CVE-2024-56687

usb: musb: Fix hardware lockup on first Rx endpoint request

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

usb: musb: Fix hardware lockup on first Rx endpoint request

There is a possibility that a request's callback could be invoked from usb_ep_queue() (call trace below, supplemented with missing calls):

req->complete from usb_gadget_giveback_request (drivers/usb/gadget/udc/core.c:999) usb_gadget_giveback_request from musb_g_giveback (drivers/usb/musb/musb_gadget.c:147) musb_g_giveback from rxstate (drivers/usb/musb/musb_gadget.c:784) rxstate from musb_ep_restart (drivers/usb/musb/musb_gadget.c:1169) musb_ep_restart from musb_ep_restart_resume_work (drivers/usb/musb/musb_gadget.c:1176) musb_ep_restart_resume_work from musb_queue_resume_work (drivers/usb/musb/musb_core.c:2279) musb_queue_resume_work from musb_gadget_queue (drivers/usb/musb/musb_gadget.c:1241) musb_gadget_queue from usb_ep_queue (drivers/usb/gadget/udc/core.c:300)

According to the docstring of usb_ep_queue(), this should not happen:

"Note that @req's ->complete() callback must never be called from within usb_ep_queue() as that can create deadlock situations."

In fact, a hardware lockup might occur in the following sequence:

The gadget is initialized using musb_gadget_enable().
Meanwhile, a packet arrives, and the RXPKTRDY flag is set, raising an interrupt.
If IRQs are enabled, the interrupt is handled, but musb_g_rx() finds an empty queue (next_request() returns NULL). The interrupt flag has already been cleared by the glue layer handler, but the RXPKTRDY flag remains set.
The first request is enqueued using usb_ep_queue(), leading to the call of req->complete(), as shown in the call trace above.
If the callback enables IRQs and another packet is waiting, step (3) repeats. The request queue is empty because usb_g_giveback() removes the request before invoking the callback.
The endpoint remains locked up, as the interrupt triggered by hardware setting the RXPKTRDY flag has been handled, but the flag itself remains set.

For this scenario to occur, it is only necessary for IRQs to be enabled at some point during the complete callback. This happens with the USB Ethernet gadget, whose rx_complete() callback calls netif_rx(). If called in the task context, netif_rx() disables the bottom halves (BHs). When the BHs are re-enabled, IRQs are also enabled to allow soft IRQs to be processed. The gadget itself is initialized at module load (or at boot if built-in), but the first request is enqueued when the network interface is brought up, triggering rx_complete() in the task context via ioctl(). If a packet arrives while the interface is down, it can prevent the interface from receiving any further packets from the USB host.

The situation is quite complicated with many parties involved. This particular issue can be resolved in several possible ways:

Ensure that callbacks never enable IRQs. This would be difficult to enforce, as discovering how netif_rx() interacts with interrupts was already quite challenging and u_ether is not the only function driver. Similar "bugs" could be hidden in other drivers as well.
Disable MUSB interrupts in musb_g_giveback() before calling the callback and re-enable them afterwars (by calling musb_{dis,en}able_interrupts(), for example). This would ensure that MUSB interrupts are not handled during the callback, even if IRQs are enabled. In fact, it would allow IRQs to be enabled when releasing the lock. However, this feels like an inelegant hack.
Modify the interrupt handler to clear the RXPKTRDY flag if the request queue is empty. While this approach also feels like a hack, it wastes CPU time by attempting to handle incoming packets when the software is not ready to process them.
Flush the Rx FIFO instead of calling rxstate() in musb_ep_restart(). This ensures that the hardware can receive packets when there is at least one request in the queue. Once I ---truncated---

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.16%Up 0.1 points since Dec 29, 2024

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

usb: musb: Fix hardware lockup on first Rx endpoint request

There is a possibility that a request's callback could be invoked from usb_ep_queue() (call trace below, supplemented with missing calls):

According to the docstring of usb_ep_queue(), this should not happen:

"Note that @req's ->complete() callback must never be called from within usb_ep_queue() as that can create deadlock situations."

In fact, a hardware lockup might occur in the following sequence:

The gadget is initialized using musb_gadget_enable().
Meanwhile, a packet arrives, and the RXPKTRDY flag is set, raising an interrupt.
If IRQs are enabled, the interrupt is handled, but musb_g_rx() finds an empty queue (next_request() returns NULL). The interrupt flag has already been cleared by the glue layer handler, but the RXPKTRDY flag remains set.
The first request is enqueued using usb_ep_queue(), leading to the call of req->complete(), as shown in the call trace above.
If the callback enables IRQs and another packet is waiting, step (3) repeats. The request queue is empty because usb_g_giveback() removes the request before invoking the callback.
The endpoint remains locked up, as the interrupt triggered by hardware setting the RXPKTRDY flag has been handled, but the flag itself remains set.

The situation is quite complicated with many parties involved. This particular issue can be resolved in several possible ways:

Ensure that callbacks never enable IRQs. This would be difficult to enforce, as discovering how netif_rx() interacts with interrupts was already quite challenging and u_ether is not the only function driver. Similar "bugs" could be hidden in other drivers as well.
Disable MUSB interrupts in musb_g_giveback() before calling the callback and re-enable them afterwars (by calling musb_{dis,en}able_interrupts(), for example). This would ensure that MUSB interrupts are not handled during the callback, even if IRQs are enabled. In fact, it would allow IRQs to be enabled when releasing the lock. However, this feels like an inelegant hack.
Modify the interrupt handler to clear the RXPKTRDY flag if the request queue is empty. While this approach also feels like a hack, it wastes CPU time by attempting to handle incoming packets when the software is not ready to process them.
Flush the Rx FIFO instead of calling rxstate() in musb_ep_restart(). This ensures that the hardware can receive packets when there is at least one request in the queue. Once I ---truncated---

Record: CVE-2024-56687
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-667
Updated: 2026-11-02

CVE List 5.5

usb: musb: Fix hardware lockup on first Rx endpoint request

In the Linux kernel, the following vulnerability has been resolved:

usb: musb: Fix hardware lockup on first Rx endpoint request

There is a possibility that a request's callback could be invoked from usb_ep_queue() (call trace below, supplemented with missing calls):

According to the docstring of usb_ep_queue(), this should not happen:

"Note that @req's ->complete() callback must never be called from within usb_ep_queue() as that can create deadlock situations."

In fact, a hardware lockup might occur in the following sequence:

The gadget is initialized using musb_gadget_enable().
Meanwhile, a packet arrives, and the RXPKTRDY flag is set, raising an interrupt.
If IRQs are enabled, the interrupt is handled, but musb_g_rx() finds an empty queue (next_request() returns NULL). The interrupt flag has already been cleared by the glue layer handler, but the RXPKTRDY flag remains set.
The first request is enqueued using usb_ep_queue(), leading to the call of req->complete(), as shown in the call trace above.
If the callback enables IRQs and another packet is waiting, step (3) repeats. The request queue is empty because usb_g_giveback() removes the request before invoking the callback.
The endpoint remains locked up, as the interrupt triggered by hardware setting the RXPKTRDY flag has been handled, but the flag itself remains set.

