CVE-2024-58034

In the Linux kernel, the following vulnerability has been resolved: memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() As of_find_node_by_name() release the reference of the argument device node, tegra_emc_find_node_by_ram_code() releases some device nodes while still in use, resulting in possible UAFs. According to the bindings and the in-tree DTS files, the "emc-tables" node is always device's child node with the property "nvidia,use-ram-code", and the "lpddr2" node is a child of the "emc-tables" node. Thus utilize the for_each_child_of_node() macro and of_get_child_by_name() instead of of_find_node_by_name() to simplify the code. This bug was found by an experimental verification tool that I am developing. [krzysztof: applied v1, adjust the commit msg to incorporate v2 parts]

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

dma-debug: fix a possible deadlock on radix_lock

radix_lock() shouldn't be held while holding dma_hash_entry[idx].lock otherwise, there's a possible deadlock scenario when dma debug API is called holding rq_lock():

CPU0 CPU1 CPU2 dma_free_attrs() check_unmap() add_dma_entry() __schedule() //out (A) rq_lock() get_hash_bucket() (A) dma_entry_hash check_sync() (A) radix_lock() (W) dma_entry_hash dma_entry_free() (W) radix_lock() // CPU2's one (W) rq_lock()

CPU1 situation can happen when it extending radix tree and it tries to wake up kswapd via wake_all_kswapd().

CPU2 situation can happen while perf_event_task_sched_out() (i.e. dma sync operation is called while deleting perf_event using etm and etr tmc which are Arm Coresight hwtracing driver backends).

To remove this possible situation, call dma_entry_free() after put_hash_bucket() in check_unmap().(CVE-2024-47143)

In the Linux kernel, the following vulnerability has been resolved:

dlm: fix possible lkb_resource null dereference

This patch fixes a possible null pointer dereference when this function is called from request_lock() as lkb->lkb_resource is not assigned yet, only after validate_lock_args() by calling attach_lkb(). Another issue is that a resource name could be a non printable bytearray and we cannot assume to be ASCII coded.

The log functionality is probably never being hit when DLM is used in normal way and no debug logging is enabled. The null pointer dereference can only occur on a new created lkb that does not have the resource assigned yet, it probably never hits the null pointer dereference but we should be sure that other changes might not change this behaviour and we actually can hit the mentioned null pointer dereference.

In this patch we just drop the printout of the resource name, the lkb id is enough to make a possible connection to a resource name if this exists.(CVE-2024-47809)

In the Linux kernel, the following vulnerability has been resolved:

bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again

Commit 028ddcac477b ("bcache: Remove unnecessary NULL point check in node allocations") leads a NULL pointer deference in cache_set_flush().

1721 if (!IS_ERR_OR_NULL(c->root)) 1722 list_add(&c->root->list, &c->btree_cache);

>From the above code in cache_set_flush(), if previous registration code fails before allocating c->root, it is possible c->root is NULL as what it is initialized. __bch_btree_node_alloc() never returns NULL but c->root is possible to be NULL at above line 1721.

This patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.(CVE-2024-48881)

In the Linux kernel, the following vulnerability has been resolved:

vfio/pci: Properly hide first-in-list PCIe extended capability

There are cases where a PCIe extended capability should be hidden from the user. For example, an unknown capability (i.e., capability with ID greater than PCI_EXT_CAP_ID_MAX) or a capability that is intentionally chosen to be hidden from the user.

Hiding a capability is done by virtualizing and modifying the 'Next Capability Offset' field of the previous capability so it points to the capability after the one that should be hidden.

The special case where the first capability in the list should be hidden is handled differently because there is no previous capability that can be modified. In this case, the capability ID and version are zeroed while leaving the next pointer intact. This hides the capability and leaves an anchor for the rest of the capability list.

However, today,…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

syzkaller reported a use-after-free of UDP kernel socket in cleanup_bearer() without repro. [0][1]

When bearer_disable() calls tipc_udp_disable(), cleanup of the UDP kernel socket is deferred by work calling cleanup_bearer().

tipc_exit_net() waits for such works to finish by checking tipc_net(net)->wq_count. However, the work decrements the count too early before releasing the kernel socket, unblocking cleanup_net() and resulting in use-after-free.

Let's move the decrement after releasing the socket in cleanup_bearer().

[0]: ref_tracker: net notrefcnt@000000009b3d1faf has 1/1 users at sk_alloc+0x438/0x608 inet_create+0x4c8/0xcb0 __sock_create+0x350/0x6b8 sock_create_kern+0x58/0x78 udp_sock_create4+0x68/0x398 udp_sock_create+0x88/0xc8 tipc_udp_enable+0x5e8/0x848 __tipc_nl_bearer_enable+0x84c/0xed8 tipc_nl_bearer_enable+0x38/0x60 genl_family_rcv_msg_doit+0x170/0x248 genl_rcv_msg+0x400/0x5b0 netlink_rcv_skb+0x1dc/0x398 genl_rcv+0x44/0x68 netlink_unicast+0x678/0x8b0 netlink_sendmsg+0x5e4/0x898 ____sys_sendmsg+0x500/0x830

[1]: BUG: KMSAN: use-after-free in udp_hashslot include/net/udp.h:85 [inline] BUG: KMSAN: use-after-free in udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979 udp_hashslot include/net/udp.h:85 [inline] udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979 sk_common_release+0xaf/0x3f0 net/core/sock.c:3820 inet_release+0x1e0/0x260 net/ipv4/af_inet.c:437 inet6_release+0x6f/0xd0 net/ipv6/af_inet6.c:489 __sock_release net/socket.c:658 [inline] sock_release+0xa0/0x210 net/socket.c:686 cleanup_bearer+0x42d/0x4c0 net/tipc/udp_media.c:819 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310 worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391 kthread+0x531/0x6b0 kernel/kthread.c:389 ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244

Uninit was created at: slab_free_hook mm/slub.c:2269 [inline] slab_free mm/slub.c:4580 [inline] kmem_cache_free+0x207/0xc40 mm/slub.c:4682 net_free net/core/net_namespace.c:454 [inline] cleanup_net+0x16f2/0x19d0 net/core/net_namespace.c:647 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310 worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391 kthread+0x531/0x6b0 kernel/kthread.c:389 ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244

CPU: 0 UID: 0 PID: 54 Comm: kworker/0:2 Not tainted 6.12.0-rc1-00131-gf66ebf37d69c #7 91723d6f74857f70725e1583cba3cf4adc716cfa Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 Workqueue: events cleanup_bearer(CVE-2024-56642)

In the Linux kernel, the following vulnerability has been resolved:

net: hsr: avoid potential out-of-bound access in fill_frame_info()

syzbot is able to feed a packet with 14 bytes, pretending it is a vlan one.

Since fill_frame_info() is relying on skb->mac_len already, extend the check to cover this case.

BUG: KMSAN: uninit-value in fill_frame_info net/hsr/hsr_forward.c:709 [inline] BUG: KMSAN: uninit-value in hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724 fill_frame_info net/hsr/hsr_forward.c:709 [inline] hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724 hsr_dev_xmit+0x2f0/0x350 net/hsr/hsr_device.c:235 __netdev_start_xmit include/linux/netdevice.h:5002 [inline] netdev_start_xmit include/linux/netdevice.h:5011 [inline] xmit_one net/core/dev.c:3590 [inline] dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3606 __dev_queue_xmit+0x366a/0x57d0 net/core/dev.c:4434 dev_queue_xmit…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ext4: update s_journal_inum if it changes after journal replay

When mounting a crafted ext4 image, s_journal_inum may change after journal replay, which is obviously unreasonable because we have successfully loaded and replayed the journal through the old s_journal_inum. And the new s_journal_inum bypasses some of the checks in ext4_get_journal(), which may trigger a null pointer dereference problem. So if s_journal_inum changes after the journal replay, we ignore the change, and rewrite the current journal_inum to the superblock.(CVE-2023-53091)

In the Linux kernel, the following vulnerability has been resolved:

vxlan: Fix nexthop hash size

The nexthop code expects a 31 bit hash, such as what is returned by fib_multipath_hash() and rt6_multipath_hash(). Passing the 32 bit hash returned by skb_get_hash() can lead to problems related to the fact that 'int hash' is a negative number when the MSB is set.

In the case of hash threshold nexthop groups, nexthop_select_path_hthr() will disproportionately select the first nexthop group entry. In the case of resilient nexthop groups, nexthop_select_path_res() may do an out of bounds access in nh_buckets[], for example: hash = -912054133 num_nh_buckets = 2 bucket_index = 65535

which leads to the following panic:

