Every CVE Search/ Get API key

CVE-2024-54031

netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext

Access to genmask field in struct nft_set_ext results in unaligned atomic read:

[ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]---

Align struct nft_set_ext to word size to address this and documentation it.

pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.23%Up 0.2 points since Jan 16, 2025
90%50%10%1%

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext

Access to genmask field in struct nft_set_ext results in unaligned atomic read:

[ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]---

Align struct nft_set_ext to word size to address this and documentation it.

pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.

Record
CVE-2024-54031
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
CVE List No score

netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext

Access to genmask field in struct nft_set_ext results in unaligned atomic read:

[ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]---

Align struct nft_set_ext to word size to address this and documentation it.

pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.

Record
CVE-2024-54031
Updated
2026-11-02
EUVDEUVD-2024-52246 No score

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext

Access to genmask field in struct nft_set_ext results in unaligned atomic read:

[ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]---

Align struct nft_set_ext to word size to address this and documentation it.

pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.

Record
EUVD-2024-52246
Updated
2026-11-02
GitHub AdvisoriesGHSA-3cpc-x5c2-65qq 5.5

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_hash:...

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext

Access to genmask field in struct nft_set_ext results in unaligned atomic read:

[ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]---

Align struct nft_set_ext to word size to address this and documentation it.

pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.

Record
GHSA-3cpc-x5c2-65qq
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2024-54031 5.5
Record
BELL-CVE-2024-54031
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2024-54031 5.5

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext Access to genmask field in struct nft_set_ext results in unaligned atomic read: [ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]--- Align struct nft_set_ext to word size to address this and documentation it. pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.

Record
DEBIAN-CVE-2024-54031
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 16 moreShow less
OSVUBUNTU-CVE-2024-54031 5.5

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext Access to genmask field in struct nft_set_ext results in unaligned atomic read: [ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]--- Align struct nft_set_ext to word size to address this and documentation it. pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.

Record
UBUNTU-CVE-2024-54031
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2025-1746479711 No score

kernel-uek: Fix of 225 CVEs

  • sctp: sysctl: auth_enable: avoid using current->nsproxy
  • sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy {CVE-2025-21640}
  • bpf: Use preempt_count() directly in bpf_send_signal_common()
  • Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy"
  • jfs: fix slab-out-of-bounds read in ea_get()
  • serial: 8250_dma: terminate correct DMA in tx_dma_flush()
  • Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy"
  • net: usb: usbnet: restore usb%d name exception for local mac addresses
  • vlan: fix memory leak in vlan_newlink() {CVE-2022-49636}
  • rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity
  • LTS tag: v5.4.291
  • eeprom: digsy_mtc: Make GPIO lookup table match the device
  • slimbus: messaging: Free transaction ID in delayed interrupt scenario {CVE-2025-21914}
  • intel_th: pci: Add Panther Lake-P/U support
  • intel_th: pci: Add Panther Lake-H support
  • intel_th: pci: Add Arrow Lake support
  • Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  • xhci: pci: Fix indentation in the PCI device ID definitions
  • usb: gadget: Check bmAttributes only if configuration is valid
  • usb: gadget: Fix setting self-powered state on suspend
  • usb: gadget: Set self-powered based on MaxPower and bmAttributes
  • usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
  • usb: typec: ucsi: increase timeout for PPM reset operations
  • usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916}
  • usb: renesas_usbhs: Flush the notify_hotplug_work {CVE-2025-21917}
  • usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
  • usb: renesas_usbhs: Use devm_usb_get_phy()
  • usb: renesas_usbhs: Call clk_put()
  • Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
  • gpio: rcar: Fix missing of_node_put() call
  • net: ipv6: fix missing dst ref drop in ila lwtunnel
  • net: ipv6: fix dst ref loop in ila lwtunnel
  • net-timestamp: support TCP GSO case for a few missing flags
  • vlan: enforce underlying device type {CVE-2025-21920}
  • ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922}
  • be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
  • drm/sched: Fix preprocessor guard
  • hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
  • llc: do not use skb_get() before dev_queue_xmit() {CVE-2025-21925}
  • hwmon: (ad7314) Validate leading zero bits and return error
  • hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
  • hwmon: (pmbus) Initialise page count in pmbus_identify()
  • caif_virtio: fix wrong pointer check in cfv_probe() {CVE-2025-21904}
  • net: gso: fix ownership in __udp_gso_segment {CVE-2025-21926}
  • HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
  • HID: google: fix unused variable warning under !CONFIG_ACPI
  • wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905}
  • mm/page_alloc: fix uninitialized variable
  • rapidio: fix an API misues when rio_add_net() fails {CVE-2025-21934}
  • rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  • wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
  • wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910}
  • x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
  • x86/cpu: Validate CPUID leaf 0x2 EDX output
  • x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
  • platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
  • drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
  • ALSA: hda/realtek: update ALC222 depop optimize
  • ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
  • HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948}
  • Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
  • drm/amdgpu: disable BAR resize on Dell G5 SE
  • drm/amdgpu: Check extended configuration space register when system uses large bar
  • drm/amdgpu: skip BAR resizing if the bios already…
Record
CLSA-2025-1746479711
Updated
2026-11-02
OSV No score

netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext

Access to genmask field in struct nft_set_ext results in unaligned atomic read:

[ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]---

Align struct nft_set_ext to word size to address this and documentation it.

pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64.

Record
CVE-2024-54031
Updated
2026-11-02
OSVMGASA-2025-0030 No score

Updated kernel, kmod-virtualbox, kmod-xtables-addons & dwarves packages fix security vulnerabilities

Upstream kernel version 6.6.74 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record
MGASA-2025-0030
Updated
2026-11-02
OSVMGASA-2025-0032 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.74 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2025-0032
Updated
2026-11-02
OSVopenSUSE-SU-2026:20287-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
  • CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
  • CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
  • CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
  • CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
  • CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
  • CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
  • CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
  • CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
  • CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
  • CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…
Record
openSUSE-SU-2026:20287-1
Updated
2026-11-02
OSVSUSE-SU-2026:0474-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
  • CVE-2023-54142: gtp: Fix use-after-free in __gtp_encap_destroy() (bsc#1256095).
  • CVE-2023-54243: netfilter: ebtables: fix table blob use-after-free (bsc#1255908).
  • CVE-2025-38068: crypto: lzo - Fix compression buffer overrun (bsc#1245210).
  • CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
  • CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1245751).
  • CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40300: Documentation/hw-vuln: Add VMSCAPE documentation (bsc#1247483).
  • CVE-2025-68183: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (bsc#1255251).
  • CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
  • CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
  • CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
  • CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
  • CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
  • CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
  • CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
  • CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744).
  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
  • CVE-2026-23001: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).

The following non security issues were fixed:

  • mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (bsc#1253087).
  • net: hv_netvsc: reject RSS hash key programming without RX indirection table (bsc#1257473).
  • net: tcp: allow zero-window ACK update the window (bsc#1254767).
  • net: tcp: send zero-window ACK when no memory (bsc#1254767).
  • scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
  • tcp: correct handling of extreme memory squeeze (bsc#1254767).
  • x86: make page fault handling disable interrupts properly (git-fixes).
Record
SUSE-SU-2026:0474-1
Updated
2026-11-02
OSVSUSE-SU-2026:0475-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
  • CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
  • CVE-2025-40139: net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (bsc#1253409).
  • CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
  • CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
  • CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
  • CVE-2026-23001: macvlan: Use 'hash' iterators to simplify code (bsc#1257232).
Record
SUSE-SU-2026:0475-1
Updated
2026-11-02
OSVSUSE-SU-2026:0495-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
  • CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
  • CVE-2025-40139: net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (bsc#1253409).
  • CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
  • CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
  • CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
  • CVE-2026-23001: macvlan: Use 'hash' iterators to simplify code (bsc#1257232).
Record
SUSE-SU-2026:0495-1
Updated
2026-11-02
OSVSUSE-SU-2026:0496-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
  • CVE-2023-54142: gtp: Fix use-after-free in __gtp_encap_destroy() (bsc#1256095).
  • CVE-2023-54243: netfilter: ebtables: fix table blob use-after-free (bsc#1255908).
  • CVE-2025-38068: crypto: lzo - Fix compression buffer overrun (bsc#1245210).
  • CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
  • CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1245751).
  • CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40300: Documentation/hw-vuln: Add VMSCAPE documentation (bsc#1247483).
  • CVE-2025-68183: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (bsc#1255251).
  • CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
  • CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
  • CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
  • CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
  • CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
  • CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
  • CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
  • CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744).
  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
  • CVE-2026-23001: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).
  • CVE-2023-53215: sched/fair: Don't balance task to its current running CPU (bsc#1250397).
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).