The situation is quite complicated with many parties involved. This particular issue can be resolved in several possible ways:

Ensure that callbacks never enable IRQs. This would be difficult to enforce, as discovering how netif_rx() interacts with interrupts was already quite challenging and u_ether is not the only function driver. Similar "bugs" could be hidden in other drivers as well.
Disable MUSB interrupts in musb_g_giveback() before calling the callback and re-enable them afterwars (by calling musb_{dis,en}able_interrupts(), for example). This would ensure that MUSB interrupts are not handled during the callback, even if IRQs are enabled. In fact, it would allow IRQs to be enabled when releasing the lock. However, this feels like an inelegant hack.
Modify the interrupt handler to clear the RXPKTRDY flag if the request queue is empty. While this approach also feels like a hack, it wastes CPU time by attempting to handle incoming packets when the software is not ready to process them.
Flush the Rx FIFO instead of calling rxstate() in musb_ep_restart(). This ensures that the hardware can receive packets when there is at least one request in the queue. Once I ---truncated---

Record: CVE-2024-56687
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-667
Updated: 2026-11-02

EUVDEUVD-2024-53335 5.5

In the Linux kernel, the following vulnerability has been resolved:

usb: musb: Fix hardware lockup on first Rx endpoint request

There is a possibility that a request's callback could be invoked from usb_ep_queue() (call trace below, supplemented with missing calls):

According to the docstring of usb_ep_queue(), this should not happen:

"Note that @req's ->complete() callback must never be called from within usb_ep_queue() as that can create deadlock situations."

In fact, a hardware lockup might occur in the following sequence:

The gadget is initialized using musb_gadget_enable().
Meanwhile, a packet arrives, and the RXPKTRDY flag is set, raising an interrupt.
If IRQs are enabled, the interrupt is handled, but musb_g_rx() finds an empty queue (next_request() returns NULL). The interrupt flag has already been cleared by the glue layer handler, but the RXPKTRDY flag remains set.
The first request is enqueued using usb_ep_queue(), leading to the call of req->complete(), as shown in the call trace above.
If the callback enables IRQs and another packet is waiting, step (3) repeats. The request queue is empty because usb_g_giveback() removes the request before invoking the callback.
The endpoint remains locked up, as the interrupt triggered by hardware setting the RXPKTRDY flag has been handled, but the flag itself remains set.

The situation is quite complicated with many parties involved. This particular issue can be resolved in several possible ways:

Ensure that callbacks never enable IRQs. This would be difficult to enforce, as discovering how netif_rx() interacts with interrupts was already quite challenging and u_ether is not the only function driver. Similar "bugs" could be hidden in other drivers as well.
Disable MUSB interrupts in musb_g_giveback() before calling the callback and re-enable them afterwars (by calling musb_{dis,en}able_interrupts(), for example). This would ensure that MUSB interrupts are not handled during the callback, even if IRQs are enabled. In fact, it would allow IRQs to be enabled when releasing the lock. However, this feels like an inelegant hack.
Modify the interrupt handler to clear the RXPKTRDY flag if the request queue is empty. While this approach also feels like a hack, it wastes CPU time by attempting to handle incoming packets when the software is not ready to process them.
Flush the Rx FIFO instead of calling rxstate() in musb_ep_restart(). This ensures that the hardware can receive packets when there is at least one request in the queue. Once I ---truncated---

Record: EUVD-2024-53335
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-x3r6-6fxj-5f4r 5.5

In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware...

In the Linux kernel, the following vulnerability has been resolved:

usb: musb: Fix hardware lockup on first Rx endpoint request

There is a possibility that a request's callback could be invoked from usb_ep_queue() (call trace below, supplemented with missing calls):

According to the docstring of usb_ep_queue(), this should not happen:

"Note that @req's ->complete() callback must never be called from within usb_ep_queue() as that can create deadlock situations."

In fact, a hardware lockup might occur in the following sequence:

The gadget is initialized using musb_gadget_enable().
Meanwhile, a packet arrives, and the RXPKTRDY flag is set, raising an interrupt.
If IRQs are enabled, the interrupt is handled, but musb_g_rx() finds an empty queue (next_request() returns NULL). The interrupt flag has already been cleared by the glue layer handler, but the RXPKTRDY flag remains set.
The first request is enqueued using usb_ep_queue(), leading to the call of req->complete(), as shown in the call trace above.
If the callback enables IRQs and another packet is waiting, step (3) repeats. The request queue is empty because usb_g_giveback() removes the request before invoking the callback.
The endpoint remains locked up, as the interrupt triggered by hardware setting the RXPKTRDY flag has been handled, but the flag itself remains set.

The situation is quite complicated with many parties involved. This particular issue can be resolved in several possible ways:

Ensure that callbacks never enable IRQs. This would be difficult to enforce, as discovering how netif_rx() interacts with interrupts was already quite challenging and u_ether is not the only function driver. Similar "bugs" could be hidden in other drivers as well.
Disable MUSB interrupts in musb_g_giveback() before calling the callback and re-enable them afterwars (by calling musb_{dis,en}able_interrupts(), for example). This would ensure that MUSB interrupts are not handled during the callback, even if IRQs are enabled. In fact, it would allow IRQs to be enabled when releasing the lock. However, this feels like an inelegant hack.
Modify the interrupt handler to clear the RXPKTRDY flag if the request queue is empty. While this approach also feels like a hack, it wastes CPU time by attempting to handle incoming packets when the software is not ready to process them.
Flush the Rx FIFO instead of calling rxstate() in musb_ep_restart(). This ensures that the hardware can receive packets when there is at least one request in the queue. Once I ---truncated---

Record: GHSA-x3r6-6fxj-5f4r
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-667
Updated: 2026-11-02

OSVBELL-CVE-2024-56687 5.5

Record: BELL-CVE-2024-56687
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 5.5

usb: musb: Fix hardware lockup on first Rx endpoint request

In the Linux kernel, the following vulnerability has been resolved:

usb: musb: Fix hardware lockup on first Rx endpoint request

There is a possibility that a request's callback could be invoked from usb_ep_queue() (call trace below, supplemented with missing calls):

According to the docstring of usb_ep_queue(), this should not happen:

"Note that @req's ->complete() callback must never be called from within usb_ep_queue() as that can create deadlock situations."

In fact, a hardware lockup might occur in the following sequence:

The gadget is initialized using musb_gadget_enable().
Meanwhile, a packet arrives, and the RXPKTRDY flag is set, raising an interrupt.
If IRQs are enabled, the interrupt is handled, but musb_g_rx() finds an empty queue (next_request() returns NULL). The interrupt flag has already been cleared by the glue layer handler, but the RXPKTRDY flag remains set.
The first request is enqueued using usb_ep_queue(), leading to the call of req->complete(), as shown in the call trace above.
If the callback enables IRQs and another packet is waiting, step (3) repeats. The request queue is empty because usb_g_giveback() removes the request before invoking the callback.
The endpoint remains locked up, as the interrupt triggered by hardware setting the RXPKTRDY flag has been handled, but the flag itself remains set.

The situation is quite complicated with many parties involved. This particular issue can be resolved in several possible ways:

Ensure that callbacks never enable IRQs. This would be difficult to enforce, as discovering how netif_rx() interacts with interrupts was already quite challenging and u_ether is not the only function driver. Similar "bugs" could be hidden in other drivers as well.
Disable MUSB interrupts in musb_g_giveback() before calling the callback and re-enable them afterwars (by calling musb_{dis,en}able_interrupts(), for example). This would ensure that MUSB interrupts are not handled during the callback, even if IRQs are enabled. In fact, it would allow IRQs to be enabled when releasing the lock. However, this feels like an inelegant hack.
Modify the interrupt handler to clear the RXPKTRDY flag if the request queue is empty. While this approach also feels like a hack, it wastes CPU time by attempting to handle incoming packets when the software is not ready to process them.
Flush the Rx FIFO instead of calling rxstate() in musb_ep_restart(). This ensures that the hardware can receive packets when there is at least one request in the queue. Once I ---truncated---

Record: CVE-2024-56687
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 22 moreShow less

