-22000, CVE-2025-21912, CVE-2025-21967, CVE-2025-21995, CVE-2025-21973, CVE-2025-21908, CVE-2025-22047, CVE-2025-21930, CVE-2025-22078, CVE-2025-21957, CVE-2025-22021, CVE-2025-22019, CVE-2025-21935, CVE-2025-21951, CVE-2025-37937, CVE-2025-22043, CVE-2025-22057, CVE-2025-21922, CVE-2025-22003, CVE-2025-21978, CVE-2025-22010, CVE-2025-39989, CVE-2025-22034, CVE-2025-21986, CVE-2025-22016, CVE-2025-21960, CVE-2025-22038, CVE-2025-21924, CVE-2025-22015, CVE-2025-38152, CVE-2025-21939, CVE-2025-21917, CVE-2025-21974, CVE-2025-22001, CVE-2025-22025, CVE-2025-22062, CVE-2025-21979, CVE-2025-21911, CVE-2025-22045, CVE-2025-21914, CVE-2025-21937, CVE-2025-22095, CVE-2025-21981, CVE-2025-22014,…

Record: USN-7605-1
Updated: 2026-11-03

OSVUSN-7605-2 No score

linux-lowlatency, linux-lowlatency-hwe-6.11 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
PowerPC architecture;
x86 architecture;
Compute Acceleration Framework;
ACPI drivers;
Ublk userspace block driver;
Compressed RAM block device driver;
Bus devices;
AMD CDX bus driver;
Clock framework and drivers;
DMA engine subsystem;
DPLL subsystem;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
IIO subsystem;
InfiniBand drivers;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Network drivers;
Mellanox network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
VideoCore services drivers;
Thermal drivers;
USB DSL drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
W1 Dallas's 1-wire bus driver;
9P distributed file system;
File systems infrastructure;
Ext4 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NTFS3 file system;
Proc file system;
SMB network file system;
Memory Management;
Key Management;
Memory management;
Scheduler infrastructure;
UProbes tracing;
RDMA verbs API;
SoC audio core drivers;
BPF subsystem;
Perf events;
Kernel fork() syscall;
Tracing infrastructure;
Watch queue notification mechanism;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Networking core;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Netfilter;
Network traffic control;
SCTP protocol;
Switch device API;
Wireless networking;
eXpress Data Path;
Key management;
ALSA framework;
SoC Audio for Freescale CPUs drivers; (CVE-2025-21913, CVE-2025-22070, CVE-2025-21918, CVE-2025-21916, CVE-2025-22090, CVE-2025-22040, CVE-2025-21972, CVE-2025-21920, CVE-2025-22071, CVE-2025-21989, CVE-2025-22037, CVE-2025-22068, CVE-2025-38049, CVE-2025-21980, CVE-2025-21956, CVE-2025-21962, CVE-2025-21929, CVE-2025-37785, CVE-2025-37889, CVE-2025-21990, CVE-2025-21966, CVE-2025-38240, CVE-2025-22058, CVE-2025-22072, CVE-2025-22056, CVE-2025-21963, CVE-2025-23134, CVE-2025-22075, CVE-2025-22054, CVE-2025-22064, CVE-2025-22027, CVE-2025-21927, CVE-2025-21943, CVE-2025-22081, CVE-2025-21975, CVE-2025-39735, CVE-2025-22088, CVE-2025-21996, CVE-2025-22009, CVE-2025-22000, CVE-2025-21912, CVE-2025-21967, CVE-2025-21995, CVE-2025-21973, CVE-2025-21908, CVE-2025-22047, CVE-2025-21930, CVE-2025-22078, CVE-2025-21957, CVE-2025-22021, CVE-2025-22019, CVE-2025-21935, CVE-2025-21951, CVE-2025-37937, CVE-2025-22043, CVE-2025-22057, CVE-2025-21922, CVE-2025-22003, CVE-2025-21978, CVE-2025-22010, CVE-2025-39989, CVE-2025-22034, CVE-2025-21986, CVE-2025-22016, CVE-2025-21960, CVE-2025-22038, CVE-2025-21924, CVE-2025-22015, CVE-2025-38152, CVE-2025-21939, CVE-2025-21917, CVE-2025-21974, CVE-2025-22001, CVE-2025-22025, CVE-2025-22062, CVE-2025-21979, CVE-2025-21911, CVE-2025-22045, CVE-2025-21914, CVE-2025-21937, CVE-2025-22095, CVE-2025-21981, CVE-2025-22014,…