BUG: unable to handle page fault for address: ffffc900025910c8 PGD 100000067 P4D 100000067 PUD 10026b067 PMD 0 Oops: 0002 [#1] PREEMPT SMP KASAN NOPTI CPU: 4 PID: 856 Comm: kworker/4:3 Not tainted 6.5.0-rc2+ #34 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Workqueue: ipv6_addrconf addrconf_dad_work RIP: 0010:nexthop_select_path+0x197/0xbf0 Code: c1 e4 05 be 08 00 00 00 4c 8b 35 a4 14 7e 01 4e 8d 6c 25 00 4a 8d 7c 25 08 48 01 dd e8 c2 25 15 ff 49 8d 7d 08 e8 39 13 15 ff <4d> 89 75 08 48 89 ef e8 7d 12 15 ff 48 8b 5d 00 e8 14 55 2f 00 85 RSP: 0018:ffff88810c36f260 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 00000000002000c0 RCX: ffffffffaf02dd77 RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffc900025910c8 RBP: ffffc900025910c0 R08: 0000000000000001 R09: fffff520004b2219 R10: ffffc900025910cf R11: 31392d2068736168 R12: 00000000002000c0 R13: ffffc900025910c0 R14: 00000000fffef608 R15: ffff88811840e900 FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc900025910c8 CR3: 0000000129d00000 CR4: 0000000000750ee0 PKRU: 55555554 Call Trace: <TASK> ? __die+0x23/0x70 ? page_fault_oops+0x1ee/0x5c0 ? __pfx_is_prefetch.constprop.0+0x10/0x10 ? __pfx_page_fault_oops+0x10/0x10 ? search_bpf_extables+0xfe/0x1c0 ? fixup_exception+0x3b/0x470 ? exc_page_fault+0xf6/0x110 ? asm_exc_page_fault+0x26/0x30 ? nexthop_select_path+0x197/0xbf0 ? nexthop_select_path+0x197/0xbf0 ? lock_is_held_type+0xe7/0x140 vxlan_xmit+0x5b2/0x2340 ? __lock_acquire+0x92b/0x3370 ? __pfx_vxlan_xmit+0x10/0x10 ? __pfx___lock_acquire+0x10/0x10 ? __pfx_register_lock_class+0x10/0x10 ? skb_network_protocol+0xce/0x2d0 ? dev_hard_start_xmit+0xca/0x350 ? __pfx_vxlan_xmit+0x10/0x10 dev_hard_start_xmit+0xca/0x350 __dev_queue_xmit+0x513/0x1e20 ? __pfx___dev_queue_xmit+0x10/0x10 ? __pfx_lock_release+0x10/0x10 ? mark_held_locks+0x44/0x90 ? skb_push+0x4c/0x80 ? eth_header+0x81/0xe0 ? __pfx_eth_header+0x10/0x10 ? neigh_resolve_output+0x215/0x310 ? ip6_finish_output2+0x2ba/0xc90 ip6_finish_output2+0x2ba/0xc90 ? lock_release+0x236/0x3e0 ? ip6_mtu+0xbb/0x240 ? __pfx_ip6_finish_output2+0x10/0x10 ? find_held_lock+0x83/0xa0 ? lock_is_held_type+0xe7/0x140 ip6_finish_output+0x1ee/0x780 ip6_output+0x138/0x460 ? __pfx_ip6_output+0x10/0x10 ? __pfx___lock_acquire+0x10/0x10 ? __pfx_ip6_finish_output+0x10/0x10 NF_HOOK.constprop.0+0xc0/0x420 ? __pfx_NF_HOOK.constprop.0+0x10/0x10 ?…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ext4: update s_journal_inum if it changes after journal replay

When mounting a crafted ext4 image, s_journal_inum may change after journal replay, which is obviously unreasonable because we have successfully loaded and replayed the journal through the old s_journal_inum. And the new s_journal_inum bypasses some of the checks in ext4_get_journal(), which may trigger a null pointer dereference problem. So if s_journal_inum changes after the journal replay, we ignore the change, and rewrite the current journal_inum to the superblock.(CVE-2023-53091)

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write

During the sysfs firmware write process, a use-after-free read warning is logged from the lpfc_wr_object() routine:

BUG: KFENCE: use-after-free read in lpfc_wr_object+0x235/0x310 [lpfc] Use-after-free read at 0x0000000000cf164d (in kfence-#111): lpfc_wr_object+0x235/0x310 [lpfc] lpfc_write_firmware.cold+0x206/0x30d [lpfc] lpfc_sli4_request_firmware_update+0xa6/0x100 [lpfc] lpfc_request_firmware_upgrade_store+0x66/0xb0 [lpfc] kernfs_fop_write_iter+0x121/0x1b0 new_sync_write+0x11c/0x1b0 vfs_write+0x1ef/0x280 ksys_write+0x5f/0xe0 do_syscall_64+0x59/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd

The driver accessed wr_object pointer data, which was initialized into mailbox payload memory, after the mailbox object was released back to the mailbox pool.

Fix by moving the mailbox free calls to the end of the routine ensuring that we don't reference internal mailbox memory after release.(CVE-2023-53282)

In the Linux kernel, the following vulnerability has been resolved:

start_kernel: Add __no_stack_protector function attribute

Back during the discussion of commit a9a3ed1eff36 ("x86: Fix early boot crash on gcc-10, third try") we discussed the need for a function attribute to control the omission of stack protectors on a per-function basis; at the time Clang had support for no_stack_protector but GCC did not. This was fixed in gcc-11. Now that the function attribute is available, let's start using it.

Callers of boot_init_stack_canary need to use this function attribute unless they're compiled with -fno-stack-protector, otherwise the canary stored in the stack slot of the caller will differ upon the call to boot_init_stack_canary. This will lead to a call to __stack_chk_fail() then panic.(CVE-2023-53491)

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Fix hci_suspend_sync crash

If hci_unregister_dev() frees the hci_dev object but hci_suspend_notifier may still be accessing it, it can cause the program to crash. Here's the call trace: <4>[102152.653246] Call Trace: <4>[102152.653254] hci_suspend_sync+0x109/0x301 [bluetooth] <4>[102152.653259] hci_suspend_dev+0x78/0xcd [bluetooth] <4>[102152.653263] hci_suspend_notifier+0x42/0x7a [bluetooth] <4>[102152.653268] notifier_call_chain+0x43/0x6b <4>[102152.653271] __blocking_notifier_call_chain+0x48/0x69 <4>[102152.653273] __pm_notifier_call_chain+0x22/0x39 <4>[102152.653276] pm_suspend+0x287/0x57c <4>[102152.653278] state_store+0xae/0xe5 <4>[102152.653281] kernfs_fop_write+0x109/0x173 <4>[102152.653284] __vfs_write+0x16f/0x1a2 <4>[102152.653287] ? selinux_file_permission+0xca/0x16f <4>[102152.653289] ? security_file_permission+0x36/0x109 <4>[102152.653291] vfs_write+0x114/0x21d <4>[102152.653293] __x64_sys_write+0x7b/0xdb <4>[102152.653296] do_syscall_64+0x59/0x194 <4>[102152.653299] entry_SYSCALL_64_after_hwframe+0x5c/0xc1

This patch holds the reference count of the hci_dev object while processing it in…

In the Linux kernel, the following vulnerability has been resolved: memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() As of_find_node_by_name() release the reference of the argument device node, tegra_emc_find_node_by_ram_code() releases some device nodes while still in use, resulting in possible UAFs. According to the bindings and the in-tree DTS files, the "emc-tables" node is always device's child node with the property "nvidia,use-ram-code", and the "lpddr2" node is a child of the "emc-tables" node. Thus utilize the for_each_child_of_node() macro and of_get_child_by_name() instead of of_find_node_by_name() to simplify the code. This bug was found by an experimental verification tool that I am developing. [krzysztof: applied v1, adjust the commit msg to incorporate v2 parts]

Root has patched CVE-2024-58034 in the linux package for Root:Debian:11. Multiple fixed versions available.

Root has patched CVE-2024-58034 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-43869: perf: Fix hang while freeing sigtrap event (bsc#1229491).
• CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
• CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
• CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086). -…

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
• CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
• CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
• CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
• CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
• CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
• CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
• CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
• CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
• CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
• CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
• CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
• CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
• CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
• CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738).
• CVE-2025-21760: ndisc: extend RCU protection in ndisc_send_skb() (bsc#1238763).
• CVE-2025-21761: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (bsc#1238775).
• CVE-2025-21762: arp: use RCU protection in arp_xmit() (bsc#1238780).
• CVE-2025-21763:…

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
• CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
• CVE-2024-57979: kABI workaround for pps changes (bsc#1238521).
• CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
• CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
• CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
• CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
• CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
• CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
• CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
• CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
• CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
• CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
• CVE-2025-21733: tracing/osnoise: Fix resetting of tracepoints (bsc#1238494).
• CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
• CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
• CVE-2025-21754: btrfs: fix assertion failure when splitting ordered extent after transaction abort (bsc#1238496).
• CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738). -…