The following non security issues were fixed:

  • Revert 'ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582)'.
  • mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (bsc#1253087 bsc#1254447).
  • net: hv_netvsc: reject RSS hash key programming without RX indirection table (bsc#1257473).
  • net: tcp: allow zero-window ACK update the window (bsc#1254767).
  • net: tcp: send zero-window ACK when no memory (bsc#1254767).
  • scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
  • tcp: correct handling of extreme memory squeeze (bsc#1254767).
  • x86: make page fault handling disable interrupts properly (git-fixes).
Record
SUSE-SU-2026:0496-1
Updated
2026-11-02
OSVSUSE-SU-2026:0617-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785).
  • CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
  • CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255576).
  • CVE-2023-53215: sched/fair: Don't balance task to its current running CPU (bsc#1250397).
  • CVE-2023-53254: cacheinfo: Fix shared_cpu_map to handle shared caches at different levels (bsc#1249871).
  • CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler() (bsc#1254751).
  • CVE-2023-54142: gtp: Fix use-after-free in __gtp_encap_destroy() (bsc#1256095).
  • CVE-2023-54243: netfilter: ebtables: fix table blob use-after-free (bsc#1255908).
  • CVE-2024-28956: x86/its: Enumerate Indirect Target Selection (ITS) bug (bsc#1242006).
  • CVE-2024-36348: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
  • CVE-2024-36349: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
  • CVE-2024-36350: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
  • CVE-2024-36357: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
  • CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
  • CVE-2025-38068: crypto: lzo - Fix compression buffer overrun (bsc#1245210).
  • CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
  • CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1245751).
  • CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40019: crypto: essiv - Check ssize for decryption and in-place encryption (bsc#1252678).
  • CVE-2025-40139: net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (bsc#1253409).
  • CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
  • CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894).
  • CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
  • CVE-2025-40300: Documentation/hw-vuln: Add VMSCAPE documentation (bsc#1247483).
  • CVE-2025-40331: sctp: Prevent TOCTOU out-of-bounds write (bsc#1254615).
  • CVE-2025-68183: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (bsc#1255251).
  • CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
  • CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
  • CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
  • CVE-2025-68732: gpu: host1x: Fix race in syncpt alloc/free (bsc#1255688).
  • CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
  • CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
  • CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
  • CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744).
  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779).
  • CVE-2026-22999: net/sched: sch_qfq: do not free…
Record
SUSE-SU-2026:0617-1
Updated
2026-11-02
OSVSUSE-SU-2026:1131-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
  • CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
  • CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
  • CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
  • CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
  • CVE-2026-23001: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).
  • CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
  • CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
  • CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
  • CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
  • CVE-2026-23204: net: add skb_header_pointer_careful() helper (bsc#1258340).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258518).
  • CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1258850).
  • CVE-2026-23269: apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1259857).

