CVE-2024-58017

In the Linux kernel, the following vulnerability has been resolved: printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX Shifting 1 << 31 on a 32-bit int causes signed integer overflow, which leads to undefined behavior. To prevent this, cast 1 to u32 before performing the shift, ensuring well-defined behavior. This change explicitly avoids any potential overflow by ensuring that the shift occurs on an unsigned 32-bit integer.

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans

There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size. This would make xlate_pos negative.

[ 23.734156] switchtec switchtec0: MW 0: part 0 addr 0x0000000000000000 size 0x0000000000000000 [ 23.734158] ================================================================================ [ 23.734172] UBSAN: shift-out-of-bounds in drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7 [ 23.734418] shift exponent -1 is negative

Ensuring xlate_pos is a positive or zero before BIT.(CVE-2023-53034)

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()

The "submit->cmd[i].size" and "submit->cmd[i].offset" variables are u32 values that come from the user via the submit_lookup_cmds() function. This addition could lead to an integer wrapping bug so use size_add() to prevent that.

Patchwork: https://patchwork.freedesktop.org/patch/624696/(CVE-2024-52559)

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()

Extended the mi_enum_attr() function interface with an additional parameter, struct ntfs_inode *ni, to allow marking the inode as bad as soon as an error is detected.(CVE-2024-52560)

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat/qat_4xxx - fix off by one in uof_get_name()

The fw_objs[] array has "num_objs" elements so the > needs to be >= to prevent an out of bounds read.(CVE-2024-53162)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix use-after-free of signing key

Customers have reported use-after-free in @ses->auth_key.response with SMB2.1 + sign mounts which occurs due to following race:

task A task B cifs_mount() dfs_mount_share() get_session() cifs_mount_get_session() cifs_send_recv() cifs_get_smb_ses() compound_send_recv() cifs_setup_session() smb2_setup_request() kfree_sensitive() smb2_calc_signature() crypto_shash_setkey() UAF

Fix this by ensuring that we have a valid @ses->auth_key.response by checking whether @ses->ses_status is SES_GOOD or SES_EXITING with @ses->ses_lock held. After commit 24a9799aa8ef ("smb: client: fix UAF in smb2_reconnect_server()"), we made sure to call ->logoff() only when @ses was known to be good (e.g. valid ->auth_key.response), so it's safe to access signing key when @ses->ses_status == SES_EXITING.(CVE-2024-53179)

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: bsg: Set bsg_queue to NULL after removal

Currently, this does not cause any issues, but I believe it is necessary to set bsg_queue to NULL after removing it to prevent potential use-after-free (UAF) access.(CVE-2024-54458)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Play nice with protected guests in complete_hypercall_exit()

Use is_64_bit_hypercall() instead of is_64_bit_mode() to detect a 64-bit hypercall when completing said hypercall. For guests with protected state, e.g. SEV-ES and SEV-SNP, KVM must assume the hypercall was made in 64-bit mode as the vCPU state needed to detect 64-bit mode is unavailable.

Hacking the sev_smoke_test selftest to generate a KVM_HC_MAP_GPA_RANGE hypercall via VMGEXIT trips the WARN:

------------[ cut here ]------------ WARNING: CPU: 273 PID: 326626 at arch/x86/kvm/x86.h:180 complete_hypercall_exit+0x44/0xe0 [kvm] Modules linked in: kvm_amd kvm ... [last unloaded: kvm] CPU: 273 UID: 0 PID: 326626 Comm: sev_smoke_test Not tainted 6.12.0-smp--392e932fa0f3-feat…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans

There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size. This would make xlate_pos negative.

[ 23.734156] switchtec switchtec0: MW 0: part 0 addr 0x0000000000000000 size 0x0000000000000000 [ 23.734158] ================================================================================ [ 23.734172] UBSAN: shift-out-of-bounds in drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7 [ 23.734418] shift exponent -1 is negative

Ensuring xlate_pos is a positive or zero before BIT.(CVE-2023-53034)

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to shrink read extent node in batches

We use rwlock to protect core structure data of extent tree during its shrink, however, if there is a huge number of extent nodes in extent tree, during shrink of extent tree, it may hold rwlock for a very long time, which may trigger kernel hang issue.

This patch fixes to shrink read extent node in batches, so that, critical region of the rwlock can be shrunk to avoid its extreme long time hold.(CVE-2024-41935)

In the Linux kernel, the following vulnerability has been resolved:

vrf: revert "vrf: Remove unnecessary RCU-bh critical section"

This reverts commit 504fc6f4f7f681d2a03aa5f68aad549d90eab853.

dev_queue_xmit_nit is expected to be called with BH disabled. __dev_queue_xmit has the following:

    /* Disable soft irqs for various locks below. Also
     * stops preemption for RCU.
     */
    rcu_read_lock_bh();

VRF must follow this invariant. The referenced commit removed this protection. Which triggered a lockdep warning:

================================
WARNING: inconsistent lock state
6.11.0 #1 Tainted: G        W
--------------------------------
inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage.
btserver/134819 [HC0[0]:SC0[0]:HE1:SE1] takes:
ffff8882da30c118 (rlock-AF_PACKET){+.?.}-{2:2}, at: tpacket_rcv+0x863/0x3b30
{IN-SOFTIRQ-W} state was registered at:
  lock_acquire+0x19a/0x4f0
  _raw_spin_lock+0x27/0x40
  packet_rcv+0xa33/0x1320
  __netif_receive_skb_core.constprop.0+0xcb0/0x3a90
  __netif_receive_skb_list_core+0x2c9/0x890
  netif_receive_skb_list_internal+0x610/0xcc0
      [...]

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(rlock-AF_PACKET);
  <Interrupt>
    lock(rlock-AF_PACKET);

 *** DEADLOCK ***

Call Trace:
 <TASK>
 dump_stack_lvl+0x73/0xa0
 mark_lock+0x102e/0x16b0
 __lock_acquire+0x9ae/0x6170
 lock_acquire+0x19a/0x4f0
 _raw_spin_lock+0x27/0x40
 tpacket_rcv+0x863/0x3b30
 dev_queue_xmit_nit+0x709/0xa40
 vrf_finish_direct+0x26e/0x340 [vrf]
 vrf_l3_out+0x5f4/0xe80 [vrf]
 __ip_local_out+0x51e/0x7a0
      [...](CVE-2024-49980)

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()

The "submit->cmd[i].size" and "submit->cmd[i].offset" variables are u32 values that come from the user via the submit_lookup_cmds() function. This addition could lead to an integer wrapping bug so use size_add() to prevent that.

Patchwork: https://patchwork.freedesktop.org/patch/624696/(CVE-2024-52559)

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()

Extended the mi_enum_attr() function interface with an additional parameter, struct ntfs_inode *ni, to allow marking the inode as bad as soon as an error is detected.(CVE-2024-52560)

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat/qat_4xxx - fix off by one in uof_get_name()

The fw_objs[] array has "num_objs" elements so the > needs to be >= to…

Root has patched CVE-2024-58017 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

In the Linux kernel, the following vulnerability has been resolved: printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX Shifting 1 << 31 on a 32-bit int causes signed integer overflow, which leads to undefined behavior. To prevent this, cast 1 to u32 before performing the shift, ensuring well-defined behavior. This change explicitly avoids any potential overflow by ensuring that the shift occurs on an unsigned 32-bit integer.

• sctp: sysctl: auth_enable: avoid using current->nsproxy
• sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy {CVE-2025-21640}
• bpf: Use preempt_count() directly in bpf_send_signal_common()
• Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy"
• jfs: fix slab-out-of-bounds read in ea_get()
• serial: 8250_dma: terminate correct DMA in tx_dma_flush()
• Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy"
• net: usb: usbnet: restore usb%d name exception for local mac addresses
• vlan: fix memory leak in vlan_newlink() {CVE-2022-49636}
• rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity
• LTS tag: v5.4.291
• eeprom: digsy_mtc: Make GPIO lookup table match the device
• slimbus: messaging: Free transaction ID in delayed interrupt scenario {CVE-2025-21914}
• intel_th: pci: Add Panther Lake-P/U support
• intel_th: pci: Add Panther Lake-H support
• intel_th: pci: Add Arrow Lake support
• Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
• xhci: pci: Fix indentation in the PCI device ID definitions
• usb: gadget: Check bmAttributes only if configuration is valid
• usb: gadget: Fix setting self-powered state on suspend
• usb: gadget: Set self-powered based on MaxPower and bmAttributes
• usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
• usb: typec: ucsi: increase timeout for PPM reset operations
• usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916}
• usb: renesas_usbhs: Flush the notify_hotplug_work {CVE-2025-21917}
• usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
• usb: renesas_usbhs: Use devm_usb_get_phy()
• usb: renesas_usbhs: Call clk_put()
• Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
• gpio: rcar: Fix missing of_node_put() call
• net: ipv6: fix missing dst ref drop in ila lwtunnel
• net: ipv6: fix dst ref loop in ila lwtunnel
• net-timestamp: support TCP GSO case for a few missing flags
• vlan: enforce underlying device type {CVE-2025-21920}
• ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922}
• be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
• drm/sched: Fix preprocessor guard
• hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
• llc: do not use skb_get() before dev_queue_xmit() {CVE-2025-21925}
• hwmon: (ad7314) Validate leading zero bits and return error
• hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
• hwmon: (pmbus) Initialise page count in pmbus_identify()
• caif_virtio: fix wrong pointer check in cfv_probe() {CVE-2025-21904}
• net: gso: fix ownership in __udp_gso_segment {CVE-2025-21926}
• HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
• HID: google: fix unused variable warning under !CONFIG_ACPI
• wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905}
• mm/page_alloc: fix uninitialized variable
• rapidio: fix an API misues when rio_add_net() fails {CVE-2025-21934}
• rapidio: add check for rio_add_net() in rio_scan_alloc_net()
• wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
• wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910}
• x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
• x86/cpu: Validate CPUID leaf 0x2 EDX output
• x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
• platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
• drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
• ALSA: hda/realtek: update ALC222 depop optimize
• ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
• HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948}
• Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
• drm/amdgpu: disable BAR resize on Dell G5 SE
• drm/amdgpu: Check extended configuration space register when system uses large bar
• drm/amdgpu: skip BAR resizing if the bios already…

• rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
• xfrm: esp: avoid in-place decrypt on shared skb frags
• clk: Fix clk_hw_get_clk() when dev is NULL {CVE-2022-49187}
• x86/sgx: Add overflow check in sgx_validate_offset_length() {CVE-2022-49785}
• ext4: init quota for 'old.inode' in 'ext4_rename' {CVE-2022-50346}
• skbuff: Account for tail adjustment during pull operations {CVE-2022-50365}
• net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory {CVE-2022-50409}
• scsi: qla2xxx: Delay module unload while fabric scan in progress {CVE-2025-71235}
• HID: alps: fix NULL pointer dereference in alps_raw_event() {CVE-2026-31625}
• rxrpc: fix reference count leak in rxrpc_server_keyring() {CVE-2026-31634}
• drm/i915/gt: Check set_default_submission() before deferencing {CVE-2026-31540}
• ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects {CVE-2023-54010}
• drm/amdgpu: fix the waring dereferencing hive {CVE-2024-46805}
• drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func {CVE-2024-49911}
• tracing: Prevent bad count for tracing_cpumask_write {CVE-2024-56763}
• HID: wacom: fix when get product name maybe null pointer {CVE-2024-56629}
• thermal: int340x: Add NULL check for adev {CVE-2025-23136}
• wifi: mac80211: Purge vif txq in ieee80211_do_stop() {CVE-2025-37794}
• Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb {CVE-2026-31510}
• wifi: cfg80211: ocb: don't leave if not joined {CVE-2023-53992}
• mmc: core: Fix kernel panic when remove non-standard SDIO card {CVE-2022-50640}
• EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() {CVE-2022-50645}
• serial: amba-pl011: avoid SBSA UART accessing DMACR register {CVE-2022-50625}
• inet_diag: Initialize pad field in struct inet_diag_req_v2 {CVE-2024-42106}
• regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt {CVE-2022-49481}
• net/core: Fix ETH_P_1588 flow dissector {CVE-2023-52580}
• mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() {CVE-2023-52560}
• af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg {CVE-2024-38596}
• drm/amd/display: Implement bounds check for stream encoder creation in DCN301 {CVE-2024-26660}
• block: prevent division by zero in blk_rq_stat_sum() {CVE-2024-35925}
• netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() {CVE-2024-36286}
• tipc: fix a possible memleak in tipc_buf_append {CVE-2024-36954}
• ipv6: prevent possible NULL deref in fib6_nh_init() {CVE-2024-40961}
• pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER {CVE-2024-42090}
• ipv6: prevent possible NULL dereference in rt6_probe() {CVE-2024-40960}
• drm/radeon: check bo_va->bo is non-NULL before using it {CVE-2024-41060}
• dma: fix call order in dmam_free_coherent {CVE-2024-43856}
• scsi: qla2xxx: Fix for possible memory corruption {CVE-2024-42288}
• ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt {CVE-2024-26774}
• netfilter: flowtable: incorrect pppoe tuple {CVE-2024-27015}
• bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() {CVE-2024-40919}
• Bluetooth: btintel: Fix null ptr deref in btintel_read_version {CVE-2024-35933}
• netdevsim: prevent bad user input in nsim_dev_health_break_write() {CVE-2024-56716}
• net/mlx5e: CT: Fix null-ptr-deref in add rule err flow {CVE-2024-53120}
• EDAC/bluefield: Fix potential integer overflow {CVE-2024-53161}
• NFSD: Prevent NULL dereference in nfsd4_process_cb_update() {CVE-2024-53217}
• ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() {CVE-2024-50304}
• blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race {CVE-2024-50082}
• drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() {CVE-2025-21996}
• HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948}
• filemap: Fix bounds checking in filemap_read()…

• tracing: Verify event formats that have "%*p.." {CVE-2025-37938}
• HID: pidff: Fix null pointer dereference in pidff_find_fields {CVE-2025-37862}
• scsi: st: Fix array overflow in st_setup() {CVE-2025-37857}
• drm/amdkfd: debugfs hang_hws skip GPU with MES {CVE-2025-37853}
• mm/vmscan: don't try to reclaim hwpoison folio {CVE-2025-37834}
• cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() {CVE-2025-37830}
• drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() {CVE-2025-37852}
• cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() {CVE-2025-37829}
• sound/virtio: Fix cancel_sync warnings on uninitialized work_structs {CVE-2025-37805}
• net: tls: explicitly disallow disconnect {CVE-2025-37756}
• drm/amd/pm: Prevent division by zero {CVE-2025-37770}
• drm/amd/pm: Prevent division by zero {CVE-2025-37768}
• net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. {CVE-2025-22111}
• wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path {CVE-2025-23129}
• x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs {CVE-2025-22045}
• ftrace: Avoid potential division by zero in function_stat_show() {CVE-2025-21898}
• md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime {CVE-2025-21712}
• bpf: Fix softlockup in arena_map_free on 64k page kernel {CVE-2025-21851}
• RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" {CVE-2025-21829}
• mm: zswap: properly synchronize freeing resources during CPU hotunplug {CVE-2025-21693}
• drop_monitor: fix incorrect initialization order {CVE-2025-21862}
• ptp: Ensure info->enable callback is always set {CVE-2025-21814}
• efi: Don't map the entire mokvar table to determine its size {CVE-2025-21872}
• drm/amd/display: Assign normalized_pix_clk when color depth = 14 {CVE-2025-21956}
• net: usb: rtl8150: enable basic endpoint checking {CVE-2025-21708}
• nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() {CVE-2025-21848}
• netfilter: nf_tables: reject mismatching sum of field_len with set key length {CVE-2025-21826}
• mm: clear uffd-wp PTE/PMD state on mremap() {CVE-2025-21696}
• wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910}
• eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682}
• vxlan: check vxlan_vnigroup_init() return value {CVE-2025-21790}
• ata: libata-sff: Ensure that we cannot write outside the allocated buffer {CVE-2025-21738}
• wifi: mac80211: don't flush non-uploaded STAs {CVE-2025-21828}
• team: better TEAM_OPTION_TYPE_STRING validation {CVE-2025-21787}
• ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922}
• scsi: storvsc: Ratelimit warning logs to prevent VM denial of service {CVE-2025-21690}
• sctp: sysctl: udp_port: avoid using current->nsproxy {CVE-2025-21637}
• cgroup/cpuset: remove kernfs active break {CVE-2025-21634}
• KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() {CVE-2024-58083}
• idpf: convert workqueues to unbound {CVE-2024-58057}
• xfrm: state: fix out-of-bounds read during lookup {CVE-2024-57982}
• printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX {CVE-2024-58017}
• Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() {CVE-2024-57988}
• HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections {CVE-2024-57986}
• virtio-blk: don't keep queue frozen during system suspend {CVE-2024-57946}
• drm/amd/display: Initialize denominator defaults to 1 {CVE-2024-57950}
• fs: relax assertions on failure to encode file handles {CVE-2024-57924}
• drm/amd/display: Add check for granularity in dml ceil/floor helpers {CVE-2024-57922}
• scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() {CVE-2024-56748}
• ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() {CVE-2024-56782}
• scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() {CVE-2024-56747}
• netdevsim: prevent bad user input in…

In the Linux kernel, the following vulnerability has been resolved:

printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX

Shifting 1 << 31 on a 32-bit int causes signed integer overflow, which leads to undefined behavior. To prevent this, cast 1 to u32 before performing the shift, ensuring well-defined behavior.

This change explicitly avoids any potential overflow by ensuring that the shift occurs on an unsigned 32-bit integer.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-47659: drm/plane: Move range check for format_count earlier (bsc#1237839).
• CVE-2022-49044: dm integrity: fix memory corruption when tag_size is less than digest size (bsc#1237840).
• CVE-2022-49055: drm/amdkfd: Check for potential null return of kmalloc_array() (bsc#1237868).
• CVE-2022-49060: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() (bsc#1237845).
• CVE-2022-49086: net: openvswitch: fix leak of nested actions (bsc#1238037).
• CVE-2022-49111: Bluetooth: Fix use after free in hci_send_acl (bsc#1237984).
• CVE-2022-49118: scsi: hisi_sas: Free irq vectors in order for v3 HW (bsc#1237979).
• CVE-2022-49121: scsi: pm8001: Fix tag leaks on error (bsc#1237926).
• CVE-2022-49137: drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj (bsc#1238155).
• CVE-2022-49175: PM: core: keep irq flags in device_pm_check_callbacks() (bsc#1238099).
• CVE-2022-49176: bfq: fix use-after-free in bfq_dispatch_request (bsc#1238097).
• CVE-2022-49179: block, bfq: do not move oom_bfqq (bsc#1238092).
• CVE-2022-49188: remoteproc: qcom_q6v5_mss: Fix some leaks in q6v5_alloc_memory_region (bsc#1238138).
• CVE-2022-49197: af_netlink: Fix shift out of bounds in group mask calculation (bsc#1238455).
• CVE-2022-49205: bpf, sockmap: Fix double uncharge the mem of sk_msg (bsc#1238335).
• CVE-2022-49232: drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes() (bsc#1238139).
• CVE-2022-49290: mac80211: fix potential double free on mesh join (bsc#1238156).
• CVE-2022-49305: drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() (bsc#1238645).
• CVE-2022-49325: tcp: add accessors to read/set tp->snd_cwnd (bsc#1238398).
• CVE-2022-49335: drm/amdgpu/cs: make commands with 0 chunks illegal behaviour (bsc#1238377).
• CVE-2022-49351: net: altera: Fix refcount leak in altera_tse_mdio_create (bsc#1237939).
• CVE-2022-49385: driver: base: fix UAF when driver_attach failed (bsc#1237951).
• CVE-2022-49390: macsec: fix UAF bug for real_dev (bsc#1238233).
• CVE-2022-49411: bfq: Make sure bfqg for which we are queueing requests is online (bsc#1238307).
• CVE-2022-49442: drivers/base/node.c: fix compaction sysfs file leak (bsc#1238243).
• CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
• CVE-2022-49478: media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init (bsc#1238000).
• CVE-2022-49489: drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume (bsc#1238244).
• CVE-2022-49504: scsi: lpfc: Inhibit aborts if external loopback plug is inserted (bsc#1238835).
• CVE-2022-49521: scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() (bsc#1238938).
• CVE-2022-49525: media: cx25821: Fix the warning when removing the module (bsc#1238022).
• CVE-2022-49534: scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT (bsc#1238893).
• CVE-2022-49535: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI (bsc#1238937).
• CVE-2022-49536: scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock (bsc#1238838).
• CVE-2022-49537: scsi: lpfc: Fix call trace observed during I/O with CMF enabled (bsc#1238930).
• CVE-2022-49542: scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg() (bsc#1238722).
• CVE-2022-49561: netfilter: conntrack: re-fetch conntrack after insertion (bsc#1238537).
• CVE-2022-49590: igmp: Fix data-races around sysctl_igmp_llm_reports (bsc#1238844).
• CVE-2022-49658: bpf, selftests: Add verifier test case for imm=0,umin=0,umax=1 scalar (bsc#1238803).
• CVE-2022-49668: PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events (bsc#1237957).
• CVE-2022-49693: drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf (bsc#1237954).
• CVE-2022-49725: i40e: Fix call trace in setup_tx_descriptors…

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-43869: perf: Fix hang while freeing sigtrap event (bsc#1229491).
• CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
• CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
• CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086). -…

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
• CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
• CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
• CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
• CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
• CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
• CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
• CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
• CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
• CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
• CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
• CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
• CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
• CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
• CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738).
• CVE-2025-21760: ndisc: extend RCU protection in ndisc_send_skb() (bsc#1238763).
• CVE-2025-21761: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (bsc#1238775).
• CVE-2025-21762: arp: use RCU protection in arp_xmit() (bsc#1238780).
• CVE-2025-21763:…

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
• CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
• CVE-2024-57979: kABI workaround for pps changes (bsc#1238521).
• CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
• CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
• CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
• CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
• CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
• CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
• CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
• CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
• CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
• CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
• CVE-2025-21733: tracing/osnoise: Fix resetting of tracepoints (bsc#1238494).
• CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
• CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
• CVE-2025-21754: btrfs: fix assertion failure when splitting ordered extent after transaction abort (bsc#1238496).
• CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738). -…