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
• CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
• CVE-2024-57979: kABI workaround for pps changes (bsc#1238521).
• CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
• CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
• CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
• CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
• CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
• CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
• CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
• CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
• CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
• CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
• CVE-2025-21733: tracing/osnoise: Fix resetting of tracepoints (bsc#1238494).
• CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
• CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
• CVE-2025-21754: btrfs: fix assertion failure when splitting ordered extent after transaction abort (bsc#1238496).
• CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738). -…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
• CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
• CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21731, CVE-2025-21926, CVE-2025-21830, CVE-2024-58010, CVE-2025-21745, CVE-2025-21871, CVE-2024-57980, CVE-2025-21916, CVE-2025-21735, CVE-2025-21763, CVE-2025-21799, CVE-2025-21811, CVE-2025-21814, CVE-2024-58083, CVE-2025-21922, CVE-2025-21802, CVE-2024-58034, CVE-2025-21758, CVE-2024-58069, CVE-2025-21905, CVE-2024-57986, CVE-2025-21718, CVE-2024-58020, CVE-2025-21858, CVE-2025-21749, CVE-2025-21928, CVE-2024-58085, CVE-2025-21795, CVE-2025-21744, CVE-2025-21776, CVE-2025-21804, CVE-2024-57973, CVE-2025-21848, CVE-2025-21844, CVE-2024-56721, CVE-2024-58079, CVE-2025-21781, CVE-2025-21866, CVE-2024-58052, CVE-2024-58017, CVE-2024-58071, CVE-2025-21791, CVE-2024-26982, CVE-2025-21787, CVE-2024-58090, CVE-2025-21951, CVE-2025-21846, CVE-2025-21722, CVE-2024-58001, CVE-2025-21715, CVE-2025-21919, CVE-2025-21904, CVE-2024-57977, CVE-2025-21785, CVE-2025-21950, CVE-2025-21924, CVE-2024-57979, CVE-2025-21711, CVE-2024-47726, CVE-2024-58002, CVE-2025-21914, CVE-2024-58086, CVE-2024-58005, CVE-2025-21835, CVE-2024-58051, CVE-2025-21761, CVE-2025-21760, CVE-2025-21767, CVE-2025-21766, CVE-2025-21726, CVE-2025-21865, CVE-2024-58014, CVE-2025-21878, CVE-2025-21934, CVE-2024-58007, CVE-2025-21898, CVE-2025-21806, CVE-2024-58058, CVE-2025-21779, CVE-2024-58063, CVE-2025-21708, CVE-2025-21684, CVE-2024-57834, CVE-2025-21971, CVE-2025-21762, CVE-2025-21728, CVE-2024-58076, CVE-2025-21704, CVE-2025-21719, CVE-2025-21948, CVE-2025-21707, CVE-2025-21917, CVE-2025-21782, CVE-2025-21943, CVE-2025-21765, CVE-2025-21721, CVE-2024-58016, CVE-2025-21859, CVE-2025-21909, CVE-2025-21748, CVE-2025-21912, CVE-2025-21736, CVE-2025-21862, CVE-2024-57978, CVE-2025-21826, CVE-2025-21920, CVE-2025-21772, CVE-2025-21877, CVE-2025-21935, CVE-2024-56599, CVE-2025-21820, CVE-2025-21764, CVE-2025-21796, CVE-2025-21887, CVE-2025-21753, CVE-2025-21910, CVE-2024-57981, CVE-2025-21727, CVE-2025-21875, CVE-2024-58072, CVE-2024-58055, CVE-2025-21925, CVE-2025-21823, CVE-2025-21647)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21731, CVE-2025-21926, CVE-2025-21830, CVE-2024-58010, CVE-2025-21745, CVE-2025-21871, CVE-2024-57980, CVE-2025-21916, CVE-2025-21735, CVE-2025-21763, CVE-2025-21799, CVE-2025-21811, CVE-2025-21814, CVE-2024-58083, CVE-2025-21922, CVE-2025-21802, CVE-2024-58034, CVE-2025-21758, CVE-2024-58069, CVE-2025-21905, CVE-2024-57986, CVE-2025-21718, CVE-2024-58020, CVE-2025-21858, CVE-2025-21749, CVE-2025-21928, CVE-2024-58085, CVE-2025-21795, CVE-2025-21744, CVE-2025-21776, CVE-2025-21804, CVE-2024-57973, CVE-2025-21848, CVE-2025-21844, CVE-2024-56721, CVE-2024-58079, CVE-2025-21781, CVE-2025-21866, CVE-2024-58052, CVE-2024-58017, CVE-2024-58071, CVE-2025-21791, CVE-2024-26982, CVE-2025-21787, CVE-2024-58090, CVE-2025-21951, CVE-2025-21846, CVE-2025-21722, CVE-2024-58001, CVE-2025-21715, CVE-2025-21919, CVE-2025-21904, CVE-2024-57977, CVE-2025-21785, CVE-2025-21950, CVE-2025-21924, CVE-2024-57979, CVE-2025-21711, CVE-2024-47726, CVE-2024-58002, CVE-2025-21914, CVE-2024-58086, CVE-2024-58005, CVE-2025-21835, CVE-2024-58051, CVE-2025-21761, CVE-2025-21760, CVE-2025-21767, CVE-2025-21766, CVE-2025-21726, CVE-2025-21865, CVE-2024-58014, CVE-2025-21878, CVE-2025-21934, CVE-2024-58007, CVE-2025-21898, CVE-2025-21806, CVE-2024-58058, CVE-2025-21779, CVE-2024-58063, CVE-2025-21708, CVE-2025-21684, CVE-2024-57834, CVE-2025-21971, CVE-2025-21762, CVE-2025-21728, CVE-2024-58076, CVE-2025-21704, CVE-2025-21719, CVE-2025-21948, CVE-2025-21707, CVE-2025-21917, CVE-2025-21782, CVE-2025-21943, CVE-2025-21765, CVE-2025-21721, CVE-2024-58016, CVE-2025-21859, CVE-2025-21909, CVE-2025-21748, CVE-2025-21912, CVE-2025-21736, CVE-2025-21862, CVE-2024-57978, CVE-2025-21826, CVE-2025-21920, CVE-2025-21772, CVE-2025-21877, CVE-2025-21935, CVE-2024-56599, CVE-2025-21820, CVE-2025-21764, CVE-2025-21796, CVE-2025-21887, CVE-2025-21753, CVE-2025-21910, CVE-2024-57981, CVE-2025-21727, CVE-2025-21875, CVE-2024-58072, CVE-2024-58055, CVE-2025-21925, CVE-2025-21823, CVE-2025-21647)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2024-58069, CVE-2025-21912, CVE-2025-21922, CVE-2025-21765, CVE-2025-21823, CVE-2025-21971, CVE-2024-58010, CVE-2025-21767, CVE-2025-21727, CVE-2025-21916, CVE-2025-21859, CVE-2025-21844, CVE-2024-58063, CVE-2025-21704, CVE-2024-57986, CVE-2025-21846, CVE-2024-58007, CVE-2025-21708, CVE-2025-21731, CVE-2024-58058, CVE-2024-58090, CVE-2025-21791, CVE-2025-21917, CVE-2024-26982, CVE-2024-47726, CVE-2025-21848, CVE-2025-21948, CVE-2025-21796, CVE-2025-21919, CVE-2025-21950, CVE-2024-58085, CVE-2025-21766, CVE-2025-21764, CVE-2025-21781, CVE-2024-58071, CVE-2024-58072, CVE-2025-21726, CVE-2025-21858, CVE-2024-58005, CVE-2025-21866, CVE-2025-21935, CVE-2025-21753, CVE-2025-21904, CVE-2025-21877, CVE-2024-58002, CVE-2025-21776, CVE-2025-21926, CVE-2025-21865, CVE-2025-21898, CVE-2024-58076, CVE-2025-21707, CVE-2025-21735, CVE-2025-21905, CVE-2025-21928, CVE-2025-21647, CVE-2025-21718, CVE-2025-21814, CVE-2025-21925, CVE-2024-58001, CVE-2025-21811, CVE-2024-58055, CVE-2024-58086, CVE-2025-21736, CVE-2025-21871, CVE-2025-21878, CVE-2025-21684, CVE-2025-21763, CVE-2025-21782, CVE-2024-58052, CVE-2025-21820, CVE-2024-57979, CVE-2025-21787, CVE-2025-21749, CVE-2025-21779, CVE-2024-57981, CVE-2025-21719, CVE-2025-21785, CVE-2024-57973, CVE-2025-21745, CVE-2025-21943, CVE-2025-21875, CVE-2025-21795, CVE-2025-21748, CVE-2025-21862, CVE-2025-21744, CVE-2025-21835, CVE-2025-21762, CVE-2025-21760, CVE-2024-58051, CVE-2024-58020, CVE-2024-56721, CVE-2025-21772, CVE-2025-21914, CVE-2024-58014, CVE-2024-58017, CVE-2025-21920, CVE-2025-21711, CVE-2024-57834, CVE-2025-21910, CVE-2025-21909, CVE-2025-21887, CVE-2024-56599, CVE-2025-21806, CVE-2025-21826, CVE-2025-21722, CVE-2024-57977, CVE-2025-21951, CVE-2025-21721, CVE-2024-58034, CVE-2024-57980, CVE-2024-58079, CVE-2024-58083, CVE-2025-21758, CVE-2024-58016, CVE-2024-57978, CVE-2025-21799, CVE-2025-21715, CVE-2025-21761, CVE-2025-21934, CVE-2025-21924, CVE-2025-21830, CVE-2025-21728, CVE-2025-21802, CVE-2025-21804)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21761, CVE-2025-21715, CVE-2025-21802, CVE-2024-57980, CVE-2025-21708, CVE-2025-21722, CVE-2025-21948, CVE-2024-58063, CVE-2025-21765, CVE-2024-58086, CVE-2025-21753, CVE-2025-21943, CVE-2025-21924, CVE-2024-57978, CVE-2025-21760, CVE-2025-21726, CVE-2025-21647, CVE-2025-21866, CVE-2025-21763, CVE-2025-21950, CVE-2024-57977, CVE-2025-21799, CVE-2024-57981, CVE-2025-21871, CVE-2025-21887, CVE-2025-21772, CVE-2025-21878, CVE-2024-58090, CVE-2025-21859, CVE-2024-57986, CVE-2024-57973, CVE-2024-58007, CVE-2025-21898, CVE-2025-21787, CVE-2025-21865, CVE-2025-21848, CVE-2025-21806, CVE-2024-58005, CVE-2024-58058, CVE-2024-56599, CVE-2024-58034, CVE-2025-21846, CVE-2025-21719, CVE-2025-21749, CVE-2025-21766, CVE-2025-21744, CVE-2024-58010, CVE-2025-21704, CVE-2024-26982, CVE-2024-58020, CVE-2025-21916, CVE-2024-58055, CVE-2024-58014, CVE-2024-58051, CVE-2025-21767, CVE-2025-21707, CVE-2025-21795, CVE-2024-58002, CVE-2025-21928, CVE-2025-21925, CVE-2024-58085, CVE-2025-21877, CVE-2025-21684, CVE-2024-58083, CVE-2025-21904, CVE-2024-58016, CVE-2025-21934, CVE-2025-21951, CVE-2025-21782, CVE-2025-21758, CVE-2025-21728, CVE-2025-21858, CVE-2025-21823, CVE-2025-21910, CVE-2025-21736, CVE-2025-21796, CVE-2025-21779, CVE-2025-21718, CVE-2024-56721, CVE-2024-58069, CVE-2024-58079, CVE-2025-21721, CVE-2025-21711, CVE-2025-21791, CVE-2025-21971, CVE-2025-21811, CVE-2025-21785, CVE-2025-21814, CVE-2025-21764, CVE-2024-58052, CVE-2025-21776, CVE-2024-58076, CVE-2024-47726, CVE-2025-21762, CVE-2025-21804, CVE-2025-21926, CVE-2025-21826, CVE-2025-21731, CVE-2024-57979, CVE-2025-21909, CVE-2025-21835, CVE-2025-21905, CVE-2025-21748, CVE-2024-58071, CVE-2025-21830, CVE-2025-21922, CVE-2024-57834, CVE-2025-21745, CVE-2025-21727, CVE-2025-21781, CVE-2025-21862, CVE-2024-58072, CVE-2025-21844, CVE-2025-21912, CVE-2025-21875, CVE-2025-21919, CVE-2025-21820, CVE-2024-58017, CVE-2025-21914, CVE-2025-21917, CVE-2025-21920, CVE-2025-21735, CVE-2025-21935, CVE-2024-58001)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21760, CVE-2025-21904, CVE-2025-21708, CVE-2025-21719, CVE-2024-58058, CVE-2025-21814, CVE-2024-56721, CVE-2025-21715, CVE-2024-58016, CVE-2025-21796, CVE-2025-21795, CVE-2025-21728, CVE-2025-21776, CVE-2024-57834, CVE-2025-21806, CVE-2025-21684, CVE-2025-21858, CVE-2025-21875, CVE-2025-21718, CVE-2025-21726, CVE-2025-21762, CVE-2025-21745, CVE-2025-21749, CVE-2025-21910, CVE-2025-21707, CVE-2024-57986, CVE-2025-21735, CVE-2024-58002, CVE-2025-21753, CVE-2025-21909, CVE-2025-21934, CVE-2025-21802, CVE-2024-58010, CVE-2025-21862, CVE-2025-21887, CVE-2025-21948, CVE-2024-57977, CVE-2025-21781, CVE-2025-21928, CVE-2024-26982, CVE-2025-21704, CVE-2024-58071, CVE-2024-57980, CVE-2025-21916, CVE-2025-21647, CVE-2024-57978, CVE-2025-21951, CVE-2025-21766, CVE-2025-21924, CVE-2025-21920, CVE-2025-21835, CVE-2025-21846, CVE-2025-21791, CVE-2024-58063, CVE-2024-58007, CVE-2025-21877, CVE-2025-21878, CVE-2025-21917, CVE-2025-21779, CVE-2024-57973, CVE-2024-57979, CVE-2025-21772, CVE-2024-58014, CVE-2025-21711, CVE-2025-21919, CVE-2024-58083, CVE-2025-21763, CVE-2024-58072, CVE-2025-21943, CVE-2025-21866, CVE-2025-21811, CVE-2025-21767, CVE-2025-21761, CVE-2025-21799, CVE-2024-56599, CVE-2025-21820, CVE-2025-21871, CVE-2025-21935, CVE-2024-58069, CVE-2024-58090, CVE-2024-58005, CVE-2025-21736, CVE-2025-21912, CVE-2025-21823, CVE-2025-21922, CVE-2025-21721, CVE-2024-58076, CVE-2025-21905, CVE-2025-21865, CVE-2025-21830, CVE-2024-58001, CVE-2024-58086, CVE-2024-58017, CVE-2024-58052, CVE-2025-21744, CVE-2025-21859, CVE-2025-21787, CVE-2024-58085, CVE-2025-21731, CVE-2024-58051, CVE-2025-21914, CVE-2025-21748, CVE-2024-58020, CVE-2025-21804, CVE-2025-21727, CVE-2025-21765, CVE-2025-21826, CVE-2025-21758, CVE-2024-58034, CVE-2024-58055, CVE-2025-21844, CVE-2025-21782, CVE-2024-57981, CVE-2025-21785, CVE-2025-21848, CVE-2025-21898, CVE-2025-21722, CVE-2025-21925, CVE-2025-21764, CVE-2024-47726, CVE-2025-21971, CVE-2025-21926, CVE-2025-21950, CVE-2024-58079)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2024-57973, CVE-2025-21728, CVE-2025-21684, CVE-2024-57980, CVE-2025-21919, CVE-2025-21802, CVE-2025-21748, CVE-2024-58034, CVE-2025-21877, CVE-2024-57981, CVE-2024-58071, CVE-2025-21926, CVE-2025-21848, CVE-2025-21766, CVE-2024-57834, CVE-2024-58085, CVE-2025-21914, CVE-2025-21758, CVE-2025-21707, CVE-2025-21726, CVE-2025-21731, CVE-2025-21916, CVE-2025-21826, CVE-2025-21917, CVE-2025-21760, CVE-2025-21925, CVE-2024-58086, CVE-2025-21948, CVE-2025-21943, CVE-2025-21782, CVE-2024-56599, CVE-2025-21875, CVE-2025-21753, CVE-2025-21721, CVE-2025-21711, CVE-2025-21787, CVE-2025-21928, CVE-2024-57979, CVE-2025-21779, CVE-2025-21924, CVE-2024-58020, CVE-2025-21905, CVE-2024-58002, CVE-2025-21744, CVE-2025-21763, CVE-2024-58017, CVE-2025-21736, CVE-2024-58069, CVE-2025-21715, CVE-2024-58083, CVE-2025-21934, CVE-2024-58055, CVE-2025-21761, CVE-2025-21772, CVE-2025-21796, CVE-2025-21718, CVE-2025-21719, CVE-2025-21887, CVE-2025-21806, CVE-2024-58063, CVE-2025-21871, CVE-2025-21858, CVE-2025-21922, CVE-2025-21767, CVE-2024-58058, CVE-2024-57986, CVE-2025-21971, CVE-2025-21912, CVE-2025-21862, CVE-2024-58001, CVE-2024-58005, CVE-2024-58079, CVE-2025-21749, CVE-2024-58076, CVE-2024-47726, CVE-2025-21722, CVE-2024-58007, CVE-2024-26982, CVE-2024-58016, CVE-2025-21647, CVE-2025-21814, CVE-2024-57978, CVE-2025-21823, CVE-2025-21795, CVE-2025-21910, CVE-2024-58051, CVE-2024-58010, CVE-2025-21776, CVE-2025-21859, CVE-2025-21950, CVE-2025-21811, CVE-2025-21935, CVE-2025-21799, CVE-2025-21835, CVE-2024-58090, CVE-2025-21844, CVE-2024-58052, CVE-2025-21951, CVE-2025-21865, CVE-2025-21820, CVE-2025-21804, CVE-2025-21765, CVE-2025-21727, CVE-2025-21830, CVE-2025-21846, CVE-2025-21781, CVE-2025-21704, CVE-2025-21735, CVE-2024-58072, CVE-2025-21878, CVE-2025-21909, CVE-2024-56721, CVE-2025-21866, CVE-2025-21904, CVE-2025-21898, CVE-2025-21920, CVE-2025-21745, CVE-2025-21785, CVE-2025-21791, CVE-2024-57977, CVE-2025-21764, CVE-2024-58014, CVE-2025-21762, CVE-2025-21708)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21767, CVE-2025-21875, CVE-2025-21719, CVE-2025-21760, CVE-2025-21704, CVE-2025-21749, CVE-2024-56721, CVE-2025-21731, CVE-2025-21910, CVE-2024-58063, CVE-2025-21835, CVE-2025-21726, CVE-2024-58086, CVE-2025-21934, CVE-2024-58014, CVE-2025-21904, CVE-2024-56599, CVE-2025-21727, CVE-2025-21877, CVE-2025-21799, CVE-2024-58071, CVE-2025-21776, CVE-2025-21905, CVE-2025-21926, CVE-2025-21922, CVE-2025-21858, CVE-2024-47726, CVE-2025-21647, CVE-2025-21764, CVE-2025-21862, CVE-2025-21846, CVE-2025-21848, CVE-2024-57973, CVE-2025-21796, CVE-2025-21814, CVE-2025-21878, CVE-2025-21898, CVE-2025-21795, CVE-2025-21735, CVE-2025-21785, CVE-2025-21950, CVE-2024-26982, CVE-2024-57986, CVE-2025-21948, CVE-2024-58072, CVE-2025-21766, CVE-2025-21715, CVE-2025-21920, CVE-2025-21823, CVE-2024-58020, CVE-2024-58017, CVE-2024-58069, CVE-2025-21871, CVE-2024-58085, CVE-2025-21791, CVE-2025-21765, CVE-2025-21782, CVE-2024-58001, CVE-2025-21909, CVE-2024-58079, CVE-2025-21811, CVE-2025-21943, CVE-2025-21924, CVE-2025-21928, CVE-2025-21826, CVE-2025-21708, CVE-2025-21802, CVE-2025-21951, CVE-2025-21744, CVE-2025-21925, CVE-2025-21971, CVE-2024-58076, CVE-2025-21761, CVE-2025-21914, CVE-2025-21684, CVE-2024-58083, CVE-2025-21830, CVE-2025-21887, CVE-2025-21748, CVE-2025-21721, CVE-2024-57980, CVE-2024-58034, CVE-2025-21935, CVE-2025-21859, CVE-2024-58052, CVE-2025-21912, CVE-2025-21753, CVE-2025-21787, CVE-2025-21806, CVE-2025-21917, CVE-2025-21718, CVE-2024-57979, CVE-2025-21866, CVE-2025-21758, CVE-2025-21781, CVE-2025-21711, CVE-2025-21745, CVE-2024-58051, CVE-2024-58016, CVE-2024-58002, CVE-2025-21844, CVE-2024-57977, CVE-2024-57981, CVE-2025-21728, CVE-2024-58090, CVE-2024-58007, CVE-2025-21763, CVE-2025-21762, CVE-2024-58005, CVE-2025-21916, CVE-2024-57834, CVE-2025-21707, CVE-2025-21865, CVE-2025-21736, CVE-2024-57978, CVE-2025-21919, CVE-2025-21820, CVE-2025-21804, CVE-2025-21722, CVE-2024-58055, CVE-2025-21779, CVE-2025-21772, CVE-2024-58010, CVE-2024-58058)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21804, CVE-2025-21779, CVE-2025-21878, CVE-2025-21735, CVE-2024-57977, CVE-2025-21951, CVE-2025-21704, CVE-2025-21859, CVE-2025-21760, CVE-2025-21862, CVE-2024-57834, CVE-2025-21745, CVE-2025-21762, CVE-2024-58005, CVE-2025-21846, CVE-2025-21914, CVE-2025-21736, CVE-2025-21928, CVE-2024-57986, CVE-2025-21761, CVE-2024-58086, CVE-2025-21731, CVE-2025-21766, CVE-2025