The following non security issues were fixed:

  • apparmor: fix differential encoding verification (bsc#1258849).
  • apparmor: Fix double free of ns_name in aa_replace_profiles() (bsc#1258849).
  • apparmor: fix memory leak in verify_header (bsc#1258849).
  • apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (bsc#1258849).
  • apparmor: fix race between freeing data and fs accessing it (bsc#1258849).
  • apparmor: fix race on rawdata dereference (bsc#1258849).
  • apparmor: fix side-effect bug in match_char() macro usage (bsc#1258849).
  • apparmor: fix unprivileged local user can do privileged policy management (bsc#1258849).
  • apparmor: fix: limit the number of levels of policy namespaces (bsc#1258849).
  • apparmor: replace recursive profile removal with iterative approach (bsc#1258849).
  • apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1258849).
  • net: hv_netvsc: reject RSS hash key programming without RX indirection table (bsc#1257473).
  • net: tcp: allow zero-window ACK update the window (bsc#1254767).
  • net: tcp: send zero-window ACK when no memory (bsc#1254767).
  • scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
  • tcp: correct handling of extreme memory squeeze (bsc#1254767).
  • x86/its: Fix crash during dynamic its initialization (bsc#1257771).
  • x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (bsc#1257771).
Record
SUSE-SU-2026:1131-1
Updated
2026-11-02
OSVSUSE-SU-2026:20555-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
  • CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
  • CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
  • CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
  • CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
  • CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
  • CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
  • CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
  • CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
  • CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
  • CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…
Record
SUSE-SU-2026:20555-1
Updated
2026-11-02
OSVSUSE-SU-2026:20570-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
  • CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
  • CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
  • CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
  • CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
  • CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
  • CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
  • CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
  • CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
  • CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
  • CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…
Record
SUSE-SU-2026:20570-1
Updated
2026-11-02
OSVSUSE-SU-2026:20599-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
  • CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
  • CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
  • CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
  • CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
  • CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
  • CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
  • CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
  • CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
  • CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
  • CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…
Record
SUSE-SU-2026:20599-1
Updated
2026-11-02
OSVSUSE-SU-2026:20615-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
  • CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
  • CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
  • CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
  • CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
  • CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
  • CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
  • CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
  • CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
  • CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
  • CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…
Record
SUSE-SU-2026:20615-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-lts
Alpaquita:23
 6.1.121-r0 up to 6.1.124-r0
6.1.124-r0
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
bpftool
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-container
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-container-debug
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-debug
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-devel
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-headers
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
Show 212 moreShow less
Affected packages
PackageAffectedFixed
kernel-uek-tools
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
perf
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
python-perf
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
Kernel
Linux
 5.4.287 up to 5.4.289, 5.10.231 up to 5.10.233, 5.15.174 up to 5.15.176, 6.1.120 up to 6.1.124, 6.6.66 up to 6.6.70, 6.12.5 up to 6.12.9
5.4.2895.10.2335.15.1766.1.1246.6.706.12.9
linux
Debian:12
 before 6.1.124-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 28 moreShow less
6.1.119-16.1.123-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.124-1
linux
Debian:13
 before 6.12.9-1
6.12.9-1
linux
Debian:14
 before 6.12.9-1
6.12.9-1
linux
Debian:11
From an advisory covering 387 CVEs
 before 5.10.234-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 39 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.234-1
linux-6.1
Debian:11
From an advisory covering 333 CVEs
 before 6.1.128-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1
6.1.128-1~deb11u1
kernel
Mageia:9
From an advisory covering 202 CVEs
 before 6.6.74-1.mga9
6.6.74-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 202 CVEs
 before 7.0.24-64.mga9
7.0.24-64.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 202 CVEs
 before 3.24-70.mga9
3.24-70.mga9
dwarves
Mageia:9
From an advisory covering 202 CVEs
 before 1.29-1.mga9
1.29-1.mga9
kernel-linus
Mageia:9
From an advisory covering 202 CVEs
 before 6.6.74-1.mga9
6.6.74-1.mga9
kernel-default
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1.150500.6.67.1
5.14.21-150500.55.136.1.150500.6.67.1
kernel-source
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-livepatch-SLE15-SP5_Update_35