OSVDEBIAN-CVE-2024-56687 5.5

In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix hardware lockup on first Rx endpoint request There is a possibility that a request's callback could be invoked from usb_ep_queue() (call trace below, supplemented with missing calls): req->complete from usb_gadget_giveback_request (drivers/usb/gadget/udc/core.c:999) usb_gadget_giveback_request from musb_g_giveback (drivers/usb/musb/musb_gadget.c:147) musb_g_giveback from rxstate (drivers/usb/musb/musb_gadget.c:784) rxstate from musb_ep_restart (drivers/usb/musb/musb_gadget.c:1169) musb_ep_restart from musb_ep_restart_resume_work (drivers/usb/musb/musb_gadget.c:1176) musb_ep_restart_resume_work from musb_queue_resume_work (drivers/usb/musb/musb_core.c:2279) musb_queue_resume_work from musb_gadget_queue (drivers/usb/musb/musb_gadget.c:1241) musb_gadget_queue from usb_ep_queue (drivers/usb/gadget/udc/core.c:300) According to the docstring of usb_ep_queue(), this should not happen: "Note that @req's ->complete() callback must never be called from within usb_ep_queue() as that can create deadlock situations." In fact, a hardware lockup might occur in the following sequence: 1. The gadget is initialized using musb_gadget_enable(). 2. Meanwhile, a packet arrives, and the RXPKTRDY flag is set, raising an interrupt. 3. If IRQs are enabled, the interrupt is handled, but musb_g_rx() finds an empty queue (next_request() returns NULL). The interrupt flag has already been cleared by the glue layer handler, but the RXPKTRDY flag remains set. 4. The first request is enqueued using usb_ep_queue(), leading to the call of req->complete(), as shown in the call trace above. 5. If the callback enables IRQs and another packet is waiting, step (3) repeats. The request queue is empty because usb_g_giveback() removes the request before invoking the callback. 6. The endpoint remains locked up, as the interrupt triggered by hardware setting the RXPKTRDY flag has been handled, but the flag itself remains set. For this scenario to occur, it is only necessary for IRQs to be enabled at some point during the complete callback. This happens with the USB Ethernet gadget, whose rx_complete() callback calls netif_rx(). If called in the task context, netif_rx() disables the bottom halves (BHs). When the BHs are re-enabled, IRQs are also enabled to allow soft IRQs to be processed. The gadget itself is initialized at module load (or at boot if built-in), but the first request is enqueued when the network interface is brought up, triggering rx_complete() in the task context via ioctl(). If a packet arrives while the interface is down, it can prevent the interface from receiving any further packets from the USB host. The situation is quite complicated with many parties involved. This particular issue can be resolved in several possible ways: 1. Ensure that callbacks never enable IRQs. This would be difficult to enforce, as discovering how netif_rx() interacts with interrupts was already quite challenging and u_ether is not the only function driver. Similar "bugs" could be hidden in other drivers as well. 2. Disable MUSB interrupts in musb_g_giveback() before calling the callback and re-enable them afterwars (by calling musb_{dis,en}able_interrupts(), for example). This would ensure that MUSB interrupts are not handled during the callback, even if IRQs are enabled. In fact, it would allow IRQs to be enabled when releasing the lock. However, this feels like an inelegant hack. 3. Modify the interrupt handler to clear the RXPKTRDY flag if the request queue is empty. While this approach also feels like a hack, it wastes CPU time by attempting to handle incoming packets when the software is not ready to process them. 4. Flush the Rx FIFO instead of calling rxstate() in musb_ep_restart(). This ensures that the hardware can receive packets when there is at least one request in the queue. Once I ---truncated---

Record: DEBIAN-CVE-2024-56687
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2025-1093 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix potencial out-of-bounds when buffer offset is invalid

I found potencial out-of-bounds when buffer offset fields of a few requests is invalid. This patch set the minimum value of buffer offset field to ->Buffer offset to validate buffer length.(CVE-2024-26952)

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()

If ->NameOffset of smb2_create_req is smaller than Buffer offset of smb2_create_req, slab-out-of-bounds read can happen from smb2_open. This patch set the minimum value of the name offset to the buffer offset to validate name length of smb2_create_req().(CVE-2024-26954)

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: improve shutdown sequence

Alexander Sverdlin presents 2 problems during shutdown with the lan9303 driver. One is specific to lan9303 and the other just happens to reproduce there.

The first problem is that lan9303 is unique among DSA drivers in that it calls dev_get_drvdata() at "arbitrary runtime" (not probe, not shutdown, not remove):

phy_state_machine() -> ... -> dsa_user_phy_read() -> ds->ops->phy_read() -> lan9303_phy_read() -> chip->ops->phy_read() -> lan9303_mdio_phy_read() -> dev_get_drvdata()

But we never stop the phy_state_machine(), so it may continue to run after dsa_switch_shutdown(). Our common pattern in all DSA drivers is to set drvdata to NULL to suppress the remove() method that may come afterwards. But in this case it will result in an NPD.

The second problem is that the way in which we set dp->conduit->dsa_ptr = NULL; is concurrent with receive packet processing. dsa_switch_rcv() checks once whether dev->dsa_ptr is NULL, but afterwards, rather than continuing to use that non-NULL value, dev->dsa_ptr is dereferenced again and again without NULL checks: dsa_conduit_find_user() and many other places. In between dereferences, there is no locking to ensure that what was valid once continues to be valid.

Both problems have the common aspect that closing the conduit interface solves them.

In the first case, dev_close(conduit) triggers the NETDEV_GOING_DOWN event in dsa_user_netdevice_event() which closes user ports as well. dsa_port_disable_rt() calls phylink_stop(), which synchronously stops the phylink state machine, and ds->ops->phy_read() will thus no longer call into the driver after this point.

In the second case, dev_close(conduit) should do this, as per Documentation/networking/driver.rst:

| Quiescence | ---------- | | After the ndo_stop routine has been called, the hardware must | not receive or transmit any data. All in flight packets must | be aborted. If necessary, poll or wait for completion of | any reset commands.

So it should be sufficient to ensure that later, when we zeroize conduit->dsa_ptr, there will be no concurrent dsa_switch_rcv() call on this conduit.

The addition of the netif_device_detach() function is to ensure that ioctls, rtnetlinks and ethtool requests on the user ports no longer propagate down to the driver - we're no longer prepared to handle them.

The race condition actually did not exist when commit 0650bf52b31f ("net: dsa: be compatible with masters which unregister on shutdown") first introduced dsa_switch_shutdown(). It was created later, when we stopped unregistering the user interfaces from a bad spot, and we just replaced that sequence with a racy zeroization of conduit->dsa_ptr (one which doesn't ensure that the interfaces aren't up).(CVE-2024-49998)

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/pm: Vangogh: Fix kernel memory out of bounds write

KASAN reports that the GPU metrics table…

Record: OESA-2025-1093
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1097 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix potencial out-of-bounds when buffer offset is invalid

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()

In the Linux kernel, the following vulnerability has been resolved:

fpga: bridge: add owner module and take its refcount

The current implementation of the fpga bridge assumes that the low-level module registers a driver for the parent device and uses its owner pointer to take the module's refcount. This approach is problematic since it can lead to a null pointer dereference while attempting to get the bridge if the parent device does not have a driver.

To address this problem, add a module owner pointer to the fpga_bridge struct and use it to take the module's refcount. Modify the function for registering a bridge to take an additional owner module parameter and rename it to avoid conflicts. Use the old function name for a helper macro that automatically sets the module that registers the bridge as the owner. This ensures compatibility with existing low-level control modules and reduces the chances of registering a bridge without setting the owner.

Also, update the documentation to keep it consistent with the new interface for registering an fpga bridge.

Other changes: opportunistically move put_device() from __fpga_bridge_get() to fpga_bridge_get() and of_fpga_bridge_get() to improve code clarity since the bridge device is taken in these functions.(CVE-2024-36479)

In the Linux kernel, the following vulnerability has been resolved:

blk-iocost: avoid out of bounds shift

UBSAN catches undefined behavior in blk-iocost, where sometimes iocg->delay is shifted right by a number that is too large, resulting in undefined behavior on some architectures.