Record: USN-7605-2
Updated: 2026-11-03

OSVUSN-7606-1 No score

linux-oem-6.11 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
PowerPC architecture;
x86 architecture;
Compute Acceleration Framework;
ACPI drivers;
Ublk userspace block driver;
Compressed RAM block device driver;
Bus devices;
AMD CDX bus driver;
Clock framework and drivers;
DMA engine subsystem;
DPLL subsystem;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
IIO subsystem;
InfiniBand drivers;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Network drivers;
Mellanox network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
VideoCore services drivers;
Thermal drivers;
USB DSL drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
W1 Dallas's 1-wire bus driver;
9P distributed file system;
File systems infrastructure;
Ext4 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NTFS3 file system;
Proc file system;
SMB network file system;
Memory Management;
Key Management;
Memory management;
Scheduler infrastructure;
UProbes tracing;
RDMA verbs API;
SoC audio core drivers;
BPF subsystem;
Perf events;
Kernel fork() syscall;
Tracing infrastructure;
Watch queue notification mechanism;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Networking core;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Netfilter;
Network traffic control;
SCTP protocol;
Switch device API;
Wireless networking;
eXpress Data Path;
Key management;
ALSA framework;
SoC Audio for Freescale CPUs drivers; (CVE-2025-22072, CVE-2025-22039, CVE-2025-22078, CVE-2025-21972, CVE-2025-21989, CVE-2025-21919, CVE-2025-22030, CVE-2025-22084, CVE-2025-22086, CVE-2025-21956, CVE-2025-21924, CVE-2025-22016, CVE-2025-23138, CVE-2025-22059, CVE-2025-21928, CVE-2025-21906, CVE-2025-21947, CVE-2025-21936, CVE-2025-21982, CVE-2025-38152, CVE-2025-38049, CVE-2025-21974, CVE-2025-21962, CVE-2025-22075, CVE-2025-21959, CVE-2025-22002, CVE-2025-22014, CVE-2025-21905, CVE-2025-22044, CVE-2025-22000, CVE-2025-21925, CVE-2025-21944, CVE-2025-21926, CVE-2025-21904, CVE-2024-58092, CVE-2025-21964, CVE-2025-22009, CVE-2025-22083, CVE-2025-21992, CVE-2025-39778, CVE-2025-22021, CVE-2025-22090, CVE-2025-21934, CVE-2025-22043, CVE-2025-22027, CVE-2025-21951, CVE-2025-22019, CVE-2025-21908, CVE-2025-22062, CVE-2025-22071, CVE-2025-21914, CVE-2025-21966, CVE-2025-21984, CVE-2025-39735, CVE-2025-21912, CVE-2025-21979, CVE-2025-22063, CVE-2025-37785, CVE-2025-22081, CVE-2025-22024, CVE-2025-38637, CVE-2025-22070, CVE-2025-21911, CVE-2025-21935, CVE-2024-58093, CVE-2025-21960, CVE-2025-21913, CVE-2025-21927, CVE-2025-21977, CVE-2025-37843, CVE-2025-22055, CVE-2025-22035, CVE-2025-21998, CVE-2025-22041, CVE-2025-21945, CVE-2025-22080, CVE-2025-21963, CVE-2025-21994, CVE-2025-21957, CVE-2025-22079, CVE-2025-22034, CVE-2025-21946, CVE-2025-22053,…