-21844, CVE-2024-58072, CVE-2024-58069, CVE-2025-21924, CVE-2025-21848, CVE-2025-21950, CVE-2025-21934, CVE-2025-21647, CVE-2024-58076, CVE-2025-21726, CVE-2025-21791, CVE-2025-21722, CVE-2025-21971, CVE-2025-21719, CVE-2025-21904, CVE-2025-21875, CVE-2025-21877, CVE-2025-21758, CVE-2024-58001, CVE-2024-58007, CVE-2024-58010, CVE-2025-21787, CVE-2025-21905, CVE-2024-58055, CVE-2025-21782, CVE-2024-58090, CVE-2025-21910, CVE-2025-21708, CVE-2025-21826, CVE-2024-57980, CVE-2024-58051, CVE-2024-56721, CVE-2025-21909, CVE-2025-21802, CVE-2025-21744, CVE-2024-58058, CVE-2025-21728, CVE-2024-47726, CVE-2024-58079, CVE-2024-58002, CVE-2024-58014, CVE-2025-21898, CVE-2025-21811, CVE-2024-57979, CVE-2025-21865, CVE-2025-21748, CVE-2025-21749, CVE-2025-21920, CVE-2025-21763, CVE-2025-21764, CVE-2025-21887, CVE-2025-21858, CVE-2024-58034, CVE-2025-21820, CVE-2024-57978, CVE-2025-21866, CVE-2025-21922, CVE-2025-21926, CVE-2025-21753, CVE-2024-58052, CVE-2025-21684, CVE-2025-21823, CVE-2024-58016, CVE-2025-21835, CVE-2025-21925, CVE-2025-21707, CVE-2025-21785, CVE-2025-21795, CVE-2025-21718, CVE-2025-21935, CVE-2025-21765, CVE-2025-21715, CVE-2025-21916, CVE-2025-21727, CVE-2025-21912, CVE-2024-58071, CVE-2024-58083, CVE-2025-21948, CVE-2024-56599, CVE-2025-21721, CVE-2024-58063, CVE-2025-21806, CVE-2025-21772, CVE-2025-21776, CVE-2025-21830, CVE-2025-21917, CVE-2024-58020, CVE-2025-21871, CVE-2025-21796, CVE-2025-21711, CVE-2024-58017, CVE-2024-58085, CVE-2024-57981, CVE-2024-57973, CVE-2025-21919, CVE-2025-21814, CVE-2024-26982, CVE-2025-21781, CVE-2025-21943, CVE-2025-21799, CVE-2025-21767)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2024-58063, CVE-2025-21802, CVE-2025-21910, CVE-2025-21718, CVE-2025-21707, CVE-2025-21781, CVE-2025-21726, CVE-2024-56599, CVE-2025-21735, CVE-2025-21859, CVE-2025-21924, CVE-2024-57980, CVE-2024-58002, CVE-2024-58090, CVE-2025-21728, CVE-2024-58055, CVE-2024-57978, CVE-2025-21704, CVE-2025-21820, CVE-2025-21776, CVE-2025-21919, CVE-2025-21765, CVE-2025-21935, CVE-2025-21647, CVE-2025-21804, CVE-2024-58072, CVE-2025-21865, CVE-2025-21887, CVE-2024-58079, CVE-2024-58020, CVE-2024-35889, CVE-2024-58017, CVE-2024-58005, CVE-2025-21862, CVE-2025-21875, CVE-2025-21925, CVE-2025-21951, CVE-2025-21866, CVE-2025-21871, CVE-2025-21914, CVE-2025-21948, CVE-2025-21715, CVE-2025-21848, CVE-2025-21905, CVE-2025-21830, CVE-2024-58051, CVE-2025-21909, CVE-2025-21711, CVE-2025-21684, CVE-2025-21844, CVE-2025-21904, CVE-2025-21898, CVE-2025-21767, CVE-2024-58069, CVE-2024-57834, CVE-2025-21934, CVE-2025-21926, CVE-2025-21708, CVE-2025-21736, CVE-2024-58085, CVE-2024-26982, CVE-2024-58083, CVE-2025-21920, CVE-2025-21764, CVE-2025-21753, CVE-2025-21799, CVE-2025-21846, CVE-2024-57979, CVE-2025-21785, CVE-2024-58010, CVE-2024-57986, CVE-2025-21762, CVE-2025-21912, CVE-2025-21744, CVE-2025-21787, CVE-2025-21761, CVE-2025-21971, CVE-2025-21943, CVE-2024-47726, CVE-2025-21721, CVE-2025-21748, CVE-2025-21791, CVE-2025-21796, CVE-2025-21806, CVE-2025-21779, CVE-2024-58001, CVE-2025-21745, CVE-2025-21814, CVE-2025-21719, CVE-2025-21950, CVE-2025-21858, CVE-2025-21823, CVE-2025-21758, CVE-2024-57981, CVE-2024-58058, CVE-2024-56721, CVE-2025-21811, CVE-2024-58086, CVE-2025-21722, CVE-2025-21727, CVE-2025-21760, CVE-2024-58076, CVE-2025-21916, CVE-2025-21826, CVE-2024-57973, CVE-2025-21795, CVE-2025-21763, CVE-2024-58014, CVE-2025-21917, CVE-2024-57977, CVE-2024-44964, CVE-2024-58016, CVE-2024-58007, CVE-2025-21928, CVE-2024-58052, CVE-2025-21749, CVE-2025-21772, CVE-2025-21877, CVE-2025-21782, CVE-2025-21922, CVE-2025-21766, CVE-2024-58034, CVE-2025-21835, CVE-2025-21878, CVE-2025-21731, CVE-2024-58071)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2024-58063, CVE-2025-21802, CVE-2025-21910, CVE-2025-21718, CVE-2025-21707, CVE-2025-21781, CVE-2025-21726, CVE-2024-56599, CVE-2025-21735, CVE-2025-21859, CVE-2025-21924, CVE-2024-57980, CVE-2024-58002, CVE-2024-58090, CVE-2025-21728, CVE-2024-58055, CVE-2024-57978, CVE-2025-21704, CVE-2025-21820, CVE-2025-21776, CVE-2025-21919, CVE-2025-21765, CVE-2025-21935, CVE-2025-21647, CVE-2025-21804, CVE-2024-58072, CVE-2025-21865, CVE-2025-21887, CVE-2024-58079, CVE-2024-58020, CVE-2024-35889, CVE-2024-58017, CVE-2024-58005, CVE-2025-21862, CVE-2025-21875, CVE-2025-21925, CVE-2025-21951, CVE-2025-21866, CVE-2025-21871, CVE-2025-21914, CVE-2025-21948, CVE-2025-21715, CVE-2025-21848, CVE-2025-21905, CVE-2025-21830, CVE-2024-58051, CVE-2025-21909, CVE-2025-21711, CVE-2025-21684, CVE-2025-21844, CVE-2025-21904, CVE-2025-21898, CVE-2025-21767, CVE-2024-58069, CVE-2024-57834, CVE-2025-21934, CVE-2025-21926, CVE-2025-21708, CVE-2025-21736, CVE-2024-58085, CVE-2024-26982, CVE-2024-58083, CVE-2025-21920, CVE-2025-21764, CVE-2025-21753, CVE-2025-21799, CVE-2025-21846, CVE-2024-57979, CVE-2025-21785, CVE-2024-58010, CVE-2024-57986, CVE-2025-21762, CVE-2025-21912, CVE-2025-21744, CVE-2025-21787, CVE-2025-21761, CVE-2025-21971, CVE-2025-21943, CVE-2024-47726, CVE-2025-21721, CVE-2025-21748, CVE-2025-21791, CVE-2025-21796, CVE-2025-21806, CVE-2025-21779, CVE-2024-58001, CVE-2025-21745, CVE-2025-21814, CVE-2025-21719, CVE-2025-21950, CVE-2025-21858, CVE-2025-21823, CVE-2025-21758, CVE-2024-57981, CVE-2024-58058, CVE-2024-56721, CVE-2025-21811, CVE-2024-58086, CVE-2025-21722, CVE-2025-21727, CVE-2025-21760, CVE-2024-58076, CVE-2025-21916, CVE-2025-21826, CVE-2024-57973, CVE-2025-21795, CVE-2025-21763, CVE-2024-58014, CVE-2025-21917, CVE-2024-57977, CVE-2024-44964, CVE-2024-58016, CVE-2024-58007, CVE-2025-21928, CVE-2024-58052, CVE-2025-21749, CVE-2025-21772, CVE-2025-21877, CVE-2025-21782, CVE-2025-21922, CVE-2025-21766, CVE-2024-58034, CVE-2025-21835, CVE-2025-21878, CVE-2025-21731, CVE-2024-58071)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2024-58002, CVE-2025-21767, CVE-2024-58051, CVE-2025-21909, CVE-2025-21866, CVE-2025-21823, CVE-2025-21922, CVE-2025-21804, CVE-2024-58069, CVE-2025-21761, CVE-2025-21799, CVE-2024-58034, CVE-2025-21826, CVE-2024-58007, CVE-2025-21948, CVE-2025-21910, CVE-2025-21748, CVE-2024-57834, CVE-2025-21926, CVE-2025-21722, CVE-2024-58072, CVE-2024-58086, CVE-2025-21914, CVE-2025-21802, CVE-2025-21916, CVE-2025-21943, CVE-2025-21830, CVE-2025-21950, CVE-2025-21736, CVE-2024-58014, CVE-2025-21785, CVE-2025-21766, CVE-2025-21878, CVE-2024-56721, CVE-2025-21707, CVE-2025-21904, CVE-2025-21782, CVE-2025-21776, CVE-2025-21726, CVE-2025-21862, CVE-2024-57986, CVE-2025-21647, CVE-2025-21887, CVE-2025-21877, CVE-2024-44964, CVE-2024-58052, CVE-2025-21796, CVE-2024-58085, CVE-2025-21934, CVE-2025-21760, CVE-2025-21924, CVE-2024-57979, CVE-2025-21875, CVE-2024-58083, CVE-2025-21811, CVE-2025-21749, CVE-2025-21814, CVE-2025-21727, CVE-2025-21715, CVE-2025-21684, CVE-2025-21917, CVE-2025-21731, CVE-2024-58016, CVE-2024-58090, CVE-2025-21865, CVE-2024-58010, CVE-2025-21719, CVE-2025-21925, CVE-2025-21846, CVE-2024-58020, CVE-2024-58017, CVE-2024-58063, CVE-2025-21844, CVE-2024-58079, CVE-2024-58055, CVE-2024-57981, CVE-2024-56599, CVE-2024-26982, CVE-2025-21835, CVE-2025-21935, CVE-2024-58005, CVE-2025-21791, CVE-2024-57977, CVE-2024-57978, CVE-2025-21806, CVE-2025-21772, CVE-2025-21859, CVE-2025-21728, CVE-2025-21781, CVE-2024-57980, CVE-2025-21744, CVE-2025-21721, CVE-2025-21718, CVE-2025-21858, CVE-2025-21704, CVE-2025-21905, CVE-2025-21951, CVE-2025-21971, CVE-2025-21848, CVE-2025-21745, CVE-2025-21928, CVE-2024-58076, CVE-2025-21763, CVE-2025-21762, CVE-2025-21919, CVE-2025-21708, CVE-2025-21795, CVE-2024-57973, CVE-2025-21753, CVE-2025-21912, CVE-2024-47726, CVE-2024-35889, CVE-2024-58071, CVE-2025-21787, CVE-2025-21871, CVE-2025-21711, CVE-2025-21765, CVE-2024-58058, CVE-2025-21898, CVE-2025-21735, CVE-2025-21758, CVE-2025-21820, CVE-2025-21779, CVE-2025-21920, CVE-2024-58001, CVE-2025-21764)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Netfilter;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21914, CVE-2024-58090, CVE-2024-58017, CVE-2024-58069, CVE-2025-21920, CVE-2025-21935, CVE-2024-57977, CVE-2025-21763, CVE-2025-21684, CVE-2025-21721, CVE-2025-21736, CVE-2024-58020, CVE-2025-21799, CVE-2025-21904, CVE-2025-21934, CVE-2025-21719, CVE-2025-21811, CVE-2025-21727, CVE-2024-58071, CVE-2025-21905, CVE-2024-26982, CVE-2025-21820, CVE-2024-58052, CVE-2025-21925, CVE-2025-21796, CVE-2025-21779, CVE-2025-21823, CVE-2024-58063, CVE-2025-21772, CVE-2025-21924, CVE-2025-21765, CVE-2024-56721, CVE-2025-21859, CVE-2025-21760, CVE-2025-21753, CVE-2025-21835, CVE-2025-21887, CVE-2024-58002, CVE-2024-58086, CVE-2025-21744, CVE-2025-21848, CVE-2024-57986, CVE-2025-21865, CVE-2025-21766, CVE-2025-21715, CVE-2023-52664, CVE-2025-21764, CVE-2024-58085, CVE-2025-21704, CVE-2024-58072, CVE-2024-58079, CVE-2025-21846, CVE-2025-21647, CVE-2025-21726, CVE-2024-58034, CVE-2025-21943, CVE-2025-21875, CVE-2025-21871, CVE-2025-21898, CVE-2024-58083, CVE-2025-21748, CVE-2024-57834, CVE-2024-58051, CVE-2025-21862, CVE-2025-21722, CVE-2025-21912, CVE-2025-21950, CVE-2025-21917, CVE-2024-57973, CVE-2024-56599, CVE-2025-21922, CVE-2025-21787, CVE-2025-21919, CVE-2025-21971, CVE-2024-57979, CVE-2024-35889, CVE-2025-21804, CVE-2025-21782, CVE-2025-21910, CVE-2025-21909, CVE-2025-21708, CVE-2025-21830, CVE-2025-21791, CVE-2024-58016, CVE-2025-21711, CVE-2025-21928, CVE-2024-58007, CVE-2024-58005, CVE-2023-52927, CVE-2025-21802, CVE-2024-58010, CVE-2024-58001, CVE-2024-47726, CVE-2024-57978, CVE-2024-58055, CVE-2025-21735, CVE-2025-21795, CVE-2025-21745, CVE-2025-21878, CVE-2025-21877, CVE-2025-21826, CVE-2024-58076, CVE-2025-21806, CVE-2025-21858, CVE-2025-21866, CVE-2025-21776, CVE-2025-21785, CVE-2025-21758, CVE-2024-57980, CVE-2025-21728, CVE-2024-58014, CVE-2025-21814, CVE-2025-21762, CVE-2025-21951, CVE-2025-21767, CVE-2025-21844, CVE-2025-21781, CVE-2024-58058, CVE-2025-21761, CVE-2025-21707, CVE-2025-21731, CVE-2024-44964, CVE-2025-21749, CVE-2024-57981, CVE-2025-21948, CVE-2025-21926, CVE-2025-21916, CVE-2025-21718)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Network block device driver;
• Bluetooth drivers;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• Hardware crypto device drivers;
• FireWire subsystem;
• EFI core;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• I3C subsystem;
• InfiniBand drivers;
• Input Device (Mouse) drivers;
• IOMMU subsystem;
• Multiple devices driver;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Fastrpc Driver;
• Network drivers;
• Operating Performance Points (OPP) driver;
• PCI subsystem;
• x86 platform drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• Remote Processor subsystem;
• Real Time Clock drivers;
• S/390 drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• SPI subsystem;
• Media staging drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• UFS subsystem;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Framebuffer layer;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• BPF subsystem;
• Timer subsystem;
• KVM subsystem;
• Networking core;
• ptr_ring data structure definitions;
• Networking subsytem;
• Amateur Radio drivers;
• L3 Master device support module;
• TCP network protocol;
• XFRM subsystem;
• Tracing infrastructure;
• io_uring subsystem;
• Process Accounting mechanism;
• Perf events;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Workqueue subsystem;
• Memory management;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• RxRPC session sockets;
• Network traffic control;
• Wireless networking;
• Key management;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC audio core drivers;
• SOF drivers; (CVE-2025-21737, CVE-2025-21711, CVE-2025-21987, CVE-2025-21848, CVE-2024-49570, CVE-2025-21762, CVE-2025-21738, CVE-2025-21712, CVE-2025-21719, CVE-2025-21870, CVE-2024-57984, CVE-2025-21815, CVE-2025-21744, CVE-2024-58058, CVE-2024-58078, CVE-2024-57990, CVE-2024-54458, CVE-2025-21899, CVE-2025-21814, CVE-2025-21746, CVE-2024-54456, CVE-2025-21739, CVE-2024-58057, CVE-2025-21855, CVE-2025-21758, CVE-2024-58006, CVE-2024-58007, CVE-2025-21720, CVE-2024-58090, CVE-2025-21852, CVE-2024-57982, CVE-2024-58013, CVE-2024-58082, CVE-2025-21825, CVE-2024-58072, CVE-2024-57996, CVE-2025-21787, CVE-2025-21742, CVE-2025-21705, CVE-2025-21829, CVE-2024-58060, CVE-2025-21811, CVE-2025-21900, CVE-2025-21853, CVE-2025-21809, CVE-2025-21938, CVE-2025-21728, CVE-2025-21785, CVE-2025-21732, CVE-2025-21888, CVE-2025-21768, CVE-2025-21875, CVE-2025-21721, CVE-2025-21766, CVE-2025-21892, CVE-2024-57953, CVE-2025-21772, CVE-2025-21735, CVE-2024-58017, CVE-2024-58086, CVE-2024-58084, CVE-2025-21761, CVE-2024-58008, CVE-2024-57988, CVE-2025-21874, CVE-2024-58011, CVE-2025-21706, CVE-2024-57999, CVE-2025-21858, CVE-2024-58061, CVE-2025-21727, CVE-2025-21780, CVE-2024-58051, CVE-2025-21791, CVE-2025-21788, CVE-2025-21786, CVE-2024-58012, CVE-2024-58010, CVE-2024-58001, CVE-2025-21844, CVE-2025-21708, CVE-2024-57834, CVE-2025-21873,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Network block device driver;
• Bluetooth drivers;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• Hardware crypto device drivers;
• FireWire subsystem;
• EFI core;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• I3C subsystem;
• InfiniBand drivers;
• Input Device (Mouse) drivers;
• IOMMU subsystem;
• Multiple devices driver;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Fastrpc Driver;
• Network drivers;
• Operating Performance Points (OPP) driver;
• PCI subsystem;
• x86 platform drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• Remote Processor subsystem;
• Real Time Clock drivers;
• S/390 drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• SPI subsystem;
• Media staging drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• UFS subsystem;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Framebuffer layer;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• BPF subsystem;
• Timer subsystem;
• KVM subsystem;
• Networking core;
• ptr_ring data structure definitions;
• Networking subsytem;
• Amateur Radio drivers;
• L3 Master device support module;
• TCP network protocol;
• XFRM subsystem;
• Tracing infrastructure;
• io_uring subsystem;
• Process Accounting mechanism;
• Perf events;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Workqueue subsystem;
• Memory management;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• RxRPC session sockets;
• Network traffic control;
• Wireless networking;
• Key management;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC audio core drivers;
• SOF drivers; (CVE-2025-21799, CVE-2025-21765, CVE-2024-57834, CVE-2025-21971, CVE-2025-21855, CVE-2024-58019, CVE-2025-21987, CVE-2025-21754, CVE-2025-21779, CVE-2024-57986, CVE-2025-21809, CVE-2025-21887, CVE-2025-21744, CVE-2024-58014, CVE-2025-21892, CVE-2025-21848, CVE-2024-58051, CVE-2024-58085, CVE-2025-21862, CVE-2024-57981, CVE-2024-57987, CVE-2024-58053, CVE-2024-58063, CVE-2024-58079, CVE-2025-21875, CVE-2025-21715, CVE-2024-58004, CVE-2025-21857, CVE-2025-21856, CVE-2025-21938, CVE-2024-58082, CVE-2025-21815, CVE-2025-21864, CVE-2024-52559, CVE-2024-58078, CVE-2024-57989, CVE-2024-58001, CVE-2025-21889, CVE-2025-21739, CVE-2024-58005, CVE-2025-21829, CVE-2024-58069, CVE-2025-21712, CVE-2025-21846, CVE-2025-21883, CVE-2025-21852, CVE-2025-21808, CVE-2025-21900, CVE-2025-21888, CVE-2025-21784, CVE-2025-21838, CVE-2024-58054, CVE-2025-21781, CVE-2025-21737, CVE-2024-58013, CVE-2025-21885, CVE-2025-21877, CVE-2024-58010, CVE-2025-21844, CVE-2024-58012, CVE-2024-58083, CVE-2025-21783, CVE-2025-21798, CVE-2024-57973, CVE-2024-57982, CVE-2025-21708, CVE-2024-58003, CVE-2025-21786, CVE-2025-21750, CVE-2025-21870, CVE-2025-21745, CVE-2024-58081, CVE-2024-57979, CVE-2025-21718, CVE-2025-21816, CVE-2025-21868, CVE-2025-21731, CVE-2025-21814, CVE-2025-21826, CVE-2024-58006, CVE-2025-21821, CVE-2024-57852, CVE-2025-21746,…