[ 186.556576] ------------[ cut here ]------------ UBSAN: shift-out-of-bounds in block/blk-iocost.c:1366:23 shift exponent 64 is too large for 64-bit type 'u64' (aka 'unsigned long long') CPU: 16 PID: 0 Comm: swapper/16 Tainted: G S E N 6.9.0-0_fbk700_debug_rc2_kbuilder_0_gc85af715cac0 #1 Hardware name: Quanta Twin Lakes MP/Twin Lakes Passive MP, BIOS F09_3A23 12/08/2020 Call Trace: <IRQ> dump_stack_lvl+0x8f/0xe0 __ubsan_handle_shift_out_of_bounds+0x22c/0x280 iocg_kick_delay+0x30b/0x310 ioc_timer_fn+0x2fb/0x1f80 __run_timer_base+0x1b6/0x250 ...

Avoid that undefined behavior by simply taking the "delay = 0" branch if the shift is too large.

I am not sure what the symptoms of an undefined value delay will be, but I suspect it could be more than a little annoying to debug.(CVE-2024-36916)

In the Linux kernel, the following vulnerability has been resolved:

fpga: manager: add owner module and take its refcount

The current implementation of the fpga manager assumes that the low-level module registers a driver for the parent device and uses its owner pointer to take the module's refcount. This approach is problematic since it can lead to a null pointer dereference while attempting to get the manager if the parent device does not have a driver.

To address this problem, add a module owner pointer to the fpga_manager struct and use it to take the module's refcount. Modify the functions for registering the manager to take an additional owner module parameter and rename them to avoid conflicts. Use…

Record: OESA-2025-1097
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-56687 5.5

Record: UBUNTU-CVE-2024-56687
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVSUSE-SU-2025:0289-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).
CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).
CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag…

Record: SUSE-SU-2025:0289-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0428-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235061).
CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'…

Record: SUSE-SU-2025:0428-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0499-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).
CVE-2025-21678: gtp: Destroy device along with udp socket's netns dismantle (bsc#1236698).
CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).
CVE-2025-21675: net/mlx5: Clear port select structure when fail to create (bsc#1236694).
CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).
CVE-2025-21670: vsock/bpf: return early if transport is not assigned (bsc#1236685).
CVE-2025-21669: vsock/virtio: discard packets if the transport changes (bsc#1236683).
CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (bsc#1236680).
CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).
CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).
CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).
CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).
CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).
CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
CVE-2025-21632: x86/fpu: Ensure shadow stack is active before 'getting' registers (bsc#1236106).
CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).
CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).
CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).
CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).
CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).
CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).
CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
CVE-2024-56763: tracing: Prevent bad count for…

Record: SUSE-SU-2025:0499-1
Updated: 2026-11-02

OSVSUSE-SU-2025:0557-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487).
CVE-2024-56610: kcsan: Turn…

Record: SUSE-SU-2025:0557-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20165-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20165-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20166-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20166-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20248-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20248-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20249-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
CVE-2024-53161:…

Record: SUSE-SU-2025:20249-1
Updated: 2026-11-02

OSVUSN-7310-1 No score

linux-oem-6.11 vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
ATA over ethernet (AOE) driver;
RAM backed block device driver;
Network block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DAX dirext access to differentiated memory framework;
Buffer Sharing and Synchronization framework;
EDAC drivers;
FireWire subsystem;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
IRQ chip drivers;
Mailbox framework;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
Virtio pmem driver;
NVME drivers;
Parport drivers;
PCI subsystem;
Alibaba DDR Sub-System Driveway PMU driver;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Powercap sysfs driver;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
USB Device Class drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Virtio drivers;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
NTFS3 file system;
Proc file system;
SMB network file system;
UBI file system;
BPF subsystem;
Network file system (NFS) superblock;
Virtio network driver;
Bluetooth subsystem;
Network traffic control;
Network sockets;
TCP network protocol;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure; -…

Record: USN-7310-1
Updated: 2026-11-03

OSVUSN-7449-1 No score

linux, linux-aws, linux-azure, linux-azure-6.8, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Compressed RAM block device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
UFS subsystem;
DesignWare USB3 driver;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
EROFS file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
StackDepot library;
Bluetooth subsystem;
IP tunnels definitions;
Netfilter;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure;
Signal handling mechanism;
Task handling mechanism;
Timer subsystem;
KUnit library;
Memory management;
9P file system network protocol;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
Packet sockets;
RxRPC session sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
Key management;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
MediaTek ASoC drivers;
QCOM ASoC drivers;
SoC audio core drivers;
STMicroelectronics SoC drivers;
USB sound devices; (CVE-2024-50288, CVE-2024-56568, CVE-2024-50280, CVE-2024-56677, CVE-2024-56620, CVE-2024-53108, CVE-2024-53115, CVE-2024-53061,…

Record: USN-7449-1
Updated: 2026-11-03

OSVUSN-7449-2 No score

linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Compressed RAM block device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
UFS subsystem;
DesignWare USB3 driver;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
EROFS file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
StackDepot library;
Bluetooth subsystem;
IP tunnels definitions;
Netfilter;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure;
Signal handling mechanism;
Task handling mechanism;
Timer subsystem;
KUnit library;
Memory management;
9P file system network protocol;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
Packet sockets;
RxRPC session sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
Key management;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
MediaTek ASoC drivers;
QCOM ASoC drivers;
SoC audio core drivers;
STMicroelectronics SoC drivers;
USB sound devices; (CVE-2022-49034, CVE-2024-56632, CVE-2024-53177, CVE-2024-56679, CVE-2024-48881, CVE-2024-56690, CVE-2024-50216, CVE-2024-50269,…

Record: USN-7449-2
Updated: 2026-11-03

OSVUSN-7450-1 No score

linux-gcp, linux-gke, linux-gkeop vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Compressed RAM block device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
UFS subsystem;
DesignWare USB3 driver;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
EROFS file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
StackDepot library;
Bluetooth subsystem;
IP tunnels definitions;
Netfilter;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure;
Signal handling mechanism;
Task handling mechanism;
Timer subsystem;
KUnit library;
Memory management;
9P file system network protocol;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
Packet sockets;
RxRPC session sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
Key management;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
MediaTek ASoC drivers;
QCOM ASoC drivers;
SoC audio core drivers;
STMicroelectronics SoC drivers;
USB sound devices; (CVE-2024-50051, CVE-2024-56546, CVE-2024-56551, CVE-2024-53236, CVE-2024-50244, CVE-2024-53043, CVE-2024-56694, CVE-2025-21700,…

Record: USN-7450-1
Updated: 2026-11-03

OSVUSN-7451-1 No score

linux-aws-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DAX dirext access to differentiated memory framework;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
Virtio pmem driver;
NVME drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
EROFS file system;
Ext4 file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
Network file system (NFS) superblock;
StackDepot library;
Bluetooth subsystem;
IP tunnels definitions;
Network namespace;
Netfilter;
Network traffic control;
Network sockets;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
Kernel thread helper (kthread);
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure;
Signal handling mechanism;
Task handling mechanism;
Timer subsystem;
KUnit library;
Maple Tree data structure library;
Memory management;
9P file system network protocol;
Ethernet bridge;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
Netlink;
Packet sockets;…

Record: USN-7451-1
Updated: 2026-11-03

OSVUSN-7452-1 No score

linux-gcp-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Compressed RAM block device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
UFS subsystem;
DesignWare USB3 driver;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
EROFS file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
StackDepot library;
Bluetooth subsystem;
IP tunnels definitions;
Netfilter;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure;
Signal handling mechanism;
Task handling mechanism;
Timer subsystem;
KUnit library;
Memory management;
9P file system network protocol;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
Packet sockets;
RxRPC session sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
Key management;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
MediaTek ASoC drivers;
QCOM ASoC drivers;
SoC audio core drivers;
STMicroelectronics SoC drivers;
USB sound devices; (CVE-2024-56724, CVE-2024-50108, CVE-2024-56631, CVE-2024-50236, CVE-2022-49034, CVE-2024-50133, CVE-2024-53108, CVE-2024-56605,…