Record: USN-7606-1
Updated: 2026-11-03

OSVUSN-7628-1 No score

linux-azure, linux-azure-6.11 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
PowerPC architecture;
x86 architecture;
Compute Acceleration Framework;
ACPI drivers;
Ublk userspace block driver;
Compressed RAM block device driver;
Bus devices;
AMD CDX bus driver;
Clock framework and drivers;
DMA engine subsystem;
DPLL subsystem;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
IIO subsystem;
InfiniBand drivers;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Network drivers;
Mellanox network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
SCSI subsystem;
SLIMbus drivers;
QCOM SoC drivers;
VideoCore services drivers;
Thermal drivers;
USB DSL drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C Connector System Software Interface driver;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
ACRN Hypervisor Service Module driver;
W1 Dallas's 1-wire bus driver;
9P distributed file system;
File systems infrastructure;
Ext4 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NTFS3 file system;
Proc file system;
SMB network file system;
Memory Management;
Key Management;
Memory management;
Scheduler infrastructure;
UProbes tracing;
RDMA verbs API;
SoC audio core drivers;
BPF subsystem;
Perf events;
Kernel fork() syscall;
Tracing infrastructure;
Watch queue notification mechanism;
802.1Q VLAN protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Bluetooth subsystem;
Networking core;
Devlink API;
IPv4 networking;
IPv6 networking;
Logical Link layer;
Management Component Transport Protocol (MCTP);
Netfilter;
Network traffic control;
SCTP protocol;
Switch device API;
Wireless networking;
eXpress Data Path;
Key management;
ALSA framework;
SoC Audio for Freescale CPUs drivers; (CVE-2025-39728, CVE-2025-22059, CVE-2025-22008, CVE-2025-37932, CVE-2025-22033, CVE-2025-21984, CVE-2025-22063, CVE-2025-22065, CVE-2025-21991, CVE-2025-38479, CVE-2025-21948, CVE-2025-21936, CVE-2025-22038, CVE-2025-21951, CVE-2025-21906, CVE-2025-21924, CVE-2025-21966, CVE-2025-22073, CVE-2025-22020, CVE-2025-21974, CVE-2025-22043, CVE-2025-22088, CVE-2025-21959, CVE-2025-38575, CVE-2025-22035, CVE-2025-23134, CVE-2025-22009, CVE-2025-22010, CVE-2025-21941, CVE-2025-21914, CVE-2025-22066, CVE-2025-22017, CVE-2025-21911, CVE-2025-21928, CVE-2025-21998, CVE-2025-21920, CVE-2025-21961, CVE-2025-21992, CVE-2025-21995, CVE-2025-21997, CVE-2025-22084, CVE-2025-22011, CVE-2025-22039, CVE-2025-21977, CVE-2025-21963, CVE-2025-21981, CVE-2024-53222, CVE-2025-22037, CVE-2025-22070, CVE-2025-21950, CVE-2025-21980, CVE-2025-22023, CVE-2025-38049, CVE-2025-22018, CVE-2025-22072, CVE-2025-22021, CVE-2025-21986, CVE-2025-22019, CVE-2025-22045, CVE-2025-21990, CVE-2025-21926, CVE-2025-39989, CVE-2025-21902, CVE-2025-21946, CVE-2025-21908, CVE-2025-22081, CVE-2025-22042, CVE-2024-58092, CVE-2025-21939, CVE-2025-22086, CVE-2025-21996, CVE-2025-21929, CVE-2025-21947, CVE-2025-21919, CVE-2025-21922, CVE-2023-53034, CVE-2025-22013, CVE-2025-21979, CVE-2025-21968, CVE-2025-22056, CVE-2025-37937, CVE-2025-22047, CVE-2025-21956,…