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• Thermal drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• Ext4 file system;
• F2FS file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• IPv6 networking;
• L3 Master device support module;
• RDMA verbs API;
• SoC audio core drivers;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Watch queue notification mechanism;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• SMC sockets;
• Sun RPC protocol;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC Audio for Freescale CPUs drivers; (CVE-2024-46821, CVE-2025-21992, CVE-2025-21811, CVE-2025-21806, CVE-2022-49728, CVE-2025-21959, CVE-2025-21745, CVE-2025-21708, CVE-2024-58071, CVE-2025-21941, CVE-2025-22008, CVE-2025-21865, CVE-2024-58052, CVE-2025-22097, CVE-2024-42230, CVE-2025-21765, CVE-2025-21859, CVE-2024-57981, CVE-2025-21761, CVE-2025-22007, CVE-2025-21726, CVE-2025-21956, CVE-2025-21704, CVE-2025-21910, CVE-2024-58072, CVE-2025-21934, CVE-2025-39728, CVE-2025-21948, CVE-2025-22021, CVE-2024-58007, CVE-2025-21866, CVE-2025-22089, CVE-2025-21779, CVE-2025-22086, CVE-2025-21887, CVE-2025-22056, CVE-2025-21735, CVE-2024-58093, CVE-2025-21728, CVE-2024-56721, CVE-2024-58076, CVE-2024-53144, CVE-2025-22055, CVE-2025-21772, CVE-2025-21721, CVE-2025-37785, CVE-2025-21943, CVE-2025-21920, CVE-2025-21762, CVE-2024-56608, CVE-2025-21758, CVE-2025-21718, CVE-2025-21971, CVE-2024-58083, CVE-2025-21711, CVE-2025-22079, CVE-2025-21802, CVE-2024-58051, CVE-2025-22073, CVE-2024-57973, CVE-2025-21926, CVE-2025-21823, CVE-2025-21647, CVE-2025-21731, CVE-2024-53168, CVE-2025-21791,…