Record: USN-7452-1
Updated: 2026-11-03

OSVUSN-7453-1 No score

linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Compressed RAM block device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Media staging drivers;
TCM subsystem;
UFS subsystem;
DesignWare USB3 driver;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
EROFS file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
StackDepot library;
Bluetooth subsystem;
IP tunnels definitions;
Netfilter;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure;
Signal handling mechanism;
Task handling mechanism;
Timer subsystem;
KUnit library;
Memory management;
9P file system network protocol;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IUCV driver;
MAC80211 subsystem;
Multipath TCP;
Packet sockets;
RxRPC session sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
Wireless networking;
eXpress Data Path;
XFRM subsystem;
Integrity Measurement Architecture(IMA) framework;
Key management;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
MediaTek ASoC drivers;
QCOM ASoC drivers;
SoC audio core drivers;
STMicroelectronics SoC drivers;
USB sound devices; (CVE-2024-53187, CVE-2024-50268, CVE-2024-53161, CVE-2024-56721, CVE-2024-53059, CVE-2024-53217, CVE-2022-49034, CVE-2024-53061,…

Record: USN-7453-1
Updated: 2026-11-03

OSVUSN-7468-1 No score

linux-azure-nvidia vulnerabilities

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
ATA over ethernet (AOE) driver;
RAM backed block device driver;
Network block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DAX dirext access to differentiated memory framework;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
iSCSI Boot Firmware Table Attributes driver;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
Virtio pmem driver;
NVME drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
USB Device Class drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system; …

Record: USN-7468-1
Updated: 2026-11-03

OSVUSN-7523-1 No score

linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Ublk userspace block driver;
Virtio block driver;
Compressed RAM block device driver;
Bluetooth drivers;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DAX dirext access to differentiated memory framework;
DMA engine subsystem;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
iSCSI Boot Firmware Table Attributes driver;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
Virtio pmem driver;
NVME drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TDX Guest driver;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
VLANs driver;
Kernel Samepage Merging mechanism;
Memory management;
Network file system (NFS) superblock;
Kernel stack handling interfaces;
StackDepot library;
Task handling mechanism;
userfaultfd() syscall;
Bluetooth subsystem;
IP tunnels definitions;
LAPB network protocol;
Network namespace;
Netfilter;
Network traffic control;
Network sockets;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
Control group (cgroup);
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
Kernel thread helper (kthread);
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure; -…

Record: USN-7523-1
Updated: 2026-11-03

OSVUSN-7524-1 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Ublk userspace block driver;
Virtio block driver;
Compressed RAM block device driver;
Bluetooth drivers;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DAX dirext access to differentiated memory framework;
DMA engine subsystem;
EDAC drivers;
ARM SCMI message protocol;
ARM SCPI message protocol;
EFI core;
iSCSI Boot Firmware Table Attributes driver;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
Virtio pmem driver;
NVME drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
StarFive reset controller drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
Xilinx SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
TDX Guest driver;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
EROFS file system;
Ext4 file system;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
DRM display driver;
BPF subsystem;
VLANs driver;
Kernel Samepage Merging mechanism;
Memory management;
Network file system (NFS) superblock;
Kernel stack handling interfaces;
StackDepot library;
Task handling mechanism;
userfaultfd() syscall;
Bluetooth subsystem;
IP tunnels definitions;
LAPB network protocol;
Network namespace;
Netfilter;
Network traffic control;
Network sockets;
Tracing infrastructure;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
IPC subsystem;
Control group (cgroup);
DMA mapping infrastructure;
Kernel fork() syscall;
KCSAN framework;
Kernel thread helper (kthread);
RCU subsystem;
Arbitrary resource management;
Scheduler infrastructure; -…

Record: USN-7524-1
Updated: 2026-11-03

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`linux-lts` Alpaquita:23	6.1.119-r0 up to 6.1.120-r0	6.1.120-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`Kernel` Linux	5.18.0 up to 6.1.120, 6.2.0 up to 6.6.64, 6.7.0 up to 6.11.11, 6.12.0 up to 6.12.2	6.1.1206.6.646.11.116.12.2
`linux` Debian:12	before 6.1.123-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 27 moreShow less 6.1.119-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.123-1
`linux` Debian:13	before 6.12.3-1	6.12.3-1
`linux` Debian:14	before 6.12.3-1	6.12.3-1
`linux-6.1` Debian:11 From an advisory covering 333 CVEs	before 6.1.128-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1	6.1.128-1~deb11u1
`kernel` openEuler:24.03-LTS-SP1 From an advisory covering 53 CVEs	before 6.6.0-76.0.0.80.oe2403sp1	6.6.0-76.0.0.80.oe2403sp1
`kernel` openEuler:24.03-LTS From an advisory covering 143 CVEs	before 6.6.0-76.0.0.69.oe2403	6.6.0-76.0.0.69.oe2403