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
• CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
• CVE-2024-57979: kABI workaround for pps changes (bsc#1238521).
• CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
• CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
• CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
• CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
• CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
• CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
• CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
• CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
• CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
• CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
• CVE-2025-21733: tracing/osnoise: Fix resetting of tracepoints (bsc#1238494).
• CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
• CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
• CVE-2025-21754: btrfs: fix assertion failure when splitting ordered extent after transaction abort (bsc#1238496).
• CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738). -…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
• CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
• CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21731, CVE-2025-21926, CVE-2025-21830, CVE-2024-58010, CVE-2025-21745, CVE-2025-21871, CVE-2024-57980, CVE-2025-21916, CVE-2025-21735, CVE-2025-21763, CVE-2025-21799, CVE-2025-21811, CVE-2025-21814, CVE-2024-58083, CVE-2025-21922, CVE-2025-21802, CVE-2024-58034, CVE-2025-21758, CVE-2024-58069, CVE-2025-21905, CVE-2024-57986, CVE-2025-21718, CVE-2024-58020, CVE-2025-21858, CVE-2025-21749, CVE-2025-21928, CVE-2024-58085, CVE-2025-21795, CVE-2025-21744, CVE-2025-21776, CVE-2025-21804, CVE-2024-57973, CVE-2025-21848, CVE-2025-21844, CVE-2024-56721, CVE-2024-58079, CVE-2025-21781, CVE-2025-21866, CVE-2024-58052, CVE-2024-58017, CVE-2024-58071, CVE-2025-21791, CVE-2024-26982, CVE-2025-21787, CVE-2024-58090, CVE-2025-21951, CVE-2025-21846, CVE-2025-21722, CVE-2024-58001, CVE-2025-21715, CVE-2025-21919, CVE-2025-21904, CVE-2024-57977, CVE-2025-21785, CVE-2025-21950, CVE-2025-21924, CVE-2024-57979, CVE-2025-21711, CVE-2024-47726, CVE-2024-58002, CVE-2025-21914, CVE-2024-58086, CVE-2024-58005, CVE-2025-21835, CVE-2024-58051, CVE-2025-21761, CVE-2025-21760, CVE-2025-21767, CVE-2025-21766, CVE-2025-21726, CVE-2025-21865, CVE-2024-58014, CVE-2025-21878, CVE-2025-21934, CVE-2024-58007, CVE-2025-21898, CVE-2025-21806, CVE-2024-58058, CVE-2025-21779, CVE-2024-58063, CVE-2025-21708, CVE-2025-21684, CVE-2024-57834, CVE-2025-21971, CVE-2025-21762, CVE-2025-21728, CVE-2024-58076, CVE-2025-21704, CVE-2025-21719, CVE-2025-21948, CVE-2025-21707, CVE-2025-21917, CVE-2025-21782, CVE-2025-21943, CVE-2025-21765, CVE-2025-21721, CVE-2024-58016, CVE-2025-21859, CVE-2025-21909, CVE-2025-21748, CVE-2025-21912, CVE-2025-21736, CVE-2025-21862, CVE-2024-57978, CVE-2025-21826, CVE-2025-21920, CVE-2025-21772, CVE-2025-21877, CVE-2025-21935, CVE-2024-56599, CVE-2025-21820, CVE-2025-21764, CVE-2025-21796, CVE-2025-21887, CVE-2025-21753, CVE-2025-21910, CVE-2024-57981, CVE-2025-21727, CVE-2025-21875, CVE-2024-58072, CVE-2024-58055, CVE-2025-21925, CVE-2025-21823, CVE-2025-21647)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21731, CVE-2025-21926, CVE-2025-21830, CVE-2024-58010, CVE-2025-21745, CVE-2025-21871, CVE-2024-57980, CVE-2025-21916, CVE-2025-21735, CVE-2025-21763, CVE-2025-21799, CVE-2025-21811, CVE-2025-21814, CVE-2024-58083, CVE-2025-21922, CVE-2025-21802, CVE-2024-58034, CVE-2025-21758, CVE-2024-58069, CVE-2025-21905, CVE-2024-57986, CVE-2025-21718, CVE-2024-58020, CVE-2025-21858, CVE-2025-21749, CVE-2025-21928, CVE-2024-58085, CVE-2025-21795, CVE-2025-21744, CVE-2025-21776, CVE-2025-21804, CVE-2024-57973, CVE-2025-21848, CVE-2025-21844, CVE-2024-56721, CVE-2024-58079, CVE-2025-21781, CVE-2025-21866, CVE-2024-58052, CVE-2024-58017, CVE-2024-58071, CVE-2025-21791, CVE-2024-26982, CVE-2025-21787, CVE-2024-58090, CVE-2025-21951, CVE-2025-21846, CVE-2025-21722, CVE-2024-58001, CVE-2025-21715, CVE-2025-21919, CVE-2025-21904, CVE-2024-57977, CVE-2025-21785, CVE-2025-21950, CVE-2025-21924, CVE-2024-57979, CVE-2025-21711, CVE-2024-47726, CVE-2024-58002, CVE-2025-21914, CVE-2024-58086, CVE-2024-58005, CVE-2025-21835, CVE-2024-58051, CVE-2025-21761, CVE-2025-21760, CVE-2025-21767, CVE-2025-21766, CVE-2025-21726, CVE-2025-21865, CVE-2024-58014, CVE-2025-21878, CVE-2025-21934, CVE-2024-58007, CVE-2025-21898, CVE-2025-21806, CVE-2024-58058, CVE-2025-21779, CVE-2024-58063, CVE-2025-21708, CVE-2025-21684, CVE-2024-57834, CVE-2025-21971, CVE-2025-21762, CVE-2025-21728, CVE-2024-58076, CVE-2025-21704, CVE-2025-21719, CVE-2025-21948, CVE-2025-21707, CVE-2025-21917, CVE-2025-21782, CVE-2025-21943, CVE-2025-21765, CVE-2025-21721, CVE-2024-58016, CVE-2025-21859, CVE-2025-21909, CVE-2025-21748, CVE-2025-21912, CVE-2025-21736, CVE-2025-21862, CVE-2024-57978, CVE-2025-21826, CVE-2025-21920, CVE-2025-21772, CVE-2025-21877, CVE-2025-21935, CVE-2024-56599, CVE-2025-21820, CVE-2025-21764, CVE-2025-21796, CVE-2025-21887, CVE-2025-21753, CVE-2025-21910, CVE-2024-57981, CVE-2025-21727, CVE-2025-21875, CVE-2024-58072, CVE-2024-58055, CVE-2025-21925, CVE-2025-21823, CVE-2025-21647)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2024-58069, CVE-2025-21912, CVE-2025-21922, CVE-2025-21765, CVE-2025-21823, CVE-2025-21971, CVE-2024-58010, CVE-2025-21767, CVE-2025-21727, CVE-2025-21916, CVE-2025-21859, CVE-2025-21844, CVE-2024-58063, CVE-2025-21704, CVE-2024-57986, CVE-2025-21846, CVE-2024-58007, CVE-2025-21708, CVE-2025-21731, CVE-2024-58058, CVE-2024-58090, CVE-2025-21791, CVE-2025-21917, CVE-2024-26982, CVE-2024-47726, CVE-2025-21848, CVE-2025-21948, CVE-2025-21796, CVE-2025-21919, CVE-2025-21950, CVE-2024-58085, CVE-2025-21766, CVE-2025-21764, CVE-2025-21781, CVE-2024-58071, CVE-2024-58072, CVE-2025-21726, CVE-2025-21858, CVE-2024-58005, CVE-2025-21866, CVE-2025-21935, CVE-2025-21753, CVE-2025-21904, CVE-2025-21877, CVE-2024-58002, CVE-2025-21776, CVE-2025-21926, CVE-2025-21865, CVE-2025-21898, CVE-2024-58076, CVE-2025-21707, CVE-2025-21735, CVE-2025-21905, CVE-2025-21928, CVE-2025-21647, CVE-2025-21718, CVE-2025-21814, CVE-2025-21925, CVE-2024-58001, CVE-2025-21811, CVE-2024-58055, CVE-2024-58086, CVE-2025-21736, CVE-2025-21871, CVE-2025-21878, CVE-2025-21684, CVE-2025-21763, CVE-2025-21782, CVE-2024-58052, CVE-2025-21820, CVE-2024-57979, CVE-2025-21787, CVE-2025-21749, CVE-2025-21779, CVE-2024-57981, CVE-2025-21719, CVE-2025-21785, CVE-2024-57973, CVE-2025-21745, CVE-2025-21943, CVE-2025-21875, CVE-2025-21795, CVE-2025-21748, CVE-2025-21862, CVE-2025-21744, CVE-2025-21835, CVE-2025-21762, CVE-2025-21760, CVE-2024-58051, CVE-2024-58020, CVE-2024-56721, CVE-2025-21772, CVE-2025-21914, CVE-2024-58014, CVE-2024-58017, CVE-2025-21920, CVE-2025-21711, CVE-2024-57834, CVE-2025-21910, CVE-2025-21909, CVE-2025-21887, CVE-2024-56599, CVE-2025-21806, CVE-2025-21826, CVE-2025-21722, CVE-2024-57977, CVE-2025-21951, CVE-2025-21721, CVE-2024-58034, CVE-2024-57980, CVE-2024-58079, CVE-2024-58083, CVE-2025-21758, CVE-2024-58016, CVE-2024-57978, CVE-2025-21799, CVE-2025-21715, CVE-2025-21761, CVE-2025-21934, CVE-2025-21924, CVE-2025-21830, CVE-2025-21728, CVE-2025-21802, CVE-2025-21804)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21761, CVE-2025-21715, CVE-2025-21802, CVE-2024-57980, CVE-2025-21708, CVE-2025-21722, CVE-2025-21948, CVE-2024-58063, CVE-2025-21765, CVE-2024-58086, CVE-2025-21753, CVE-2025-21943, CVE-2025-21924, CVE-2024-57978, CVE-2025-21760, CVE-2025-21726, CVE-2025-21647, CVE-2025-21866, CVE-2025-21763, CVE-2025-21950, CVE-2024-57977, CVE-2025-21799, CVE-2024-57981, CVE-2025-21871, CVE-2025-21887, CVE-2025-21772, CVE-2025-21878, CVE-2024-58090, CVE-2025-21859, CVE-2024-57986, CVE-2024-57973, CVE-2024-58007, CVE-2025-21898, CVE-2025-21787, CVE-2025-21865, CVE-2025-21848, CVE-2025-21806, CVE-2024-58005, CVE-2024-58058, CVE-2024-56599, CVE-2024-58034, CVE-2025-21846, CVE-2025-21719, CVE-2025-21749, CVE-2025-21766, CVE-2025-21744, CVE-2024-58010, CVE-2025-21704, CVE-2024-26982, CVE-2024-58020, CVE-2025-21916, CVE-2024-58055, CVE-2024-58014, CVE-2024-58051, CVE-2025-21767, CVE-2025-21707, CVE-2025-21795, CVE-2024-58002, CVE-2025-21928, CVE-2025-21925, CVE-2024-58085, CVE-2025-21877, CVE-2025-21684, CVE-2024-58083, CVE-2025-21904, CVE-2024-58016, CVE-2025-21934, CVE-2025-21951, CVE-2025-21782, CVE-2025-21758, CVE-2025-21728, CVE-2025-21858, CVE-2025-21823, CVE-2025-21910, CVE-2025-21736, CVE-2025-21796, CVE-2025-21779, CVE-2025-21718, CVE-2024-56721, CVE-2024-58069, CVE-2024-58079, CVE-2025-21721, CVE-2025-21711, CVE-2025-21791, CVE-2025-21971, CVE-2025-21811, CVE-2025-21785, CVE-2025-21814, CVE-2025-21764, CVE-2024-58052, CVE-2025-21776, CVE-2024-58076, CVE-2024-47726, CVE-2025-21762, CVE-2025-21804, CVE-2025-21926, CVE-2025-21826, CVE-2025-21731, CVE-2024-57979, CVE-2025-21909, CVE-2025-21835, CVE-2025-21905, CVE-2025-21748, CVE-2024-58071, CVE-2025-21830, CVE-2025-21922, CVE-2024-57834, CVE-2025-21745, CVE-2025-21727, CVE-2025-21781, CVE-2025-21862, CVE-2024-58072, CVE-2025-21844, CVE-2025-21912, CVE-2025-21875, CVE-2025-21919, CVE-2025-21820, CVE-2024-58017, CVE-2025-21914, CVE-2025-21917, CVE-2025-21920, CVE-2025-21735, CVE-2025-21935, CVE-2024-58001)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21760, CVE-2025-21904, CVE-2025-21708, CVE-2025-21719, CVE-2024-58058, CVE-2025-21814, CVE-2024-56721, CVE-2025-21715, CVE-2024-58016, CVE-2025-21796, CVE-2025-21795, CVE-2025-21728, CVE-2025-21776, CVE-2024-57834, CVE-2025-21806, CVE-2025-21684, CVE-2025-21858, CVE-2025-21875, CVE-2025-21718, CVE-2025-21726, CVE-2025-21762, CVE-2025-21745, CVE-2025-21749, CVE-2025-21910, CVE-2025-21707, CVE-2024-57986, CVE-2025-21735, CVE-2024-58002, CVE-2025-21753, CVE-2025-21909, CVE-2025-21934, CVE-2025-21802, CVE-2024-58010, CVE-2025-21862, CVE-2025-21887, CVE-2025-21948, CVE-2024-57977, CVE-2025-21781, CVE-2025-21928, CVE-2024-26982, CVE-2025-21704, CVE-2024-58071, CVE-2024-57980, CVE-2025-21916, CVE-2025-21647, CVE-2024-57978, CVE-2025-21951, CVE-2025-21766, CVE-2025-21924, CVE-2025-21920, CVE-2025-21835, CVE-2025-21846, CVE-2025-21791, CVE-2024-58063, CVE-2024-58007, CVE-2025-21877, CVE-2025-21878, CVE-2025-21917, CVE-2025-21779, CVE-2024-57973, CVE-2024-57979, CVE-2025-21772, CVE-2024-58014, CVE-2025-21711, CVE-2025-21919, CVE-2024-58083, CVE-2025-21763, CVE-2024-58072, CVE-2025-21943, CVE-2025-21866, CVE-2025-21811, CVE-2025-21767, CVE-2025-21761, CVE-2025-21799, CVE-2024-56599, CVE-2025-21820, CVE-2025-21871, CVE-2025-21935, CVE-2024-58069, CVE-2024-58090, CVE-2024-58005, CVE-2025-21736, CVE-2025-21912, CVE-2025-21823, CVE-2025-21922, CVE-2025-21721, CVE-2024-58076, CVE-2025-21905, CVE-2025-21865, CVE-2025-21830, CVE-2024-58001, CVE-2024-58086, CVE-2024-58017, CVE-2024-58052, CVE-2025-21744, CVE-2025-21859, CVE-2025-21787, CVE-2024-58085, CVE-2025-21731, CVE-2024-58051, CVE-2025-21914, CVE-2025-21748, CVE-2024-58020, CVE-2025-21804, CVE-2025-21727, CVE-2025-21765, CVE-2025-21826, CVE-2025-21758, CVE-2024-58034, CVE-2024-58055, CVE-2025-21844, CVE-2025-21782, CVE-2024-57981, CVE-2025-21785, CVE-2025-21848, CVE-2025-21898, CVE-2025-21722, CVE-2025-21925, CVE-2025-21764, CVE-2024-47726, CVE-2025-21971, CVE-2025-21926, CVE-2025-21950, CVE-2024-58079)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2024-57973, CVE-2025-21728, CVE-2025-21684, CVE-2024-57980, CVE-2025-21919, CVE-2025-21802, CVE-2025-21748, CVE-2024-58034, CVE-2025-21877, CVE-2024-57981, CVE-2024-58071, CVE-2025-21926, CVE-2025-21848, CVE-2025-21766, CVE-2024-57834, CVE-2024-58085, CVE-2025-21914, CVE-2025-21758, CVE-2025-21707, CVE-2025-21726, CVE-2025-21731, CVE-2025-21916, CVE-2025-21826, CVE-2025-21917, CVE-2025-21760, CVE-2025-21925, CVE-2024-58086, CVE-2025-21948, CVE-2025-21943, CVE-2025-21782, CVE-2024-56599, CVE-2025-21875, CVE-2025-21753, CVE-2025-21721, CVE-2025-21711, CVE-2025-21787, CVE-2025-21928, CVE-2024-57979, CVE-2025-21779, CVE-2025-21924, CVE-2024-58020, CVE-2025-21905, CVE-2024-58002, CVE-2025-21744, CVE-2025-21763, CVE-2024-58017, CVE-2025-21736, CVE-2024-58069, CVE-2025-21715, CVE-2024-58083, CVE-2025-21934, CVE-2024-58055, CVE-2025-21761, CVE-2025-21772, CVE-2025-21796, CVE-2025-21718, CVE-2025-21719, CVE-2025-21887, CVE-2025-21806, CVE-2024-58063, CVE-2025-21871, CVE-2025-21858, CVE-2025-21922, CVE-2025-21767, CVE-2024-58058, CVE-2024-57986, CVE-2025-21971, CVE-2025-21912, CVE-2025-21862, CVE-2024-58001, CVE-2024-58005, CVE-2024-58079, CVE-2025-21749, CVE-2024-58076, CVE-2024-47726, CVE-2025-21722, CVE-2024-58007, CVE-2024-26982, CVE-2024-58016, CVE-2025-21647, CVE-2025-21814, CVE-2024-57978, CVE-2025-21823, CVE-2025-21795, CVE-2025-21910, CVE-2024-58051, CVE-2024-58010, CVE-2025-21776, CVE-2025-21859, CVE-2025-21950, CVE-2025-21811, CVE-2025-21935, CVE-2025-21799, CVE-2025-21835, CVE-2024-58090, CVE-2025-21844, CVE-2024-58052, CVE-2025-21951, CVE-2025-21865, CVE-2025-21820, CVE-2025-21804, CVE-2025-21765, CVE-2025-21727, CVE-2025-21830, CVE-2025-21846, CVE-2025-21781, CVE-2025-21704, CVE-2025-21735, CVE-2024-58072, CVE-2025-21878, CVE-2025-21909, CVE-2024-56721, CVE-2025-21866, CVE-2025-21904, CVE-2025-21898, CVE-2025-21920, CVE-2025-21745, CVE-2025-21785, CVE-2025-21791, CVE-2024-57977, CVE-2025-21764, CVE-2024-58014, CVE-2025-21762, CVE-2025-21708)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21767, CVE-2025-21875, CVE-2025-21719, CVE-2025-21760, CVE-2025-21704, CVE-2025-21749, CVE-2024-56721, CVE-2025-21731, CVE-2025-21910, CVE-2024-58063, CVE-2025-21835, CVE-2025-21726, CVE-2024-58086, CVE-2025-21934, CVE-2024-58014, CVE-2025-21904, CVE-2024-56599, CVE-2025-21727, CVE-2025-21877, CVE-2025-21799, CVE-2024-58071, CVE-2025-21776, CVE-2025-21905, CVE-2025-21926, CVE-2025-21922, CVE-2025-21858, CVE-2024-47726, CVE-2025-21647, CVE-2025-21764, CVE-2025-21862, CVE-2025-21846, CVE-2025-21848, CVE-2024-57973, CVE-2025-21796, CVE-2025-21814, CVE-2025-21878, CVE-2025-21898, CVE-2025-21795, CVE-2025-21735, CVE-2025-21785, CVE-2025-21950, CVE-2024-26982, CVE-2024-57986, CVE-2025-21948, CVE-2024-58072, CVE-2025-21766, CVE-2025-21715, CVE-2025-21920, CVE-2025-21823, CVE-2024-58020, CVE-2024-58017, CVE-2024-58069, CVE-2025-21871, CVE-2024-58085, CVE-2025-21791, CVE-2025-21765, CVE-2025-21782, CVE-2024-58001, CVE-2025-21909, CVE-2024-58079, CVE-2025-21811, CVE-2025-21943, CVE-2025-21924, CVE-2025-21928, CVE-2025-21826, CVE-2025-21708, CVE-2025-21802, CVE-2025-21951, CVE-2025-21744, CVE-2025-21925, CVE-2025-21971, CVE-2024-58076, CVE-2025-21761, CVE-2025-21914, CVE-2025-21684, CVE-2024-58083, CVE-2025-21830, CVE-2025-21887, CVE-2025-21748, CVE-2025-21721, CVE-2024-57980, CVE-2024-58034, CVE-2025-21935, CVE-2025-21859, CVE-2024-58052, CVE-2025-21912, CVE-2025-21753, CVE-2025-21787, CVE-2025-21806, CVE-2025-21917, CVE-2025-21718, CVE-2024-57979, CVE-2025-21866, CVE-2025-21758, CVE-2025-21781, CVE-2025-21711, CVE-2025-21745, CVE-2024-58051, CVE-2024-58016, CVE-2024-58002, CVE-2025-21844, CVE-2024-57977, CVE-2024-57981, CVE-2025-21728, CVE-2024-58090, CVE-2024-58007, CVE-2025-21763, CVE-2025-21762, CVE-2024-58005, CVE-2025-21916, CVE-2024-57834, CVE-2025-21707, CVE-2025-21865, CVE-2025-21736, CVE-2024-57978, CVE-2025-21919, CVE-2025-21820, CVE-2025-21804, CVE-2025-21722, CVE-2024-58055, CVE-2025-21779, CVE-2025-21772, CVE-2024-58010, CVE-2024-58058)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21804, CVE-2025-21779, CVE-2025-21878, CVE-2025-21735, CVE-2024-57977, CVE-2025-21951, CVE-2025-21704, CVE-2025-21859, CVE-2025-21760, CVE-2025-21862, CVE-2024-57834, CVE-2025-21745, CVE-2025-21762, CVE-2024-58005, CVE-2025-21846, CVE-2025-21914, CVE-2025-21736, CVE-2025-21928, CVE-2024-57986, CVE-2025-21761, CVE-2024-58086, CVE-2025-21731, CVE-2025-21766, CVE-2025-21844, CVE-2024-58072, CVE-2024-58069, CVE-2025-21924, CVE-2025-21848, CVE-2025-21950, CVE-2025-21934, CVE-2025-21647, CVE-2024-58076, CVE-2025-21726, CVE-2025-21791, CVE-2025-21722, CVE-2025-21971, CVE-2025-21719, CVE-2025-21904, CVE-2025-21875, CVE-2025-21877, CVE-2025-21758, CVE-2024-58001, CVE-2024-58007, CVE-2024-58010, CVE-2025-21787, CVE-2025-21905, CVE-2024-58055, CVE-2025-21782, CVE-2024-58090, CVE-2025-21910, CVE-2025-21708, CVE-2025-21826, CVE-2024-57980, CVE-2024-58051, CVE-2024-56721, CVE-2025-21909, CVE-2025-21802, CVE-2025-21744, CVE-2024-58058, CVE-2025-21728, CVE-2024-47726, CVE-2024-58079, CVE-2024-58002, CVE-2024-58014, CVE-2025-21898, CVE-2025-21811, CVE-2024-57979, CVE-2025-21865, CVE-2025-21748, CVE-2025-21749, CVE-2025-21920, CVE-2025-21763, CVE-2025-21764, CVE-2025-21887, CVE-2025-21858, CVE-2024-58034, CVE-2025-21820, CVE-2024-57978, CVE-2025-21866, CVE-2025-21922, CVE-2025-21926, CVE-2025-21753, CVE-2024-58052, CVE-2025-21684, CVE-2025-21823, CVE-2024-58016, CVE-2025-21835, CVE-2025-21925, CVE-2025-21707, CVE-2025-21785, CVE-2025-21795, CVE-2025-21718, CVE-2025-21935, CVE-2025-21765, CVE-2025-21715, CVE-2025-21916, CVE-2025-21727, CVE-2025-21912, CVE-2024-58071, CVE-2024-58083, CVE-2025-21948, CVE-2024-56599, CVE-2025-21721, CVE-2024-58063, CVE-2025-21806, CVE-2025-21772, CVE-2025-21776, CVE-2025-21830, CVE-2025-21917, CVE-2024-58020, CVE-2025-21871, CVE-2025-21796, CVE-2025-21711, CVE-2024-58017, CVE-2024-58085, CVE-2024-57981, CVE-2024-57973, CVE-2025-21919, CVE-2025-21814, CVE-2024-26982, CVE-2025-21781, CVE-2025-21943, CVE-2025-21799, CVE-2025-21767)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2024-58063, CVE-2025-21802, CVE-2025-21910, CVE-2025-21718, CVE-2025-21707, CVE-2025-21781, CVE-2025-21726, CVE-2024-56599, CVE-2