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 50 CVEs
 before 1-150500.11.3.1
1-150500.11.3.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1.150500.6.67.1
5.14.21-150500.55.136.1.150500.6.67.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1.150500.6.67.1
5.14.21-150500.55.136.1.150500.6.67.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-default
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1.150500.6.67.1
5.14.21-150500.55.136.1.150500.6.67.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-source
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1.150500.6.67.1
5.14.21-150500.55.136.1.150500.6.67.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 50 CVEs
 before 5.14.21-150500.55.136.1
5.14.21-150500.55.136.1
kernel-default
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 25 CVEs
 before 5.3.18-150300.59.235.1
5.3.18-150300.59.235.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 25 CVEs
 before 5.3.18-150300.59.235.1.150300.18.140.1
5.3.18-150300.59.235.1.150300.18.140.1
kernel-rt
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 25 CVEs
 before 5.3.18-150300.235.1
5.3.18-150300.235.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 25 CVEs
 before 5.3.18-150300.235.1
5.3.18-150300.235.1
kernel-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 50 CVEs
 before 5.14.21-150500.13.121.1
5.14.21-150500.13.121.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 50 CVEs
 before 5.14.21-150500.13.121.1
5.14.21-150500.13.121.1
kernel-default
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1.150400.24.98.3
5.14.21-150400.24.194.1.150400.24.98.3
kernel-default
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1.150400.24.98.3
5.14.21-150400.24.194.1.150400.24.98.3
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-livepatch-SLE15-SP4_Update_48
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 380 CVEs
 before 1-150400.9.7.1
1-150400.9.7.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1.150400.24.98.3
5.14.21-150400.24.194.1.150400.24.98.3
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1.150400.24.98.3
5.14.21-150400.24.194.1.150400.24.98.3
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1.150400.24.98.3
5.14.21-150400.24.194.1.150400.24.98.3
kernel-docs
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1.150400.24.98.3
5.14.21-150400.24.194.1.150400.24.98.3
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 44 CVEs
 before 5.14.21-150400.15.145.1
5.14.21-150400.15.145.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 44 CVEs
 before 5.14.21-150400.15.145.1
5.14.21-150400.15.145.1
kernel-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 44 CVEs
 before 5.14.21-150400.15.145.1
5.14.21-150400.15.145.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 44 CVEs
 before 5.14.21-150400.15.145.1
5.14.21-150400.15.145.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1.160000.2.7
6.12.0-160000.26.1.160000.2.7
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1.160000.2.7
6.12.0-160000.26.1.160000.2.7
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1.160000.2.7
6.12.0-160000.26.1.160000.2.7
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
 None known
linux-gcp-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
 None known
linux-gcp-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
 None known
linux-gcp-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1
Show 8 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1
 None known
linux-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
 None known
linux-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1
Show 5 moreShow less
6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1
 None known
linux-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1
Show 8 moreShow less
6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-lowlatency-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1
Show 5 moreShow less
5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30
 None known
linux-lowlatency-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1
Show 5 moreShow less
6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-lowlatency-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1
Show 8 moreShow less
6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1
 None known
linux-nvidia-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15
 None known
linux-nvidia-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15
Show 6 moreShow less
6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25
 None known
linux-oem-5.17
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13
Show 21 moreShow less
5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36
 None known
linux-oem-6.0
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10
Show 11 moreShow less
6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21
 None known
linux-oem-6.1
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9
Show 22 moreShow less
6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36
 None known
linux-oem-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8
Show 14 moreShow less
6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28
 None known
linux-oracle-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1
Show 8 moreShow less
6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1
 None known
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-riscv-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1
 None known
linux-riscv-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1
Show 5 moreShow less
6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1
 None known
linux-starfive-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1
 None known
linux-starfive-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1
 None known
linux-starfive-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1
Show 6 moreShow less
6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.16.5.0-1017.18~22.04.16.5.0-1018.19~22.04.1
 None known
linux-raspi-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-2019.20
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1.160000.2.7
6.12.0-160000.26.1.160000.2.7
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-54031 is a medium vulnerability (CVSS 5.5) in Linux, published January 15, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 13th percentile. Fixed in linux-lts 6.1.124-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 29 versions, 1,313 references and the rest of 7 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open