Show 199 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 343 CVEs	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 343 CVEs	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 343 CVEs	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 343 CVEs	before 6.4.0-15061.12.coco15sp6.1	6.4.0-15061.12.coco15sp6.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 248 CVEs	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 248 CVEs	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 248 CVEs	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 248 CVEs	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 248 CVEs	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 248 CVEs	before 6.4.0-150600.8.26.1	6.4.0-150600.8.26.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1.150600.12.16.2	6.4.0-150600.23.38.1.150600.12.16.2
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-livepatch-SLE15-SP6_Update_8` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 257 CVEs	before 1-150600.13.3.2	1-150600.13.3.2
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1.150600.12.16.2	6.4.0-150600.23.38.1.150600.12.16.2
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 257 CVEs	before 6.4.0-150600.23.38.1	6.4.0-150600.23.38.1
`kernel-livepatch-SLE15-SP6-RT_Update_8` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 256 CVEs	before 1-150600.1.3.1	1-150600.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 256 CVEs	before 6.4.0-150600.10.26.1	6.4.0-150600.10.26.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 357 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 357 CVEs	before 6.4.0-24.1.21.4	6.4.0-24.1.21.4
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 357 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-livepatch-MICRO-6-0_Update_5` SUSE:Linux Micro 6.0 From an advisory covering 357 CVEs	before 1-1.2	1-1.2
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 357 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-livepatch-MICRO-6-0-RT_Update_5` SUSE:Linux Micro 6.0 From an advisory covering 610 CVEs	before 1-1.1	1-1.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 610 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 610 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 357 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 357 CVEs	before 6.4.0-24.1.21.4	6.4.0-24.1.21.4
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 357 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-livepatch-MICRO-6-0_Update_5` SUSE:Linux Micro 6.1 From an advisory covering 357 CVEs	before 1-1.2	1-1.2
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 357 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-livepatch-MICRO-6-0-RT_Update_5` SUSE:Linux Micro 6.1 From an advisory covering 610 CVEs	before 1-1.1	1-1.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 610 CVEs	before 6.4.0-25.1	6.4.0-25.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 610 CVEs	before 6.4.0-25.1	6.4.0-25.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-aws-6.8` Ubuntu:22.04:LTS	before 6.8.0-1027.29~22.04.1, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1 Show 9 moreShow less 6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.1	6.8.0-1027.29~22.04.1
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-6.8` Ubuntu:22.04:LTS	before 6.8.0-1027.32~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1 Show 8 moreShow less 6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.1	6.8.0-1027.32~22.04.1
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-gcp-6.8` Ubuntu:22.04:LTS	before 6.8.0-1028.30~22.04.1, plus listed versions 6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1 Show 11 moreShow less 6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.1	6.8.0-1028.30~22.04.1
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-hwe-6.8` Ubuntu:22.04:LTS	before 6.8.0-58.60~22.04.1, plus listed versions 6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1 Show 6 moreShow less 6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.1	6.8.0-58.60~22.04.1
`linux-ibm-6.8` Ubuntu:22.04:LTS	before 6.8.0-1024.24~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1 Show 7 moreShow less 6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.1	6.8.0-1024.24~22.04.1
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-lowlatency-hwe-6.8` Ubuntu:22.04:LTS	before 6.8.0-58.60.1~22.04.1, plus listed versions 6.8.0-38.38.1~22.04.26.8.0-40.40.1~22.04.16.8.0-44.44.1~22.04.16.8.0-45.45.1~22.04.16.8.0-47.47.1~22.04.1 Show 9 moreShow less 6.8.0-48.48.3~22.04.16.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-54.56.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.1	6.8.0-58.60.1~22.04.1
`linux-nvidia-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15	None known
`linux-nvidia-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15 Show 6 moreShow less 6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25	None known
`linux-nvidia-6.8` Ubuntu:22.04:LTS	before 6.8.0-1026.29~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1 Show 12 moreShow less 6.8.0-1013.14~22.04.16.8.0-1014.15~22.04.16.8.0-1015.16~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1022.25~22.04.26.8.0-1023.26~22.04.16.8.0-1024.27~22.04.16.8.0-1025.28~22.04.1	6.8.0-1026.29~22.04.1
`linux-oem-5.17` Ubuntu:22.04:LTS	All versions, plus listed versions 5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13 Show 21 moreShow less 5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36	None known
`linux-oem-6.0` Ubuntu:22.04:LTS	All versions, plus listed versions 6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10 Show 11 moreShow less 6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21	None known
`linux-oem-6.1` Ubuntu:22.04:LTS	All versions, plus listed versions 6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9 Show 22 moreShow less 6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36	None known
`linux-oem-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8 Show 14 moreShow less 6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28	None known
`linux-oracle-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1 Show 8 moreShow less 6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1	None known
`linux-oracle-6.8` Ubuntu:22.04:LTS	before 6.8.0-1024.25~22.04.1, plus listed versions 6.8.0-1006.6~22.04.36.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1 Show 11 moreShow less 6.8.0-1013.13~22.04.16.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.17~22.04.16.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.20~22.04.16.8.0-1020.21~22.04.16.8.0-1021.22~22.04.16.8.0-1022.23~22.04.16.8.0-1023.24~22.04.1	6.8.0-1024.25~22.04.1
`linux-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1032.35	None known
`linux-riscv` Ubuntu:22.04:LTS	All versions, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4 Show 18 moreShow less 5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32	None known
`linux-riscv-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1	None known
`linux-riscv-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1 Show 5 moreShow less 6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-riscv-6.8` Ubuntu:22.04:LTS	before 6.8.0-58.60.1~22.04.1, plus listed versions 6.8.0-38.38.1~22.04.16.8.0-39.39.1~22.04.16.8.0-40.40.1~22.04.16.8.0-41.41.1~22.04.16.8.0-44.44.1~22.04.1 Show 10 moreShow less 6.8.0-47.47.1~22.04.16.8.0-48.48.1~22.04.26.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-53.55.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.1	6.8.0-58.60.1~22.04.1
`linux-starfive-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1	None known