025-21735, CVE-2025-21859, CVE-2025-21924, CVE-2024-57980, CVE-2024-58002, CVE-2024-58090, CVE-2025-21728, CVE-2024-58055, CVE-2024-57978, CVE-2025-21704, CVE-2025-21820, CVE-2025-21776, CVE-2025-21919, CVE-2025-21765, CVE-2025-21935, CVE-2025-21647, CVE-2025-21804, CVE-2024-58072, CVE-2025-21865, CVE-2025-21887, CVE-2024-58079, CVE-2024-58020, CVE-2024-35889, CVE-2024-58017, CVE-2024-58005, CVE-2025-21862, CVE-2025-21875, CVE-2025-21925, CVE-2025-21951, CVE-2025-21866, CVE-2025-21871, CVE-2025-21914, CVE-2025-21948, CVE-2025-21715, CVE-2025-21848, CVE-2025-21905, CVE-2025-21830, CVE-2024-58051, CVE-2025-21909, CVE-2025-21711, CVE-2025-21684, CVE-2025-21844, CVE-2025-21904, CVE-2025-21898, CVE-2025-21767, CVE-2024-58069, CVE-2024-57834, CVE-2025-21934, CVE-2025-21926, CVE-2025-21708, CVE-2025-21736, CVE-2024-58085, CVE-2024-26982, CVE-2024-58083, CVE-2025-21920, CVE-2025-21764, CVE-2025-21753, CVE-2025-21799, CVE-2025-21846, CVE-2024-57979, CVE-2025-21785, CVE-2024-58010, CVE-2024-57986, CVE-2025-21762, CVE-2025-21912, CVE-2025-21744, CVE-2025-21787, CVE-2025-21761, CVE-2025-21971, CVE-2025-21943, CVE-2024-47726, CVE-2025-21721, CVE-2025-21748, CVE-2025-21791, CVE-2025-21796, CVE-2025-21806, CVE-2025-21779, CVE-2024-58001, CVE-2025-21745, CVE-2025-21814, CVE-2025-21719, CVE-2025-21950, CVE-2025-21858, CVE-2025-21823, CVE-2025-21758, CVE-2024-57981, CVE-2024-58058, CVE-2024-56721, CVE-2025-21811, CVE-2024-58086, CVE-2025-21722, CVE-2025-21727, CVE-2025-21760, CVE-2024-58076, CVE-2025-21916, CVE-2025-21826, CVE-2024-57973, CVE-2025-21795, CVE-2025-21763, CVE-2024-58014, CVE-2025-21917, CVE-2024-57977, CVE-2024-44964, CVE-2024-58016, CVE-2024-58007, CVE-2025-21928, CVE-2024-58052, CVE-2025-21749, CVE-2025-21772, CVE-2025-21877, CVE-2025-21782, CVE-2025-21922, CVE-2025-21766, CVE-2024-58034, CVE-2025-21835, CVE-2025-21878, CVE-2025-21731, CVE-2024-58071)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2024-58063, CVE-2025-21802, CVE-2025-21910, CVE-2025-21718, CVE-2025-21707, CVE-2025-21781, CVE-2025-21726, CVE-2024-56599, CVE-2025-21735, CVE-2025-21859, CVE-2025-21924, CVE-2024-57980, CVE-2024-58002, CVE-2024-58090, CVE-2025-21728, CVE-2024-58055, CVE-2024-57978, CVE-2025-21704, CVE-2025-21820, CVE-2025-21776, CVE-2025-21919, CVE-2025-21765, CVE-2025-21935, CVE-2025-21647, CVE-2025-21804, CVE-2024-58072, CVE-2025-21865, CVE-2025-21887, CVE-2024-58079, CVE-2024-58020, CVE-2024-35889, CVE-2024-58017, CVE-2024-58005, CVE-2025-21862, CVE-2025-21875, CVE-2025-21925, CVE-2025-21951, CVE-2025-21866, CVE-2025-21871, CVE-2025-21914, CVE-2025-21948, CVE-2025-21715, CVE-2025-21848, CVE-2025-21905, CVE-2025-21830, CVE-2024-58051, CVE-2025-21909, CVE-2025-21711, CVE-2025-21684, CVE-2025-21844, CVE-2025-21904, CVE-2025-21898, CVE-2025-21767, CVE-2024-58069, CVE-2024-57834, CVE-2025-21934, CVE-2025-21926, CVE-2025-21708, CVE-2025-21736, CVE-2024-58085, CVE-2024-26982, CVE-2024-58083, CVE-2025-21920, CVE-2025-21764, CVE-2025-21753, CVE-2025-21799, CVE-2025-21846, CVE-2024-57979, CVE-2025-21785, CVE-2024-58010, CVE-2024-57986, CVE-2025-21762, CVE-2025-21912, CVE-2025-21744, CVE-2025-21787, CVE-2025-21761, CVE-2025-21971, CVE-2025-21943, CVE-2024-47726, CVE-2025-21721, CVE-2025-21748, CVE-2025-21791, CVE-2025-21796, CVE-2025-21806, CVE-2025-21779, CVE-2024-58001, CVE-2025-21745, CVE-2025-21814, CVE-2025-21719, CVE-2025-21950, CVE-2025-21858, CVE-2025-21823, CVE-2025-21758, CVE-2024-57981, CVE-2024-58058, CVE-2024-56721, CVE-2025-21811, CVE-2024-58086, CVE-2025-21722, CVE-2025-21727, CVE-2025-21760, CVE-2024-58076, CVE-2025-21916, CVE-2025-21826, CVE-2024-57973, CVE-2025-21795, CVE-2025-21763, CVE-2024-58014, CVE-2025-21917, CVE-2024-57977, CVE-2024-44964, CVE-2024-58016, CVE-2024-58007, CVE-2025-21928, CVE-2024-58052, CVE-2025-21749, CVE-2025-21772, CVE-2025-21877, CVE-2025-21782, CVE-2025-21922, CVE-2025-21766, CVE-2024-58034, CVE-2025-21835, CVE-2025-21878, CVE-2025-21731, CVE-2024-58071)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2024-58002, CVE-2025-21767, CVE-2024-58051, CVE-2025-21909, CVE-2025-21866, CVE-2025-21823, CVE-2025-21922, CVE-2025-21804, CVE-2024-58069, CVE-2025-21761, CVE-2025-21799, CVE-2024-58034, CVE-2025-21826, CVE-2024-58007, CVE-2025-21948, CVE-2025-21910, CVE-2025-21748, CVE-2024-57834, CVE-2025-21926, CVE-2025-21722, CVE-2024-58072, CVE-2024-58086, CVE-2025-21914, CVE-2025-21802, CVE-2025-21916, CVE-2025-21943, CVE-2025-21830, CVE-2025-21950, CVE-2025-21736, CVE-2024-58014, CVE-2025-21785, CVE-2025-21766, CVE-2025-21878, CVE-2024-56721, CVE-2025-21707, CVE-2025-21904, CVE-2025-21782, CVE-2025-21776, CVE-2025-21726, CVE-2025-21862, CVE-2024-57986, CVE-2025-21647, CVE-2025-21887, CVE-2025-21877, CVE-2024-44964, CVE-2024-58052, CVE-2025-21796, CVE-2024-58085, CVE-2025-21934, CVE-2025-21760, CVE-2025-21924, CVE-2024-57979, CVE-2025-21875, CVE-2024-58083, CVE-2025-21811, CVE-2025-21749, CVE-2025-21814, CVE-2025-21727, CVE-2025-21715, CVE-2025-21684, CVE-2025-21917, CVE-2025-21731, CVE-2024-58016, CVE-2024-58090, CVE-2025-21865, CVE-2024-58010, CVE-2025-21719, CVE-2025-21925, CVE-2025-21846, CVE-2024-58020, CVE-2024-58017, CVE-2024-58063, CVE-2025-21844, CVE-2024-58079, CVE-2024-58055, CVE-2024-57981, CVE-2024-56599, CVE-2024-26982, CVE-2025-21835, CVE-2025-21935, CVE-2024-58005, CVE-2025-21791, CVE-2024-57977, CVE-2024-57978, CVE-2025-21806, CVE-2025-21772, CVE-2025-21859, CVE-2025-21728, CVE-2025-21781, CVE-2024-57980, CVE-2025-21744, CVE-2025-21721, CVE-2025-21718, CVE-2025-21858, CVE-2025-21704, CVE-2025-21905, CVE-2025-21951, CVE-2025-21971, CVE-2025-21848, CVE-2025-21745, CVE-2025-21928, CVE-2024-58076, CVE-2025-21763, CVE-2025-21762, CVE-2025-21919, CVE-2025-21708, CVE-2025-21795, CVE-2024-57973, CVE-2025-21753, CVE-2025-21912, CVE-2024-47726, CVE-2024-35889, CVE-2024-58071, CVE-2025-21787, CVE-2025-21871, CVE-2025-21711, CVE-2025-21765, CVE-2024-58058, CVE-2025-21898, CVE-2025-21735, CVE-2025-21758, CVE-2025-21820, CVE-2025-21779, CVE-2025-21920, CVE-2024-58001, CVE-2025-21764)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Netfilter;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21914, CVE-2024-58090, CVE-2024-58017, CVE-2024-58069, CVE-2025-21920, CVE-2025-21935, CVE-2024-57977, CVE-2025-21763, CVE-2025-21684, CVE-2025-21721, CVE-2025-21736, CVE-2024-58020, CVE-2025-21799, CVE-2025-21904, CVE-2025-21934, CVE-2025-21719, CVE-2025-21811, CVE-2025-21727, CVE-2024-58071, CVE-2025-21905, CVE-2024-26982, CVE-2025-21820, CVE-2024-58052, CVE-2025-21925, CVE-2025-21796, CVE-2025-21779, CVE-2025-21823, CVE-2024-58063, CVE-2025-21772, CVE-2025-21924, CVE-2025-21765, CVE-2024-56721, CVE-2025-21859, CVE-2025-21760, CVE-2025-21753, CVE-2025-21835, CVE-2025-21887, CVE-2024-58002, CVE-2024-58086, CVE-2025-21744, CVE-2025-21848, CVE-2024-57986, CVE-2025-21865, CVE-2025-21766, CVE-2025-21715, CVE-2023-52664, CVE-2025-21764, CVE-2024-58085, CVE-2025-21704, CVE-2024-58072, CVE-2024-58079, CVE-2025-21846, CVE-2025-21647, CVE-2025-21726, CVE-2024-58034, CVE-2025-21943, CVE-2025-21875, CVE-2025-21871, CVE-2025-21898, CVE-2024-58083, CVE-2025-21748, CVE-2024-57834, CVE-2024-58051, CVE-2025-21862, CVE-2025-21722, CVE-2025-21912, CVE-2025-21950, CVE-2025-21917, CVE-2024-57973, CVE-2024-56599, CVE-2025-21922, CVE-2025-21787, CVE-2025-21919, CVE-2025-21971, CVE-2024-57979, CVE-2024-35889, CVE-2025-21804, CVE-2025-21782, CVE-2025-21910, CVE-2025-21909, CVE-2025-21708, CVE-2025-21830, CVE-2025-21791, CVE-2024-58016, CVE-2025-21711, CVE-2025-21928, CVE-2024-58007, CVE-2024-58005, CVE-2023-52927, CVE-2025-21802, CVE-2024-58010, CVE-2024-58001, CVE-2024-47726, CVE-2024-57978, CVE-2024-58055, CVE-2025-21735, CVE-2025-21795, CVE-2025-21745, CVE-2025-21878, CVE-2025-21877, CVE-2025-21826, CVE-2024-58076, CVE-2025-21806, CVE-2025-21858, CVE-2025-21866, CVE-2025-21776, CVE-2025-21785, CVE-2025-21758, CVE-2024-57980, CVE-2025-21728, CVE-2024-58014, CVE-2025-21814, CVE-2025-21762, CVE-2025-21951, CVE-2025-21767, CVE-2025-21844, CVE-2025-21781, CVE-2024-58058, CVE-2025-21761, CVE-2025-21707, CVE-2025-21731, CVE-2024-44964, CVE-2025-21749, CVE-2024-57981, CVE-2025-21948, CVE-2025-21926, CVE-2025-21916, CVE-2025-21718)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21866, CVE-2025-21846, CVE-2025-21971, CVE-2025-21909, CVE-2024-58083, CVE-2025-21811, CVE-2025-21776, CVE-2024-58051, CVE-2025-21917, CVE-2025-21935, CVE-2025-21785, CVE-2021-47191, CVE-2025-21765, CVE-2025-21704, CVE-2025-21647, CVE-2024-58069, CVE-2025-21877, CVE-2025-21948, CVE-2024-58007, CVE-2024-58001, CVE-2025-21871, CVE-2024-58055, CVE-2025-21848, CVE-2025-21925, CVE-2024-58058, CVE-2025-21814, CVE-2025-21905, CVE-2025-21898, CVE-2025-21926, CVE-2025-21760, CVE-2024-57973, CVE-2025-21806, CVE-2024-58071, CVE-2025-21761, CVE-2025-21762, CVE-2024-57986, CVE-2025-21708, CVE-2025-21744, CVE-2