Record: USN-7628-1
Updated: 2026-11-03

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-64k` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-64k-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-64k-debug` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-64k-debug-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-64k-debug-devel` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-64k-debug-devel-matched` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-64k-debug-modules` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-64k-debug-modules-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-64k-debug-modules-extra` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-64k-devel-matched` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-64k-modules` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-64k-modules-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-64k-modules-extra` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-abi-stablelists` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-cross-headers` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-debug` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-debug-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-debug-devel` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-debug-devel-matched` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-debug-modules` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-debug-modules-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-debug-modules-extra` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-debug-uki-virt` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-devel` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-devel-matched` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-doc` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-headers` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-modules` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-modules-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-modules-extra` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-modules-extra-matched` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-64k` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-64k-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-64k-debug` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-64k-debug-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-64k-debug-devel` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-64k-debug-modules` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-64k-debug-modules-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-64k-debug-modules-extra` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-64k-devel` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-64k-modules` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-64k-modules-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-64k-modules-extra` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-debug` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-debug-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-debug-devel` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-debug-modules` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-debug-modules-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-debug-modules-extra` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-devel` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-modules` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-modules-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-rt-modules-extra` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-tools` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-tools-libs` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-tools-libs-devel` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-uki-virt` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-uki-virt-addons` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-zfcpdump` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-zfcpdump-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-zfcpdump-devel` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-zfcpdump-devel-matched` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-zfcpdump-modules` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-zfcpdump-modules-core` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel-zfcpdump-modules-extra` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`libperf` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`perf` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`python3-perf` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`rtla` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`rv` AlmaLinux:10 From an advisory covering 88 CVEs	before 6.12.0-124.8.1.el10_1	6.12.0-124.8.1.el10_1
`kernel` Azure Linux:3	before 6.6.85.1-1	6.6.85.1-1
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`Kernel` Linux	6.2.0 up to 6.6.84, 6.7.0 up to 6.12.2	6.6.846.12.2
`linux` Debian:13	before 6.12.3-1	6.12.3-1
`linux` Debian:14	before 6.12.3-1	6.12.3-1
`kernel` openEuler:24.03-LTS From an advisory covering 36 CVEs	before 6.6.0-77.0.0.70.oe2403	6.6.0-77.0.0.70.oe2403
`kernel` openEuler:24.03-LTS-SP1 From an advisory covering 32 CVEs	before 6.6.0-77.0.0.81.oe2403sp1	6.6.0-77.0.0.81.oe2403sp1
`kernel` openEuler:22.03-LTS-SP3 From an advisory covering 9 CVEs	before 5.10.0-249.0.0.151.oe2203sp3	5.10.0-249.0.0.151.oe2203sp3
`kernel` openEuler:22.03-LTS-SP4 From an advisory covering 9 CVEs	before 5.10.0-249.0.0.152.oe2203sp4	5.10.0-249.0.0.152.oe2203sp4
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-64k-debug-devel` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-64k-debuginfo` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-64k-devel` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-64k-devel-matched` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-debug-debuginfo` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-debug-devel` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-debug-devel-matched` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-debuginfo` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-devel` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-devel-matched` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-doc` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-rt-debuginfo` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-tools-debuginfo` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`libperf-debuginfo` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`perf` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`perf-debuginfo` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`python3-perf` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`python3-perf-debuginfo` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`rtla` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`rv` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-64k` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-64k-core` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-64k-debug` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-64k-debug-core` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-64k-debug-modules` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-64k-modules` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-64k-modules-core` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-64k-modules-extra` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-abi-stablelists` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-core` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-debug` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-debug-core` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-debug-modules` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-debug-modules-core` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-debug-modules-extra` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-debug-uki-virt` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-modules` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-modules-core` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-modules-extra` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-modules-extra-matched` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-tools` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-tools-libs` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-uki-virt` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-uki-virt-addons` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-zfcpdump` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-zfcpdump-core` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-zfcpdump-modules-core` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-tools-libs-devel` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`libperf` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-rt` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-rt-core` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-rt-debug` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-rt-debug-core` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-rt-debug-devel` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-rt-debug-modules` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-rt-debug-modules-core` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-rt-debug-modules-extra` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-rt-devel` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-rt-modules` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-rt-modules-core` Red