`linux-starfive-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1	None known
`linux-starfive-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1 Show 6 moreShow less 6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.16.5.0-1017.18~22.04.16.5.0-1018.19~22.04.1	None known
`linux-realtime-6.8` Ubuntu:Pro:Realtime:22.04:LTS	before 6.8.1-1020.21~22.04.1, plus listed versions 6.8.1-1004.4~22.04.16.8.1-1005.5~22.04.26.8.1-1006.6~22.04.16.8.1-1007.7~22.04.16.8.1-1008.8~22.04.1 Show 11 moreShow less 6.8.1-1009.9~22.04.16.8.1-1010.10~22.04.16.8.1-1011.11~22.04.16.8.1-1012.12~22.04.16.8.1-1013.14~22.04.16.8.1-1014.15~22.04.16.8.1-1015.16~22.04.16.8.1-1016.17~22.04.16.8.1-1017.18~22.04.16.8.1-1018.19~22.04.16.8.1-1019.20~22.04.1	6.8.1-1020.21~22.04.1
`linux` Ubuntu:24.04:LTS	before 6.8.0-58.60, plus listed versions 6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22 Show 21 moreShow less 6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.476.8.0-48.486.8.0-49.496.8.0-50.516.8.0-51.526.8.0-52.536.8.0-53.556.8.0-54.566.8.0-55.576.8.0-56.586.8.0-57.59	6.8.0-58.60
`linux-aws` Ubuntu:24.04:LTS	before 6.8.0-1027.29, plus listed versions 6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8 Show 17 moreShow less 6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1023.256.8.0-1024.266.8.0-1025.276.8.0-1026.28	6.8.0-1027.29
`linux-azure` Ubuntu:24.04:LTS	before 6.8.0-1027.32, plus listed versions 6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6 Show 15 moreShow less 6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.206.8.0-1018.216.8.0-1020.236.8.0-1021.256.8.0-1025.306.8.0-1026.31	6.8.0-1027.32
`linux-azure-6.11` Ubuntu:24.04:LTS	before 6.11.0-1012.12~24.04.1, plus listed versions 6.11.0-1008.8~24.04.1	6.11.0-1012.12~24.04.1
`linux-azure-nvidia` Ubuntu:24.04:LTS	before 6.8.0-1014.15, plus listed versions 6.8.0-1013.14	6.8.0-1014.15
`linux-gcp` Ubuntu:24.04:LTS	before 6.8.0-1028.30, plus listed versions 6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6 Show 19 moreShow less 6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.29	6.8.0-1028.30
`linux-gcp-6.11` Ubuntu:24.04:LTS	before 6.11.0-1011.11~24.04.1, plus listed versions 6.11.0-1006.6~24.04.2	6.11.0-1011.11~24.04.1
`linux-gke` Ubuntu:24.04:LTS	before 6.8.0-1023.27, plus listed versions 6.8.0-1003.56.8.0-1004.76.8.0-1005.86.8.0-1006.96.8.0-1007.10 Show 14 moreShow less 6.8.0-1008.116.8.0-1009.126.8.0-1010.136.8.0-1011.146.8.0-1012.156.8.0-1013.176.8.0-1014.186.8.0-1015.196.8.0-1016.206.8.0-1017.216.8.0-1019.236.8.0-1020.246.8.0-1021.256.8.0-1022.26	6.8.0-1023.27
`linux-gkeop` Ubuntu:24.04:LTS	before 6.8.0-1010.12, plus listed versions 6.8.0-1001.36.8.0-1002.46.8.0-1003.56.8.0-1004.66.8.0-1006.86.8.0-1007.96.8.0-1008.106.8.0-1009.11	6.8.0-1010.12
`linux-ibm` Ubuntu:24.04:LTS	before 6.8.0-1024.24, plus listed versions 6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5 Show 16 moreShow less 6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.156.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1022.226.8.0-1023.23	6.8.0-1024.24
`linux-lowlatency` Ubuntu:24.04:LTS	before 6.8.0-58.60.1, plus listed versions 6.5.0-9.9.16.6.0-14.14.16.8.0-7.7.16.8.0-25.25.36.8.0-28.28.1 Show 20 moreShow less 6.8.0-31.31.16.8.0-35.35.16.8.0-36.36.16.8.0-38.38.16.8.0-39.39.16.8.0-40.40.16.8.0-41.41.16.8.0-44.44.16.8.0-45.45.16.8.0-47.47.16.8.0-48.48.36.8.0-49.49.16.8.0-50.51.16.8.0-51.52.16.8.0-52.53.16.8.0-53.55.26.8.0-54.56.16.8.0-55.57.16.8.0-56.58.16.8.0-57.59.1	6.8.0-58.60.1
`linux-nvidia` Ubuntu:24.04:LTS	before 6.8.0-1026.29, plus listed versions 6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.11 Show 13 moreShow less 6.8.0-1012.126.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1022.256.8.0-1023.266.8.0-1024.276.8.0-1025.28	6.8.0-1026.29
`linux-nvidia-6.11` Ubuntu:24.04:LTS	before 6.11.0-1007.7, plus listed versions 6.11.0-1002.26.11.0-1003.3	6.11.0-1007.7
`linux-nvidia-lowlatency` Ubuntu:24.04:LTS	before 6.8.0-1026.29.1, plus listed versions 6.8.0-1009.9.16.8.0-1011.11.16.8.0-1012.12.16.8.0-1013.14.16.8.0-1014.15.1 Show 10 moreShow less 6.8.0-1015.16.16.8.0-1017.19.16.8.0-1018.20.16.8.0-1019.21.16.8.0-1020.22.16.8.0-1021.23.16.8.0-1022.25.26.8.0-1023.26.16.8.0-1024.27.16.8.0-1025.28.1	6.8.0-1026.29.1
`linux-nvidia-tegra` Ubuntu:24.04:LTS	before 6.8.0-1008.8, plus listed versions 6.8.0-1003.36.8.0-1004.4	6.8.0-1008.8
`linux-oem-6.11` Ubuntu:24.04:LTS	before 6.11.0-1015.15, plus listed versions 6.11.0-1007.76.11.0-1008.86.11.0-1009.96.11.0-1010.106.11.0-1011.116.11.0-1012.126.11.0-1013.13	6.11.0-1015.15
`linux-oem-6.8` Ubuntu:24.04:LTS	before 6.8.0-1026.26, plus listed versions 6.8.0-1003.36.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.7 Show 14 moreShow less 6.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1020.206.8.0-1024.246.8.0-1025.25	6.8.0-1026.26
`linux-oracle` Ubuntu:24.04:LTS	before 6.8.0-1024.25, plus listed versions 6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.5 Show 16 moreShow less 6.8.0-1006.66.8.0-1008.86.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.196.8.0-1019.206.8.0-1020.216.8.0-1021.226.8.0-1022.236.8.0-1023.24	6.8.0-1024.25
`linux-raspi` Ubuntu:24.04:LTS	before 6.8.0-1028.32, plus listed versions 6.5.0-1005.76.7.0-1001.16.8.0-1001.16.8.0-1002.26.8.0-1003.3 Show 18 moreShow less 6.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.236.8.0-1020.246.8.0-1024.28	6.8.0-1028.32
`linux-raspi-realtime` Ubuntu:24.04:LTS	All versions, plus listed versions 6.8.0-2019.20	None known
`linux-realtime` Ubuntu:24.04:LTS	All versions, plus listed versions 6.8.1-1015.16	None known
`linux-riscv` Ubuntu:24.04:LTS	before 6.8.0-58.60.1, plus listed versions 6.5.0-9.9.16.8.0-20.20.16.8.0-28.28.16.8.0-31.31.16.8.0-35.35.1 Show 16 moreShow less 6.8.0-36.36.16.8.0-38.38.16.8.0-39.39.16.8.0-40.40.16.8.0-41.41.16.8.0-44.44.16.8.0-47.47.16.8.0-48.48.16.8.0-49.49.16.8.0-50.51.16.8.0-51.52.16.8.0-52.53.16.8.0-53.55.16.8.0-55.57.16.8.0-56.58.16.8.0-57.59.1	6.8.0-58.60.1
`linux-xilinx` Ubuntu:24.04:LTS	before 6.8.0-1017.18, plus listed versions 6.8.0-1008.96.8.0-1009.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.16	6.8.0-1017.18
`linux-raspi-realtime` Ubuntu:Pro:Realtime:24.04:LTS	before 6.8.0-2023.24, plus listed versions 6.7.0-2001.16.8.0-2001.16.8.0-2002.26.8.0-2004.46.8.0-2005.5 Show 15 moreShow less 6.8.0-2006.66.8.0-2007.76.8.0-2008.86.8.0-2009.96.8.0-2010.106.8.0-2011.116.8.0-2012.126.8.0-2013.146.8.0-2014.156.8.0-2015.166.8.0-2016.176.8.0-2017.186.8.0-2018.196.8.0-2019.206.8.0-2022.23	6.8.0-2023.24
`linux-realtime` Ubuntu:Pro:Realtime:24.04:LTS	before 6.8.1-1020.21, plus listed versions 6.8.0-1008.196.8.1-1001.16.8.1-1002.26.8.1-1003.36.8.1-1004.4 Show 15 moreShow less 6.8.1-1005.56.8.1-1006.66.8.1-1007.76.8.1-1008.86.8.1-1009.96.8.1-1010.106.8.1-1011.116.8.1-1012.126.8.1-1013.146.8.1-1014.156.8.1-1015.166.8.1-1016.176.8.1-1017.186.8.1-1018.196.8.1-1019.20	6.8.1-1020.21
`linux-fips` Ubuntu:Pro:FIPS-updates:24.04:LTS	before 6.8.0-78.78+fips1, plus listed versions 6.8.0-38.38+fips4	6.8.0-78.78+fips1
`linux-oem-6.11` Ubuntu:24.04:LTS From an advisory covering 730 CVEs	before 6.11.0-1015.15, plus listed versions 6.11.0-1007.76.11.0-1008.86.11.0-1009.96.11.0-1010.106.11.0-1011.116.11.0-1012.126.11.0-1013.13	6.11.0-1015.15
`linux-azure-6.8` Ubuntu:22.04:LTS From an advisory covering 461 CVEs	before 6.8.0-1027.32~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1 Show 8 moreShow less 6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.1	6.8.0-1027.32~22.04.1