024-26996, CVE-2024-50055, CVE-2024-58020, CVE-2025-21858, CVE-2025-21715, CVE-2025-21904, CVE-2025-21920, CVE-2024-56599, CVE-2025-21781, CVE-2025-21764, CVE-2025-21865, CVE-2025-21772, CVE-2024-58072, CVE-2025-21928, CVE-2025-21859, CVE-2025-21721, CVE-2025-21719, CVE-2025-21914, CVE-2025-21753, CVE-2024-58009, CVE-2024-57981, CVE-2024-58063, CVE-2024-58052, CVE-2025-21722, CVE-2024-57977, CVE-2025-21736, CVE-2025-21922, CVE-2024-26982, CVE-2025-21718, CVE-2025-21916, CVE-2025-21749, CVE-2025-21787, CVE-2024-58085, CVE-2024-58010, CVE-2024-57979, CVE-2024-57980, CVE-2025-21782, CVE-2025-21791, CVE-2025-21728, CVE-2023-52741, CVE-2025-21934, CVE-2024-58002, CVE-2025-21735, CVE-2025-21910, CVE-2025-21823, CVE-2024-58090, CVE-2025-21862, CVE-2025-21731, CVE-2025-21835, CVE-2024-58017, CVE-2024-58014, CVE-2025-21763)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21866, CVE-2025-21846, CVE-2025-21971, CVE-2025-21909, CVE-2024-58083, CVE-2025-21811, CVE-2025-21776, CVE-2024-58051, CVE-2025-21917, CVE-2025-21935, CVE-2025-21785, CVE-2021-47191, CVE-2025-21765, CVE-2025-21704, CVE-2025-21647, CVE-2024-58069, CVE-2025-21877, CVE-2025-21948, CVE-2024-58007, CVE-2024-58001, CVE-2025-21871, CVE-2024-58055, CVE-2025-21848, CVE-2025-21925, CVE-2024-58058, CVE-2025-21814, CVE-2025-21905, CVE-2025-21898, CVE-2025-21926, CVE-2025-21760, CVE-2024-57973, CVE-2025-21806, CVE-2024-58071, CVE-2025-21761, CVE-2025-21762, CVE-2024-57986, CVE-2025-21708, CVE-2025-21744, CVE-2024-26996, CVE-2024-50055, CVE-2024-58020, CVE-2025-21858, CVE-2025-21715, CVE-2025-21904, CVE-2025-21920, CVE-2024-56599, CVE-2025-21781, CVE-2025-21764, CVE-2025-21865, CVE-2025-21772, CVE-2024-58072, CVE-2025-21928, CVE-2025-21859, CVE-2025-21721, CVE-2025-21719, CVE-2025-21914, CVE-2025-21753, CVE-2024-58009, CVE-2024-57981, CVE-2024-58063, CVE-2024-58052, CVE-2025-21722, CVE-2024-57977, CVE-2025-21736, CVE-2025-21922, CVE-2024-26982, CVE-2025-21718, CVE-2025-21916, CVE-2025-21749, CVE-2025-21787, CVE-2024-58085, CVE-2024-58010, CVE-2024-57979, CVE-2024-57980, CVE-2025-21782, CVE-2025-21791, CVE-2025-21728, CVE-2023-52741, CVE-2025-21934, CVE-2024-58002, CVE-2025-21735, CVE-2025-21910, CVE-2025-21823, CVE-2024-58090, CVE-2025-21862, CVE-2025-21731, CVE-2025-21835, CVE-2024-58017, CVE-2024-58014, CVE-2025-21763)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21719, CVE-2024-58069, CVE-2025-21914, CVE-2025-21928, CVE-2025-21909, CVE-2025-21772, CVE-2025-21814, CVE-2025-21721, CVE-2024-50055, CVE-2025-21917, CVE-2025-21862, CVE-2025-21806, CVE-2025-21647, CVE-2024-58051, CVE-2024-57986, CVE-2024-57981, CVE-2025-21904, CVE-2025-21925, CVE-2025-21859, CVE-2025-21948, CVE-2024-58052, CVE-2025-21922, CVE-2024-26996, CVE-2024-26982, CVE-2025-21858, CVE-2024-58090, CVE-2024-58085, CVE-2025-21718, CVE-2025-21762, CVE-2025-21753, CVE-2025-21763, CVE-2025-21760, CVE-2024-58010, CVE-2025-21920, CVE-2025-21916, CVE-2025-21776, CVE-2025-21728, CVE-2024-58002, CVE-2025-21781, CVE-2024-58072, CVE-2025-21735, CVE-2025-21749, CVE-2025-21731, CVE-2025-21835, CVE-2024-56599, CVE-2025-21877, CVE-2025-21785, CVE-2025-21704, CVE-2024-57979, CVE-2024-58007, CVE-2024-57977, CVE-2025-21761, CVE-2025-21787, CVE-2025-21846, CVE-2024-58063, CVE-2025-21898, CVE-2025-21791, CVE-2025-21934, CVE-2025-21926, CVE-2025-21764, CVE-2025-21811, CVE-2025-21722, CVE-2025-21715, CVE-2024-58020, CVE-2024-58001, CVE-2024-58071, CVE-2025-21905, CVE-2024-58014, CVE-2025-21736, CVE-2025-21865, CVE-2023-52741, CVE-2025-21935, CVE-2025-21910, CVE-2024-57980, CVE-2025-21744, CVE-2024-58055, CVE-2025-21823, CVE-2021-47191, CVE-2025-21866, CVE-2024-58083, CVE-2025-21871, CVE-2025-21782, CVE-2025-21848, CVE-2024-58009, CVE-2025-21971, CVE-2024-58058, CVE-2024-58017, CVE-2025-21765, CVE-2024-57973, CVE-2025-21708)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21735, CVE-2025-21922, CVE-2024-58001, CVE-2025-21926, CVE-2025-21647, CVE-2024-50055, CVE-2025-21862, CVE-2024-58002, CVE-2025-21814, CVE-2024-58020, CVE-2025-21835, CVE-2024-26982, CVE-2025-21744, CVE-2025-21763, CVE-2024-58069, CVE-2024-58090, CVE-2025-21846, CVE-2024-58010, CVE-2025-21859, CVE-2024-26996, CVE-2025-21971, CVE-2025-21934, CVE-2025-21904, CVE-2024-57977, CVE-2024-58058, CVE-2025-21704, CVE-2024-57986, CVE-2025-21762, CVE-2025-21925, CVE-2025-21806, CVE-2025-21909, CVE-2024-58063, CVE-2023-52741, CVE-2025-21791, CVE-2025-21728, CVE-2024-58014, CVE-2025-21858, CVE-2024-57981, CVE-2025-21916, CVE-2025-21787, CVE-2025-21781, CVE-2025-21708, CVE-2024-58071, CVE-2024-57980, CVE-2025-21920, CVE-2025-21914, CVE-2025-21948, CVE-2024-58017, CVE-2025-21877, CVE-2024-58052, CVE-2025-21731, CVE-2025-21715, CVE-2025-21898, CVE-2024-58085, CVE-2025-21865, CVE-2025-21811, CVE-2024-58051, CVE-2025-21749, CVE-2025-21736, CVE-2024-58072, CVE-2025-21722, CVE-2024-58009, CVE-2025-21719, CVE-2025-21785, CVE-2025-21928, CVE-2025-21761, CVE-2024-58007, CVE-2025-21866, CVE-2025-21910, CVE-2025-21765, CVE-2025-21753, CVE-2021-47191, CVE-2024-58055, CVE-2025-21782, CVE-2025-21871, CVE-2025-21760, CVE-2024-57973, CVE-2025-21718, CVE-2024-57979, CVE-2025-21935, CVE-2025-21917, CVE-2025-21905, CVE-2024-56599, CVE-2025-21721, CVE-2025-21823, CVE-2025-21848, CVE-2025-21764, CVE-2025-21772, CVE-2024-58083, CVE-2025-21776)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21922, CVE-2024-58051, CVE-2024-58010, CVE-2025-21787, CVE-2025-21728, CVE-2024-58052, CVE-2025-21905, CVE-2025-21735, CVE-2024-58020, CVE-2025-21898, CVE-2024-58085, CVE-2025-21935, CVE-2024-58072, CVE-2024-50055, CVE-2024-56599, CVE-2024-58071, CVE-2025-21753, CVE-2025-21749, CVE-2025-21858, CVE-2025-21904, CVE-2025-21715, CVE-2025-21782, CVE-2025-21760, CVE-2025-21718, CVE-2024-58069, CVE-2024-58002, CVE-2025-21926, CVE-2024-57980, CVE-2025-21806, CVE-2025-21719, CVE-2024-57973, CVE-2025-21763, CVE-2024-58009, CVE-2025-21731, CVE-2025-21823, CVE-2025-21910, CVE-2025-21909, CVE-2025-21859, CVE-2025-21762, CVE-2025-21928, CVE-2024-58014, CVE-2024-58055, CVE-2024-58083, CVE-2025-21846, CVE-2025-21814, CVE-2025-21948, CVE-2025-21917, CVE-2024-57977, CVE-2024-26982, CVE-2025-21934, CVE-2025-21877, CVE-2025-21920, CVE-2024-57981, CVE-2025-21848, CVE-2025-21925, CVE-2025-21708, CVE-2025-21871, CVE-2024-57986, CVE-2025-21866, CVE-2025-21764, CVE-2021-47191, CVE-2025-21914, CVE-2024-58063, CVE-2024-58007, CVE-2025-21791, CVE-2025-21835, CVE-2025-21704, CVE-2025-21916, CVE-2025-21736, CVE-2024-26996, CVE-2025-21781, CVE-2025-21776, CVE-2025-21772, CVE-2024-58001, CVE-2025-21865, CVE-2024-57979, CVE-2024-58017, CVE-2023-52741, CVE-2025-21785, CVE-2025-21862, CVE-2024-58090, CVE-2024-58058, CVE-2025-21811, CVE-2025-21765, CVE-2025-21647, CVE-2025-21721, CVE-2025-21971, CVE-2025-21761, CVE-2025-21744, CVE-2025-21722)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21814, CVE-2025-21917, CVE-2025-21871, CVE-2024-57973, CVE-2025-21862, CVE-2025-21877, CVE-2024-26982, CVE-2024-58090, CVE-2025-21925, CVE-2025-21787, CVE-2025-21763, CVE-2024-58083, CVE-2025-21719, CVE-2025-21715, CVE-2025-21704, CVE-2025-21865, CVE-2025-21781, CVE-2025-21762, CVE-2023-52741, CVE-2025-21761, CVE-2025-21764, CVE-2025-21811, CVE-2025-21846, CVE-2024-57981, CVE-2024-58051, CVE-2025-21772, CVE-2024-56599, CVE-2024-58014, CVE-2024-58007, CVE-2025-21760, CVE-2021-47191, CVE-2025-21909, CVE-2025-21791, CVE-2025-21916, CVE-2024-57979, CVE-2024-26996, CVE-2024-58085, CVE-2024-58072, CVE-2025-21914, CVE-2025-21848, CVE-2025-21736, CVE-2025-21785, CVE-2024-58002, CVE-2024-58058, CVE-2025-21776, CVE-2025-21935, CVE-2025-21722, CVE-2024-58071, CVE-2025-21721, CVE-2025-21708, CVE-2024-58055, CVE-2025-21782, CVE-2025-21806, CVE-2025-21922, CVE-2025-21835, CVE-2025-21749, CVE-2025-21858, CVE-2024-58020, CVE-2024-58069, CVE-2024-57980, CVE-2025-21735, CVE-2025-21905, CVE-2025-21823, CVE-2024-58052, CVE-2025-21971, CVE-2024-58063, CVE-2025-21728, CVE-2025-21910, CVE-2024-58017, CVE-2025-21647, CVE-2025-21934, CVE-2025-21926, CVE-2024-57986, CVE-2025-21948, CVE-2024-58009, CVE-2025-21765, CVE-2025-21904, CVE-2025-21866, CVE-2025-21928, CVE-2025-21859, CVE-2024-58010, CVE-2025-21753, CVE-2025-21718, CVE-2024-58001, CVE-2025-21731, CVE-2024-50055, CVE-2025-21744, CVE-2025-21920, CVE-2024-57977, CVE-2025-21898)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21791, CVE-2024-58002, CVE-2024-57980, CVE-2025-21848, CVE-2025-21846, CVE-2025-21859, CVE-2024-57981, CVE-2025-21735, CVE-2025-21909, CVE-2025-21926, CVE-2025-21731, CVE-2025-21760, CVE-2025-21806, CVE-2024-57979, CVE-2024-58009, CVE-2025-21866, CVE-2025-21781, CVE-2025-21862, CVE-2024-58090, CVE-2024-58069, CVE-2024-58014, CVE-2025-21763, CVE-2023-52741, CVE-2025-21776, CVE-2024-58010, CVE-2025-21871, CVE-2021-47191, CVE-2024-58058, CVE-2025-21721, CVE-2025-21715, CVE-2024-58052, CVE-2024-56599, CVE-2025-21708, CVE-2024