Hat:enterprise_linux:10.1 From an advisory covering 123 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel` Rocky Linux:10 From an advisory covering 88 CVEs	before 0:6.12.0-124.8.1.el10_1	0:6.12.0-124.8.1.el10_1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 116 CVEs	before 6.4.0-150600.8.23.1	6.4.0-150600.8.23.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 116 CVEs	before 6.4.0-150600.8.23.1	6.4.0-150600.8.23.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 116 CVEs	before 6.4.0-150600.8.23.1	6.4.0-150600.8.23.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 116 CVEs	before 6.4.0-150600.8.23.1	6.4.0-150600.8.23.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 116 CVEs	before 6.4.0-150600.8.23.1	6.4.0-150600.8.23.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 116 CVEs	before 6.4.0-150600.8.23.1	6.4.0-150600.8.23.1
`kernel-livepatch-SLE15-SP6-RT_Update_7` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 114 CVEs	before 1-150600.1.3.1	1-150600.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 114 CVEs	before 6.4.0-150600.10.23.1	6.4.0-150600.10.23.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 114 CVEs	before 6.4.0-150600.10.23.1	6.4.0-150600.10.23.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 114 CVEs	before 6.4.0-150600.10.23.1	6.4.0-150600.10.23.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 114 CVEs	before 6.4.0-150600.10.23.1	6.4.0-150600.10.23.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 114 CVEs	before 6.4.0-150600.10.23.1	6.4.0-150600.10.23.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 114 CVEs	before 6.4.0-150600.10.23.1	6.4.0-150600.10.23.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 114 CVEs	before 6.4.0-150600.10.23.1	6.4.0-150600.10.23.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 114 CVEs	before 6.4.0-150600.10.23.1	6.4.0-150600.10.23.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1.150600.12.14.1	6.4.0-150600.23.33.1.150600.12.14.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-livepatch-SLE15-SP6_Update_7` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 117 CVEs	before 1-150600.13.3.1	1-150600.13.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1.150600.12.14.1	6.4.0-150600.23.33.1.150600.12.14.1
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 117 CVEs	before 6.4.0-150600.23.33.1	6.4.0-150600.23.33.1
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 343 CVEs	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 343 CVEs	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 343 CVEs	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 343 CVEs	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 357 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 357 CVEs	before 6.4.0-24.1.21.4	6.4.0-24.1.21.4
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 357 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-livepatch-MICRO-6-0_Update_5` SUSE:Linux Micro 6.0 From an advisory covering 357 CVEs	before 1-1.2	1-1.2
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 357 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-livepatch-MICRO-6-0-RT_Update_5` SUSE:Linux Micro 6.0 From an advisory covering 610 CVEs	before 1-1.1	1-1.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 610 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 610 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 357 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 357 CVEs	before 6.4.0-24.1.21.4	6.4.0-24.1.21.4
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 357 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-livepatch-MICRO-6-0_Update_5` SUSE:Linux Micro 6.1 From an advisory covering 357 CVEs	before 1-1.2	1-1.2
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 357 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-livepatch-MICRO-6-0-RT_Update_5` SUSE:Linux Micro 6.1 From an advisory covering 610 CVEs	before 1-1.1	1-1.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 610 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 610 CVEs	before 6.4.0-25.1	6.4.0-25.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-aws-6.8` Ubuntu:22.04:LTS	before 6.8.0-1027.29~22.04.1, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1 Show 9 moreShow less 6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.1	6.8.0-1027.29~22.04.1
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-6.8` Ubuntu:22.04:LTS	before 6.8.0-1027.32~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1 Show 8 moreShow less 6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.1	6.8.0-1027.32~22.04.1
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-gcp-6.8` Ubuntu:22.04:LTS	before 6.8.0-1028.30~22.04.1, plus listed versions 6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1 Show 11 moreShow less 6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.1	6.8.0-1028.30~22.04.1
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-hwe-6.8` Ubuntu:22.04:LTS	before 6.8.0-58.60~22.04.1, plus listed versions 6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1 Show 6 moreShow less 6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.1	6.8.0-58.60~22.04.1
`linux-ibm-6.8` Ubuntu:22.04:LTS	before 6.8.0-1024.24~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1 Show 7 moreShow less 6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.1	6.8.0-1024.24~22.04.1
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-lowlatency-hwe-6.8` Ubuntu:22.04:LTS	before 6.8.0-58.60.1~22.04.1, plus listed versions 6.8.0-38.38.1~22.04.26.8.0-40.40.1~22.04.16.8.0-44.44.1~22.04.16.8.0-45.45.1~22.04.16.8.0-47.47.1~22.04.1 Show 9 moreShow less 6.8.0-48.48.3~22.04.16.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-54.56.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.1	6.8.0-58.60.1~22.04.1
`linux-nvidia-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15	None known
`linux-nvidia-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15 Show 6 moreShow less 6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25	None known
`linux-nvidia-6.8` Ubuntu:22.04:LTS	before 6.8.0-1026.29~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1 Show 12 moreShow less 6.8.0-1013.14~22.04.16.8.0-1014.15~22.04.16.8.0-1015.16~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1022.25~22.04.26.8.0-1023.26~22.04.16.8.0-1024.27~22.04.16.8.0-1025.28~22.04.1	6.8.0-1026.29~22.04.1
`linux-oem-5.17` Ubuntu:22.04:LTS	All versions, plus listed versions 5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13 Show 21 moreShow less 5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36	None known
`linux-oem-6.0` Ubuntu:22.04:LTS	All versions, plus listed versions 6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10 Show 11 moreShow less 6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21	None known
`linux-oem-6.1` Ubuntu:22.04:LTS	All versions, plus listed versions 6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9 Show 22 moreShow less 6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-53222 is a medium vulnerability (CVSS 5.5) in Linux, published December 27, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 13th percentile. Fixed in kernel 6.6.85.1-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 241 package rows, 29 versions, 5,067 references and the rest of 27 source descriptions. The JSON record has them.