`linux-lowlatency-hwe-6.8` Ubuntu:22.04:LTS From an advisory covering 461 CVEs	before 6.8.0-58.60.1~22.04.1, plus listed versions 6.8.0-38.38.1~22.04.26.8.0-40.40.1~22.04.16.8.0-44.44.1~22.04.16.8.0-45.45.1~22.04.16.8.0-47.47.1~22.04.1 Show 9 moreShow less 6.8.0-48.48.3~22.04.16.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-54.56.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.1	6.8.0-58.60.1~22.04.1
`linux-nvidia-6.8` Ubuntu:22.04:LTS From an advisory covering 461 CVEs	before 6.8.0-1026.29~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1 Show 12 moreShow less 6.8.0-1013.14~22.04.16.8.0-1014.15~22.04.16.8.0-1015.16~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1022.25~22.04.26.8.0-1023.26~22.04.16.8.0-1024.27~22.04.16.8.0-1025.28~22.04.1	6.8.0-1026.29~22.04.1
`linux-oracle-6.8` Ubuntu:22.04:LTS From an advisory covering 461 CVEs	before 6.8.0-1024.25~22.04.1, plus listed versions 6.8.0-1006.6~22.04.36.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1 Show 11 moreShow less 6.8.0-1013.13~22.04.16.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.17~22.04.16.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.20~22.04.16.8.0-1020.21~22.04.16.8.0-1021.22~22.04.16.8.0-1022.23~22.04.16.8.0-1023.24~22.04.1	6.8.0-1024.25~22.04.1
`linux` Ubuntu:24.04:LTS From an advisory covering 461 CVEs	before 6.8.0-58.60, plus listed versions 6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22 Show 21 moreShow less 6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.476.8.0-48.486.8.0-49.496.8.0-50.516.8.0-51.526.8.0-52.536.8.0-53.556.8.0-54.566.8.0-55.576.8.0-56.586.8.0-57.59	6.8.0-58.60
`linux-aws` Ubuntu:24.04:LTS From an advisory covering 461 CVEs	before 6.8.0-1027.29, plus listed versions 6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8 Show 17 moreShow less 6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1023.256.8.0-1024.266.8.0-1025.276.8.0-1026.28	6.8.0-1027.29
`linux-azure` Ubuntu:24.04:LTS From an advisory covering 461 CVEs	before 6.8.0-1027.32, plus listed versions 6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6 Show 15 moreShow less 6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.206.8.0-1018.216.8.0-1020.236.8.0-1021.256.8.0-1025.306.8.0-1026.31	6.8.0-1027.32
`linux-ibm` Ubuntu:24.04:LTS From an advisory covering 461 CVEs	before 6.8.0-1024.24, plus listed versions 6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5 Show 16 moreShow less 6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.156.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1022.226.8.0-1023.23	6.8.0-1024.24
`linux-lowlatency` Ubuntu:24.04:LTS From an advisory covering 461 CVEs	before 6.8.0-58.60.1, plus listed versions 6.5.0-9.9.16.6.0-14.14.16.8.0-7.7.16.8.0-25.25.36.8.0-28.28.1 Show 20 moreShow less 6.8.0-31.31.16.8.0-35.35.16.8.0-36.36.16.8.0-38.38.16.8.0-39.39.16.8.0-40.40.16.8.0-41.41.16.8.0-44.44.16.8.0-45.45.16.8.0-47.47.16.8.0-48.48.36.8.0-49.49.16.8.0-50.51.16.8.0-51.52.16.8.0-52.53.16.8.0-53.55.26.8.0-54.56.16.8.0-55.57.16.8.0-56.58.16.8.0-57.59.1	6.8.0-58.60.1
`linux-nvidia` Ubuntu:24.04:LTS From an advisory covering 461 CVEs	before 6.8.0-1026.29, plus listed versions 6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.11 Show 13 moreShow less 6.8.0-1012.126.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1022.256.8.0-1023.266.8.0-1024.276.8.0-1025.28	6.8.0-1026.29
`linux-nvidia-lowlatency` Ubuntu:24.04:LTS From an advisory covering 461 CVEs	before 6.8.0-1026.29.1, plus listed versions 6.8.0-1009.9.16.8.0-1011.11.16.8.0-1012.12.16.8.0-1013.14.16.8.0-1014.15.1 Show 10 moreShow less 6.8.0-1015.16.16.8.0-1017.19.16.8.0-1018.20.16.8.0-1019.21.16.8.0-1020.22.16.8.0-1021.23.16.8.0-1022.25.26.8.0-1023.26.16.8.0-1024.27.16.8.0-1025.28.1	6.8.0-1026.29.1
`linux-oem-6.8` Ubuntu:24.04:LTS From an advisory covering 461 CVEs	before 6.8.0-1026.26, plus listed versions 6.8.0-1003.36.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.7 Show 14 moreShow less 6.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1020.206.8.0-1024.246.8.0-1025.25	6.8.0-1026.26
`linux-oracle` Ubuntu:24.04:LTS From an advisory covering 461 CVEs	before 6.8.0-1024.25, plus listed versions 6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.5 Show 16 moreShow less 6.8.0-1006.66.8.0-1008.86.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.196.8.0-1019.206.8.0-1020.216.8.0-1021.226.8.0-1022.236.8.0-1023.24	6.8.0-1024.25
`linux-hwe-6.8` Ubuntu:22.04:LTS From an advisory covering 461 CVEs	before 6.8.0-58.60~22.04.1, plus listed versions 6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1 Show 6 moreShow less 6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.1	6.8.0-58.60~22.04.1
`linux-gcp` Ubuntu:24.04:LTS From an advisory covering 460 CVEs	before 6.8.0-1028.30, plus listed versions 6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6 Show 19 moreShow less 6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.29	6.8.0-1028.30
`linux-gke` Ubuntu:24.04:LTS From an advisory covering 460 CVEs	before 6.8.0-1023.27, plus listed versions 6.8.0-1003.56.8.0-1004.76.8.0-1005.86.8.0-1006.96.8.0-1007.10 Show 14 moreShow less 6.8.0-1008.116.8.0-1009.126.8.0-1010.136.8.0-1011.146.8.0-1012.156.8.0-1013.176.8.0-1014.186.8.0-1015.196.8.0-1016.206.8.0-1017.216.8.0-1019.236.8.0-1020.246.8.0-1021.256.8.0-1022.26	6.8.0-1023.27
`linux-gkeop` Ubuntu:24.04:LTS From an advisory covering 460 CVEs	before 6.8.0-1010.12, plus listed versions 6.8.0-1001.36.8.0-1002.46.8.0-1003.56.8.0-1004.66.8.0-1006.86.8.0-1007.96.8.0-1008.106.8.0-1009.11	6.8.0-1010.12
`linux-aws-6.8` Ubuntu:22.04:LTS From an advisory covering 577 CVEs	before 6.8.0-1027.29~22.04.1, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1 Show 9 moreShow less 6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.1	6.8.0-1027.29~22.04.1
`linux-gcp-6.8` Ubuntu:22.04:LTS From an advisory covering 460 CVEs	before 6.8.0-1028.30~22.04.1, plus listed versions 6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1 Show 11 moreShow less 6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.1	6.8.0-1028.30~22.04.1
`linux-realtime` Ubuntu:Pro:Realtime:24.04:LTS From an advisory covering 461 CVEs	before 6.8.1-1020.21, plus listed versions 6.8.0-1008.196.8.1-1001.16.8.1-1002.26.8.1-1003.36.8.1-1004.4 Show 15 moreShow less 6.8.1-1005.56.8.1-1006.66.8.1-1007.76.8.1-1008.86.8.1-1009.96.8.1-1010.106.8.1-1011.116.8.1-1012.126.8.1-1013.146.8.1-1014.156.8.1-1015.166.8.1-1016.176.8.1-1017.186.8.1-1018.196.8.1-1019.20	6.8.1-1020.21
`linux-azure-nvidia` Ubuntu:24.04:LTS From an advisory covering 739 CVEs	before 6.8.0-1014.15, plus listed versions 6.8.0-1013.14	6.8.0-1014.15
`linux-raspi-realtime` Ubuntu:Pro:Realtime:24.04:LTS From an advisory covering 704 CVEs	before 6.8.0-2023.24, plus listed versions 6.7.0-2001.16.8.0-2001.16.8.0-2002.26.8.0-2004.46.8.0-2005.5 Show 15 moreShow less 6.8.0-2006.66.8.0-2007.76.8.0-2008.86.8.0-2009.96.8.0-2010.106.8.0-2011.116.8.0-2012.126.8.0-2013.146.8.0-2014.156.8.0-2015.166.8.0-2016.176.8.0-2017.186.8.0-2018.196.8.0-2019.206.8.0-2022.23	6.8.0-2023.24
`linux-raspi` Ubuntu:24.04:LTS From an advisory covering 705 CVEs	before 6.8.0-1028.32, plus listed versions 6.5.0-1005.76.7.0-1001.16.8.0-1001.16.8.0-1002.26.8.0-1003.3 Show 18 moreShow less 6.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.236.8.0-1020.246.8.0-1024.28	6.8.0-1028.32

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-56687 is a medium vulnerability (CVSS 5.5) in Linux, published December 28, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.16%, the 5th percentile. Fixed in linux-lts 6.1.120-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 29 versions, 2,430 references and the rest of 20 source descriptions. The JSON record has them.