-58071, CVE-2025-21785, CVE-2024-50055, CVE-2025-21925, CVE-2025-21904, CVE-2024-58007, CVE-2025-21905, CVE-2025-21772, CVE-2025-21736, CVE-2025-21718, CVE-2025-21764, CVE-2025-21920, CVE-2024-58017, CVE-2024-58020, CVE-2025-21761, CVE-2024-58001, CVE-2025-21704, CVE-2025-21922, CVE-2025-21782, CVE-2025-21728, CVE-2025-21719, CVE-2025-21835, CVE-2024-57977, CVE-2024-57973, CVE-2025-21971, CVE-2025-21934, CVE-2025-21749, CVE-2025-21916, CVE-2024-58063, CVE-2025-21898, CVE-2025-21877, CVE-2024-58072, CVE-2025-21811, CVE-2025-21858, CVE-2025-21865, CVE-2025-21744, CVE-2025-21753, CVE-2024-26996, CVE-2025-21814, CVE-2024-57986, CVE-2025-21910, CVE-2025-21722, CVE-2024-58051, CVE-2025-21787, CVE-2025-21935, CVE-2024-58055, CVE-2024-26982, CVE-2025-21647, CVE-2025-21928, CVE-2024-58083, CVE-2025-21948, CVE-2025-21914, CVE-2024-58085, CVE-2025-21765, CVE-2025-21762, CVE-2025-21823, CVE-2025-21917)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2024-58072, CVE-2024-58051, CVE-2024-58058, CVE-2024-57977, CVE-2024-58007, CVE-2025-21753, CVE-2025-21647, CVE-2025-21787, CVE-2025-21791, CVE-2025-21782, CVE-2024-56599, CVE-2024-58063, CVE-2025-21806, CVE-2021-47191, CVE-2025-21823, CVE-2025-21776, CVE-2025-21948, CVE-2024-58017, CVE-2024-57981, CVE-2025-21925, CVE-2024-58069, CVE-2024-58085, CVE-2025-21704, CVE-2025-21811, CVE-2025-21858, CVE-2025-21862, CVE-2024-58010, CVE-2025-21926, CVE-2025-21920, CVE-2025-21762, CVE-2025-21914, CVE-2025-21916, CVE-2023-52741, CVE-2025-21835, CVE-2025-21761, CVE-2025-21905, CVE-2024-50055, CVE-2024-57980, CVE-2025-21728, CVE-2025-21910, CVE-2025-21785, CVE-2025-21848, CVE-2024-58090, CVE-2025-21971, CVE-2024-58071, CVE-2025-21909, CVE-2025-21722, CVE-2025-21765, CVE-2025-21859, CVE-2025-21744, CVE-2025-21781, CVE-2025-21922, CVE-2024-57979, CVE-2024-58052, CVE-2025-21718, CVE-2024-58014, CVE-2024-58020, CVE-2025-21772, CVE-2025-21904, CVE-2025-21708, CVE-2025-21846, CVE-2025-21935, CVE-2025-21763, CVE-2025-21934, CVE-2024-57973, CVE-2025-21877, CVE-2025-21760, CVE-2024-58002, CVE-2025-21721, CVE-2025-21719, CVE-2024-58083, CVE-2025-21928, CVE-2025-21871, CVE-2024-58009, CVE-2025-21749, CVE-2025-21866, CVE-2024-58055, CVE-2025-21814, CVE-2024-26996, CVE-2025-21898, CVE-2025-21715, CVE-2024-57986, CVE-2024-58001, CVE-2025-21731, CVE-2025-21764, CVE-2025-21917, CVE-2024-26982, CVE-2025-21736, CVE-2025-21865, CVE-2025-21735)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21835, CVE-2025-21760, CVE-2025-21914, CVE-2025-21744, CVE-2024-57977, CVE-2024-58001, CVE-2025-21848, CVE-2024-57981, CVE-2024-58055, CVE-2025-21721, CVE-2025-21925, CVE-2025-21764, CVE-2025-21909, CVE-2024-26996, CVE-2024-56599, CVE-2025-21728, CVE-2025-21782, CVE-2025-21866, CVE-2024-58069, CVE-2025-21859, CVE-2024-58007, CVE-2024-58009, CVE-2025-21904, CVE-2024-58085, CVE-2025-21920, CVE-2024-58058, CVE-2025-21811, CVE-2025-21922, CVE-2025-21948, CVE-2024-58090, CVE-2024-57980, CVE-2025-21823, CVE-2024-58052, CVE-2025-21736, CVE-2025-21917, CVE-2021-47191, CVE-2024-58051, CVE-2024-58017, CVE-2025-21846, CVE-2025-21862, CVE-2025-21722, CVE-2024-57986, CVE-2025-21871, CVE-2025-21865, CVE-2023-52741, CVE-2025-21971, CVE-2025-21718, CVE-2025-21814, CVE-2025-21704, CVE-2025-21934, CVE-2025-21781, CVE-2025-21791, CVE-2025-21708, CVE-2025-21935, CVE-2025-21761, CVE-2025-21719, CVE-2025-21763, CVE-2025-21772, CVE-2025-21905, CVE-2025-21731, CVE-2024-58002, CVE-2024-58083, CVE-2025-21858, CVE-2025-21776, CVE-2025-21762, CVE-2025-21928, CVE-2025-21877, CVE-2025-21910, CVE-2024-58010, CVE-2025-21735, CVE-2024-50055, CVE-2025-21785, CVE-2024-57973, CVE-2025-21806, CVE-2025-21749, CVE-2024-58063, CVE-2024-57979, CVE-2025-21753, CVE-2024-26982, CVE-2025-21647, CVE-2025-21898, CVE-2024-58020, CVE-2024-58071, CVE-2025-21926, CVE-2025-21715, CVE-2025-21765, CVE-2025-21787, CVE-2025-21916, CVE-2024-58014, CVE-2024-58072)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Netfilter;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2024-58051, CVE-2025-21731, CVE-2025-21782, CVE-2025-21785, CVE-2025-21917, CVE-2025-21914, CVE-2025-21744, CVE-2025-21948, CVE-2025-21708, CVE-2024-58072, CVE-2024-57977, CVE-2024-26996, CVE-2025-21787, CVE-2025-21859, CVE-2024-58007, CVE-2023-52664, CVE-2025-21722, CVE-2025-21971, CVE-2025-21928, CVE-2025-21791, CVE-2024-58090, CVE-2024-57981, CVE-2025-21865, CVE-2024-58001, CVE-2025-21926, CVE-2024-58071, CVE-2025-21721, CVE-2025-21772, CVE-2025-21764, CVE-2024-58017, CVE-2024-57973, CVE-2025-21761, CVE-2025-21866, CVE-2025-21920, CVE-2025-21704, CVE-2024-58055, CVE-2024-56599, CVE-2025-21935, CVE-2023-52927, CVE-2025-21811, CVE-2024-50055, CVE-2025-21781, CVE-2025-21760, CVE-2025-21922, CVE-2024-58009, CVE-2024-58069, CVE-2025-21877, CVE-2024-58058, CVE-2024-57980, CVE-2025-21905, CVE-2024-26982, CVE-2025-21916, CVE-2024-58020, CVE-2025-21835, CVE-2025-21719, CVE-2025-21858, CVE-2024-58085, CVE-2025-21814, CVE-2025-21762, CVE-2025-21862, CVE-2024-58014, CVE-2025-21898, CVE-2025-21904, CVE-2025-21736, CVE-2025-21765, CVE-2025-21647, CVE-2024-58010, CVE-2025-21763, CVE-2025-21718, CVE-2021-47191, CVE-2024-58052, CVE-2025-21846, CVE-2024-58063, CVE-2024-26689, CVE-2025-21806, CVE-2025-21753, CVE-2025-21910, CVE-2025-21848, CVE-2025-21749, CVE-2025-21871, CVE-2024-57979, CVE-2025-21728, CVE-2025-21925, CVE-2024-58002, CVE-2025-21909, CVE-2025-21715, CVE-2024-58083, CVE-2025-21735, CVE-2025-21776, CVE-2025-21823, CVE-2025-21934, CVE-2023-52741, CVE-2024-57986)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Netfilter;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2024-57979, CVE-2024-58090, CVE-2024-57973, CVE-2025-21925, CVE-2025-21763, CVE-2024-58069, CVE-2025-21718, CVE-2024-57986, CVE-2025-21871, CVE-2025-21898, CVE-2025-21760, CVE-2025-21814, CVE-2025-21731, CVE-2025-21772, CVE-2024-58001, CVE-2025-21708, CVE-2024-58009, CVE-2024-58002, CVE-2024-58085, CVE-2025-21920, CVE-2024-50055, CVE-2025-21791, CVE-2025-21904, CVE-2025-21917, CVE-2025-21971, CVE-2025-21736, CVE-2023-52741, CVE-2025-21753, CVE-2025-21910, CVE-2024-57980, CVE-2025-21948, CVE-2025-21762, CVE-2024-58072, CVE-2025-21858, CVE-2023-52664, CVE-2025-21922, CVE-2025-21715, CVE-2024-58051, CVE-2024-57981, CVE-2025-21909, CVE-2025-21934, CVE-2025-21728, CVE-2025-21764, CVE-2025-21782, CVE-2025-21744, CVE-2021-47191, CVE-2025-21866, CVE-2025-21859, CVE-2025-21846, CVE-2025-21877, CVE-2023-52927, CVE-2024-58017, CVE-2024-58007, CVE-2025-21914, CVE-2024-58052, CVE-2024-26689, CVE-2025-21647, CVE-2025-21806, CVE-2025-21835, CVE-2025-21916, CVE-2025-21935, CVE-2025-21905, CVE-2025-21787, CVE-2025-21721, CVE-2024-57977, CVE-2025-21722, CVE-2025-21865, CVE-2024-58058, CVE-2025-21926, CVE-2024-58071, CVE-2025-21785, CVE-2024-58020, CVE-2024-58010, CVE-2025-21811, CVE-2025-21776, CVE-2025-21749, CVE-2024-58014, CVE-2024-58055, CVE-2024-58063, CVE-2025-21761, CVE-2024-26996, CVE-2025-21862, CVE-2025-21928, CVE-2025-21719, CVE-2025-21765, CVE-2024-56599, CVE-2025-21735, CVE-2025-21848, CVE-2025-21704, CVE-2025-21781, CVE-2025-21823, CVE-2024-58083, CVE-2024-26982)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Netfilter;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2024-58055, CVE-2025-21715, CVE-2024-26982, CVE-2025-21806, CVE-2024-58052, CVE-2024-57981, CVE-2025-21935, CVE-2025-21763, CVE-2024-58002, CVE-2025-21736, CVE-2025-21704, CVE-2024-57986, CVE-2025-21761, CVE-2024-58069, CVE-2025-21934, CVE-2024-58017, CVE-2025-21862, CVE-2024-26689, CVE-2025-21744, CVE-2025-21776, CVE-2024-56599, CVE-2025-21858, CVE-2025-21722, CVE-2025-21791, CVE-2025-21735, CVE-2025-21926, CVE-2025-21904, CVE-2024-58009, CVE-2024-58010, CVE-2024-58063, CVE-2025-21765, CVE-2025-21914, CVE-2025-21866, CVE-2025-21760, CVE-2024-57979, CVE-2024-58071, CVE-2025-21781, CVE-2025-21772, CVE-2025-21928, CVE-2025-21762, CVE-2024-58014, CVE-2024-57980, CVE-2024-26996, CVE-2025-21708, CVE-2025-21922, CVE-2024-58051, CVE-2023-52927, CVE-2024-58085, CVE-2025-21721, CVE-2025-21782, CVE-2025-21871, CVE-2024-50055, CVE-2025-21749, CVE-2025-21835, CVE-2024-58007, CVE-2025-21971, CVE-2024-58083, CVE-2025-21731, CVE-2024-57973, CVE-2025-21811, CVE-2025-21728, CVE-2023-52741, CVE-2025-21865, CVE-2025-21859, CVE-2025-21823, CVE-2025-21877, CVE-2024-57977, CVE-2025-21917, CVE-2025-21909, CVE-2025-21846, CVE-2024-58072, CVE-2025-21848, CVE-2023-52664, CVE-2025-21785, CVE-2021-47191, CVE-2025-21910, CVE-2025-21925, CVE-2025-21814, CVE-2024-58020, CVE-2025-21764, CVE-2024-58058, CVE-2025-21905, CVE-2025-21787, CVE-2024-58001, CVE-2025-21647, CVE-2025-21719, CVE-2024-58090, CVE-2025-21753, CVE-2025-21718, CVE-2025-21948, CVE-2025-21898, CVE-2025-21920, CVE-2025-21916)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Netfilter;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21760, CVE-2025-21928, CVE-2025-21877, CVE-2024-58069, CVE-2025-21909, CVE-2025-21926, CVE-2025-21731, CVE-2025-21718, CVE-2025-21763, CVE-2025-21866, CVE-2024-58009, CVE-2025-21971, CVE-2025-21787, CVE-2025-21721, CVE-2024-58072, CVE-2025-21791, CVE-2021-47191, CVE-2025-21865, CVE-2025-21762, CVE-2024-58063, CVE-2025-21910, CVE-2025-21823, CVE-2025-21905, CVE-2025-21708, CVE-2024-58090, CVE-2025-21917, CVE-2024-58051, CVE-2025-21781, CVE-2025-21898, CVE-2025-21922, CVE-2024-58002, CVE-2024-58017, CVE-2024-57986, CVE-2024-58052, CVE-2024-26982, CVE-2025-21848, CVE-2025-21835, CVE-2025-21749, CVE-2024-58014, CVE-2024-58007, CVE-2024-57980, CVE-2025-21715, CVE-2025-21858, CVE-2025-21916, CVE-2025-21811, CVE-2025-21765, CVE-2025-21736, CVE-2025-21647, CVE-2025-21934, CVE-2025-21776, CVE-2025-21761, CVE-2025-21904, CVE-2024-57979, CVE-2024-58020, CVE-2025-21935, CVE-2025-21871, CVE-2025-21704, CVE-2024-57977, CVE-2024-58083, CVE-2025-21764, CVE-2025-21814, CVE-2025-21772, CVE-2025-21719, CVE-2024-58055, CVE-2023-52664, CVE-2024-56599, CVE-2024-58001, CVE-2025-21744, CVE-2024-58085, CVE-2025-21753, CVE-2025-21846, CVE-2024-58010, CVE-2024-26996, CVE-2023-52927, CVE-2024-50055, CVE-2025-21925, CVE-2025-21782, CVE-2024-57973, CVE-2024-58071, CVE-2025-21785, CVE-2025-21859, CVE-2025-21920, CVE-2024-26689, CVE-2023-52741, CVE-2025-21806, CVE-2024-58058, CVE-2025-21722, CVE-2025-21728, CVE-2024-57981, CVE-2025-21948, CVE-2025-21914, CVE-2025-21862, CVE-2025-21735)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Network block device driver;
• Bluetooth drivers;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• Hardware crypto device drivers;
• FireWire subsystem;
• EFI core;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• I3C subsystem;
• InfiniBand drivers;
• Input Device (Mouse) drivers;
• IOMMU subsystem;
• Multiple devices driver;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Fastrpc Driver;
• Network drivers;
• Operating Performance Points (OPP) driver;
• PCI subsystem;
• x86 platform drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• Remote Processor subsystem;
• Real Time Clock drivers;
• S/390 drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• SPI subsystem;
• Media staging drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• UFS subsystem;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Framebuffer layer;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• BPF subsystem;
• Timer subsystem;
• KVM subsystem;
• Networking core;
• ptr_ring data structure definitions;
• Networking subsytem;
• Amateur Radio drivers;
• L3 Master device support module;
• TCP network protocol;
• XFRM subsystem;
• Tracing infrastructure;
• io_uring subsystem;
• Process Accounting mechanism;
• Perf events;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Workqueue subsystem;
• Memory management;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• RxRPC session sockets;
• Network traffic control;
• Wireless networking;
• Key management;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC audio core drivers;
• SOF drivers; (CVE-2025-21737, CVE-2025-21711, CVE-2025-21987, CVE-2025-21848, CVE-2024-49570, CVE-2025-21762, CVE-2025-21738, CVE-2025-21712, CVE-2025-21719, CVE-2025-21870, CVE-2024-57984, CVE-2025-21815, CVE-2025-21744, CVE-2024-58058, CVE-2024-58078, CVE-2024-57990, CVE-2024-54458, CVE-2025-21899, CVE-2025-21814, CVE-2025-21746, CVE-2024-54456, CVE-2025-21739, CVE-2024-58057, CVE-2025-21855, CVE-2025-21758, CVE-2024-58006, CVE-2024-58007, CVE-2025-21720, CVE-2024-58090, CVE-2025-21852, CVE-2024-57982, CVE-2024-58013, CVE-2024-58082, CVE-2025-21825, CVE-2024-58072, CVE-2024-57996, CVE-2025-21787, CVE-2025-21742, CVE-2025-21705, CVE-2025-21829, CVE-2024-58060, CVE-2025-21811, CVE-2025-21900, CVE-2025-21853, CVE-2025-21809, CVE-2025-21938, CVE-2025-21728, CVE-2025-21785, CVE-2025-21732, CVE-2025-21888, CVE-2025-21768, CVE-2025-21875, CVE-2025-21721, CVE-2025-21766, CVE-2025-21892, CVE-2024-57953, CVE-2025-21772, CVE-2025-21735, CVE-2024-58017, CVE-2024-58086, CVE-2024-58084, CVE-2025-21761, CVE-2024-58008, CVE-2024-57988, CVE-2025-21874, CVE-2024-58011, CVE-2025-21706, CVE-2024-57999, CVE-2025-21858, CVE-2024-58061, CVE-2025-21727, CVE-2025-21780, CVE-2024-58051, CVE-2025-21791, CVE-2025-21788, CVE-2025-21786, CVE-2024-58012, CVE-2024-58010, CVE-2024-58001, CVE-2025-21844, CVE-2025-21708, CVE-2024-57834, CVE-2025-21873,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Network block device driver;
• Bluetooth drivers;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• Hardware crypto device drivers;
• FireWire subsystem;
• EFI core;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• I3C subsystem;
• InfiniBand drivers;
• Input Device (Mouse) drivers;
• IOMMU subsystem;
• Multiple devices driver;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Fastrpc Driver;
• Network drivers;
• Operating Performance Points (OPP) driver;
• PCI subsystem;
• x86 platform drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• Remote Processor subsystem;
• Real Time Clock drivers;
• S/390 drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• SPI subsystem;
• Media staging drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• UFS subsystem;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Framebuffer layer;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• BPF subsystem;
• Timer subsystem;
• KVM subsystem;
• Networking core;
• ptr_ring data structure definitions;
• Networking subsytem;
• Amateur Radio drivers;
• L3 Master device support module;
• TCP network protocol;
• XFRM subsystem;
• Tracing infrastructure;
• io_uring subsystem;
• Process Accounting mechanism;
• Perf events;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Workqueue subsystem;
• Memory management;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• RxRPC session sockets;
• Network traffic control;
• Wireless networking;
• Key management;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC audio core drivers;
• SOF drivers; (CVE-2025-21799, CVE-2025-21765, CVE-2024-57834, CVE-2025-21971, CVE-2025-21855, CVE-2024-58019, CVE-2025-21987, CVE-2025-21754, CVE-2025-21779, CVE-2024-57986, CVE-2025-21809, CVE-2025-21887, CVE-2025-21744, CVE-2024-58014, CVE-2025-21892, CVE-2025-21848, CVE-2024-58051, CVE-2024-58085, CVE-2025-21862, CVE-2024-57981, CVE-2024-57987, CVE-2024-58053, CVE-2024-58063, CVE-2024-58079, CVE-2025-21875, CVE-2025-21715, CVE-2024-58004, CVE-2025-21857, CVE-2025-21856, CVE-2025-21938, CVE-2024-58082, CVE-2025-21815, CVE-2025-21864, CVE-2024-52559, CVE-2024-58078, CVE-2024-57989, CVE-2024-58001, CVE-2025-21889, CVE-2025-21739, CVE-2024-58005, CVE-2025-21829, CVE-2024-58069, CVE-2025-21712, CVE-2025-21846, CVE-2025-21883, CVE-2025-21852, CVE-2025-21808, CVE-2025-21900, CVE-2025-21888, CVE-2025-21784, CVE-2025-21838, CVE-2024-58054, CVE-2025-21781, CVE-2025-21737, CVE-2024-58013, CVE-2025-21885, CVE-2025-21877, CVE-2024-58010, CVE-2025-21844, CVE-2024-58012, CVE-2024-58083, CVE-2025-21783, CVE-2025-21798, CVE-2024-57973, CVE-2024-57982, CVE-2025-21708, CVE-2024-58003, CVE-2025-21786, CVE-2025-21750, CVE-2025-21870, CVE-2025-21745, CVE-2024-58081, CVE-2024-57979, CVE-2025-21718, CVE-2025-21816, CVE-2025-21868, CVE-2025-21731, CVE-2025-21814, CVE-2025-21826, CVE-2024-58006, CVE-2025-21821, CVE-2024-57852, CVE-2025-21746,…

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848)

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• ATA over ethernet (AOE) driver;
• Network block device driver;
• Virtio block driver;
• Character device driver;
• TPM device driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I2C subsystem;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• LED subsystem;
• Mailbox framework;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• Virtio pmem driver;
• NVME drivers;
• Parport drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• Renesas USBHS Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• Ext4 file system;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• KVM subsystem;
• L3 Master device support module;
• LAPB network protocol;
• Network namespace;
• Netfilter;
• Network traffic control;
• Network sockets;
• TCP network protocol;
• Kernel init infrastructure;
• Process Accounting mechanism;
• BPF subsystem;
• Kernel CPU control infrastructure;
• Perf events;
• printk logging mechanism;
• Arbitrary resource management;
• Scheduler infrastructure;
• Tracing infrastructure;
• Closures library;
• Memory management;
• 802.1Q VLAN protocol;
• 9P file system network protocol;
• Amateur Radio drivers;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Ethernet bridge;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• MAC80211 subsystem;
• IEEE 802.15.4 subsystem;
• Netlink;
• NET/ROM layer;
• NFC subsystem;
• Open vSwitch; -…