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• ACPI drivers;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• MemoryStick subsystem;
• Network drivers;
• Mellanox network drivers;
• NTB driver;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Voltage and Current Regulator drivers;
• Remote Processor subsystem;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• Thermal drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• Ext4 file system;
• F2FS file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• IPv6 networking;
• L3 Master device support module;
• Netfilter;
• RDMA verbs API;
• SoC audio core drivers;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Watch queue notification mechanism;
• Memory management;
• 802.1Q VLAN protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• Logical Link layer;
• Multipath TCP;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• SMC sockets;
• Sun RPC protocol;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC Audio for Freescale CPUs drivers; (CVE-2025-21647, CVE-2025-21925, CVE-2024-58034, CVE-2024-46812, CVE-2024-56721, CVE-2025-21811, CVE-2025-21719, CVE-2025-21859, CVE-2025-21745, CVE-2023-53034, CVE-2025-21924, CVE-2024-58052, CVE-2024-58090, CVE-2025-21950, CVE-2025-21753, CVE-2024-57977, CVE-2025-21910, CVE-2025-21806, CVE-2024-58063, CVE-2025-21835, CVE-2024-58001, CVE-2025-21804, CVE-2025-21887, CVE-2024-53144, CVE-2025-38152, CVE-2024-56599, CVE-2025-22035, CVE-2025-22045, CVE-2025-21926, CVE-2024-58069, CVE-2025-21749, CVE-2023-52664, CVE-2025-21779, CVE-2025-21957, CVE-2025-21877, CVE-2025-22008, CVE-2025-21760, CVE-2025-22071, CVE-2025-22079, CVE-2024-56664, CVE-2024-42230, CVE-2025-21748, CVE-2025-21744, CVE-2025-21758, CVE-2025-21767, CVE-2025-21999, CVE-2025-21970, CVE-2025-21826, CVE-2025-38637, CVE-2025-21846, CVE-2025-22073, CVE-2025-23138, CVE-2025-22097, CVE-2025-22056, CVE-2024-58093, CVE-2025-21935, CVE-2025-21785, CVE-2025-22010, CVE-2025-22075, CVE-2025-21948, CVE-2025-21862, CVE-2025-38575, CVE-2025-22004, CVE-2025-22063, CVE-2025-21905, CVE-2025-21962,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• S390 architecture;
• Block layer subsystem;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Network block device driver;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• FireWire subsystem;
• GPU drivers;
• HID subsystem;
• I3C subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Fastrpc Driver;
• Network drivers;
• Operating Performance Points (OPP) driver;
• PCI subsystem;
• x86 platform drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• Remote Processor subsystem;
• Real Time Clock drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• Media staging drivers;
• TTY drivers;
• UFS subsystem;
• USB Gadget drivers;
• USB Host Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• NILFS2 file system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• KVM subsystem;
• Networking core;
• ptr_ring data structure definitions;
• Networking subsytem;
• Amateur Radio drivers;
• XFRM subsystem;
• Tracing infrastructure;
• BPF subsystem;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Memory management;
• Bluetooth subsystem;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Rose network layer;
• RxRPC session sockets;
• Network traffic control;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC audio core drivers; (CVE-2024-57980, CVE-2024-58061, CVE-2025-21742, CVE-2025-21820, CVE-2024-57993, CVE-2024-58071, CVE-2024-58017, CVE-2024-58019, CVE-2025-21745, CVE-2024-58016, CVE-2024-58011, CVE-2024-58054, CVE-2025-21731, CVE-2024-58058, CVE-2024-58082, CVE-2025-21722, CVE-2024-58063, CVE-2024-58014, CVE-2025-21735, CVE-2025-21828, CVE-2025-21804, CVE-2024-58018, CVE-2025-21814, CVE-2024-58005, CVE-2024-58078, CVE-2025-21832, CVE-2025-21725, CVE-2025-21732, CVE-2025-21718, CVE-2024-58069, CVE-2024-58052, CVE-2024-57973, CVE-2025-21825, CVE-2024-58056, CVE-2024-58080, CVE-2025-21810, CVE-2024-57953, CVE-2025-37974, CVE-2024-57979, CVE-2025-21708, CVE-2024-57974, CVE-2025-21753, CVE-2025-21736, CVE-2025-21728, CVE-2025-21743, CVE-2025-21815, CVE-2025-21802, CVE-2025-21739, CVE-2024-57986, CVE-2024-57982, CVE-2025-21749, CVE-2025-21806, CVE-2025-21754, CVE-2025-21738, CVE-2025-21716, CVE-2025-21705, CVE-2024-57998, CVE-2024-58006, CVE-2024-58068, CVE-2025-21748, CVE-2024-58077, CVE-2025-21723, CVE-2024-58013, CVE-2025-21719, CVE-2024-58002, CVE-2025-21750, CVE-2024-58053, CVE-2024-58070, CVE-2025-21809, CVE-2024-57975, CVE-2025-21816, CVE-2025-21798, CVE-2024-58051, CVE-2024-58083, CVE-2025-21808, CVE-2025-21799, CVE-2024-57996, CVE-2024-58085, CVE-2025-21744, CVE-2024-57994, CVE-2024-58055, CVE-2024-58076, CVE-2025-21710, CVE-2025-21707, CVE-2024-58072, CVE-2025-21726, CVE-2025-21811, CVE-2025-37750, CVE-2024-58001, CVE-2025-21714, CVE-2025-21711, CVE-2025-21830, CVE-2024-58007, CVE-2025-21812, CVE-2025-21734, CVE-2024-58034, CVE-2024-58081, CVE-2024-58079, CVE-2024-58003, CVE-2025-21721, CVE-2024-49887, CVE-2024-57984, CVE-2025-21715, CVE-2025-21801, CVE-2024-57997, CVE-2025-21741, CVE-2025-21727, CVE-2024-58057, CVE-2025-21724, CVE-2024-57990, CVE-2024-57981, CVE-2024-57999, CVE-2025-21733, CVE-2025-21829, CVE-2024-58010, CVE-2025-21720, CVE-2025-21826)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• S390 architecture;
• Block layer subsystem;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Network block device driver;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• FireWire subsystem;
• GPU drivers;
• HID subsystem;
• I3C subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Fastrpc Driver;
• Network drivers;
• Operating Performance Points (OPP) driver;
• PCI subsystem;
• x86 platform drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• Remote Processor subsystem;
• Real Time Clock drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• Media staging drivers;
• TTY drivers;
• UFS subsystem;
• USB Gadget drivers;
• USB Host Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• NILFS2 file system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• KVM subsystem;
• Networking core;
• ptr_ring data structure definitions;
• Networking subsytem;
• Amateur Radio drivers;
• XFRM subsystem;
• Tracing infrastructure;
• BPF subsystem;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Memory management;
• Bluetooth subsystem;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Rose network layer;
• RxRPC session sockets;
• Network traffic control;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC audio core drivers; (CVE-2024-57980, CVE-2024-57999, CVE-2025-21727, CVE-2024-58058, CVE-2024-58052, CVE-2025-21739, CVE-2025-21722, CVE-2024-58072, CVE-2025-21748, CVE-2024-57993, CVE-2024-58003, CVE-2024-58077, CVE-2025-21734, CVE-2024-58070, CVE-2025-21719, CVE-2024-58006, CVE-2025-21826, CVE-2024-58061, CVE-2025-21745, CVE-2025-21715, CVE-2024-58078, CVE-2025-21829, CVE-2024-49887, CVE-2025-21742, CVE-2025-21721, CVE-2025-21724, CVE-2025-21828, CVE-2025-21814, CVE-2025-21801, CVE-2024-57953, CVE-2024-58081, CVE-2024-58080, CVE-2025-21753, CVE-2025-21732, CVE-2025-21811, CVE-2025-37974, CVE-2024-58068, CVE-2024-58010, CVE-2024-58011, CVE-2024-58085, CVE-2025-21714, CVE-2025-21705, CVE-2025-21735, CVE-2024-58001, CVE-2024-58082, CVE-2024-58055, CVE-2025-21743, CVE-2025-21716, CVE-2024-57998, CVE-2025-21731, CVE-2024-58017, CVE-2024-58053, CVE-2025-21808, CVE-2024-57997, CVE-2024-58016, CVE-2024-58076, CVE-2025-21710, CVE-2025-21738, CVE-2025-21809, CVE-2025-21733, CVE-2025-21810, CVE-2024-57996, CVE-2024-58005, CVE-2025-21720, CVE-2025-21728, CVE-2024-58054, CVE-2024-58057, CVE-2025-21725, CVE-2025-21812, CVE-2025-21830, CVE-2024-58014, CVE-2025-21832, CVE-2024-58002, CVE-2025-21802, CVE-2024-57986, CVE-2025-21749, CVE-2024-58018, CVE-2024-57984, CVE-2025-21736, CVE-2024-58079, CVE-2024-58034, CVE-2024-57973, CVE-2024-57974, CVE-2025-21718, CVE-2025-21723, CVE-2024-58019, CVE-2025-21820, CVE-2024-58013, CVE-2025-21707, CVE-2024-58071, CVE-2025-21711, CVE-2024-58056, CVE-2024-58007, CVE-2024-58051, CVE-2025-21815, CVE-2024-57982, CVE-2025-21799, CVE-2025-21754, CVE-2025-21708, CVE-2025-21798, CVE-2024-57979, CVE-2024-57981, CVE-2024-58069, CVE-2025-21744, CVE-2025-21741, CVE-2024-58063, CVE-2024-58083, CVE-2024-57994, CVE-2025-21804, CVE-2025-21825, CVE-2024-57990, CVE-2025-21726, CVE-2025-21806, CVE-2024-57975, CVE-2025-21750, CVE-2025-21816, CVE-2025-37750)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• S390 architecture;
• Block layer subsystem;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Network block device driver;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• FireWire subsystem;
• GPU drivers;
• HID subsystem;
• I3C subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Fastrpc Driver;
• Network drivers;
• Operating Performance Points (OPP) driver;
• PCI subsystem;
• x86 platform drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• Remote Processor subsystem;
• Real Time Clock drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• Media staging drivers;
• TTY drivers;
• UFS subsystem;
• USB Gadget drivers;
• USB Host Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• NILFS2 file system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• KVM subsystem;
• Networking core;
• ptr_ring data structure definitions;
• Networking subsytem;
• Amateur Radio drivers;
• XFRM subsystem;
• Tracing infrastructure;
• BPF subsystem;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Memory management;
• Bluetooth subsystem;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Rose network layer;
• RxRPC session sockets;
• Network traffic control;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC audio core drivers; (CVE-2024-58058, CVE-2024-57984, CVE-2025-21727, CVE-2025-21812, CVE-2024-58070, CVE-2024-57974, CVE-2025-21810, CVE-2025-21816, CVE-2024-58085, CVE-2025-21738, CVE-2024-58057, CVE-2025-21733, CVE-2024-58054, CVE-2024-57994, CVE-2025-21721, CVE-2024-57979, CVE-2025-21825, CVE-2025-37750, CVE-2025-21750, CVE-2025-21798, CVE-2024-58080, CVE-2024-58034, CVE-2025-21724, CVE-2025-21714, CVE-2025-21742, CVE-2025-21720, CVE-2024-58077, CVE-2025-21710, CVE-2024-58014, CVE-2024-58052, CVE-2024-57986, CVE-2024-58007, CVE-2024-58017, CVE-2025-21731, CVE-2024-58056, CVE-2025-21722, CVE-2025-21826, CVE-2024-58079, CVE-2024-58005, CVE-2025-21732, CVE-2025-21749, CVE-2024-57998, CVE-2024-58055, CVE-2025-21809, CVE-2025-21806, CVE-2025-21820, CVE-2024-58010, CVE-2025-21829, CVE-2025-21705, CVE-2024-58082, CVE-2024-58051, CVE-2024-57982, CVE-2025-21723, CVE-2024-58053, CVE-2024-57973, CVE-2024-58006, CVE-2025-21707, CVE-2024-58061, CVE-2025-21735, CVE-2025-21804, CVE-2024-58068, CVE-2024-57996, CVE-2025-21748, CVE-2024-57999, CVE-2024-58069, CVE-2024-57953, CVE-2025-21718, CVE-2024-49887, CVE-2025-21708, CVE-2024-58063, CVE-2024-58001, CVE-2025-21811, CVE-2025-21744, CVE-2025-21754, CVE-2025-21734, CVE-2025-21715, CVE-2024-57981, CVE-2025-21743, CVE-2024-57990, CVE-2024-58011, CVE-2025-21745, CVE-2024-58076, CVE-2024-58002, CVE-2024-57997, CVE-2025-21728, CVE-2025-21802, CVE-2025-21830, CVE-2025-21719, CVE-2025-21711, CVE-2024-57975, CVE-2025-37974, CVE-2025-21716, CVE-2024-58071, CVE-2024-58019, CVE-2025-21828, CVE-2025-21832, CVE-2025-21799, CVE-2025-21739, CVE-2024-58083, CVE-2025-21725, CVE-2024-58013, CVE-2025-21801, CVE-2025-21808, CVE-2024-58003, CVE-2025-21814, CVE-2024-58016, CVE-2024-58072, CVE-2024-57993, CVE-2024-58018, CVE-2025-21726, CVE-2024-57980, CVE-2024-58081, CVE-2024-58078, CVE-2025-21736, CVE-2025-21753, CVE-2025-21741, CVE-2025-21815)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• S390 architecture;
• Block layer subsystem;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Network block device driver;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• FireWire subsystem;
• GPU drivers;
• HID subsystem;
• I3C subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Fastrpc Driver;
• Network drivers;
• Operating Performance Points (OPP) driver;
• PCI subsystem;
• x86 platform drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• Remote Processor subsystem;
• Real Time Clock drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• Media staging drivers;
• TTY drivers;
• UFS subsystem;
• USB Gadget drivers;
• USB Host Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• NILFS2 file system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• KVM subsystem;
• Networking core;
• ptr_ring data structure definitions;
• Networking subsytem;
• Amateur Radio drivers;
• XFRM subsystem;
• Tracing infrastructure;
• BPF subsystem;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Memory management;
• Bluetooth subsystem;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Rose network layer;
• RxRPC session sockets;
• Network traffic control;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC audio core drivers; (CVE-2024-58052, CVE-2025-21826, CVE-2025-21736, CVE-2025-21809, CVE-2025-21723, CVE-2024-57994, CVE-2025-21802, CVE-2024-58003, CVE-2024-58078, CVE-2025-21742, CVE-2025-21721, CVE-2024-57973, CVE-2025-21830, CVE-2025-21733, CVE-2025-21714, CVE-2024-58002, CVE-2025-21804, CVE-2025-21825, CVE-2024-58014, CVE-2024-58055, CVE-2025-21808, CVE-2024-57986, CVE-2024-57997, CVE-2024-57981, CVE-2025-21753, CVE-2025-21743, CVE-2025-37750, CVE-2024-57975, CVE-2025-21741, CVE-2025-21715, CVE-2025-21744, CVE-2025-21829, CVE-2025-21801, CVE-2025-21815, CVE-2024-58051, CVE-2024-58082, CVE-2024-58058, CVE-2024-58079, CVE-2024-58006, CVE-2024-58011, CVE-2025-21750, CVE-2024-57996, CVE-2025-21705, CVE-2024-58056, CVE-2024-58072, CVE-2025-21806, CVE-2024-57999, CVE-2025-21814, CVE-2024-58080, CVE-2024-57953, CVE-2025-37974, CVE-2025-21732, CVE-2024-58069, CVE-2024-58053, CVE-2024-58054, CVE-2025-21725, CVE-2025-21708, CVE-2025-21799, CVE-2024-57998, CVE-2024-57984, CVE-2025-21719, CVE-2024-58057, CVE-2024-57990, CVE-2024-57979, CVE-2025-21722, CVE-2025-21812, CVE-2024-58071, CVE-2024-57974, CVE-2024-58076, CVE-2024-57980, CVE-2024-58005, CVE-2024-58007, CVE-2024-58083, CVE-2025-21716, CVE-2025-21710, CVE-2025-21745, CVE-2024-58063, CVE-2024-58018, CVE-2024-57993, CVE-2024-49887, CVE-2025-21798, CVE-2024-58081, CVE-2025-21810, CVE-2024-58068, CVE-2024-58013, CVE-2025-21731, CVE-2024-57982, CVE-2025-21727, CVE-2025-21738, CVE-2025-21811, CVE-2024-58085, CVE-2025-21735, CVE-2025-21720, CVE-2025-21748, CVE-2025-21749, CVE-2024-58077, CVE-2025-21711, CVE-2025-21726, CVE-2025-21754, CVE-2024-58019, CVE-2025-21739, CVE-2024-58010, CVE-2024-58070, CVE-2025-21724, CVE-2024-58061, CVE-2025-21820, CVE-2025-21816, CVE-2025-21718, CVE-2024-58017, CVE-2025-21734, CVE-2025-21728, CVE-2024-58034, CVE-2024-58016, CVE-2024-58001, CVE-2025-21832, CVE-2025-21707, CVE-2025-21828)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• S390 architecture;
• Block layer subsystem;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Network block device driver;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• FireWire subsystem;
• GPU drivers;
• HID subsystem;
• I3C subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Fastrpc Driver;
• Network drivers;
• Operating Performance Points (OPP) driver;
• PCI subsystem;
• x86 platform drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• Remote Processor subsystem;
• Real Time Clock drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• Media staging drivers;
• TTY drivers;
• UFS subsystem;
• USB Gadget drivers;
• USB Host Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• NILFS2 file system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• KVM subsystem;
• Networking core;
• ptr_ring data structure definitions;
• Networking subsytem;
• Amateur Radio drivers;
• XFRM subsystem;
• Tracing infrastructure;
• BPF subsystem;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Memory management;
• Bluetooth subsystem;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Rose network layer;
• RxRPC session sockets;
• Network traffic control;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC audio core drivers; (CVE-2024-57973, CVE-2024-58076, CVE-2025-21733, CVE-2024-58016, CVE-2024-58013, CVE-2025-21731, CVE-2024-58017, CVE-2024-58079, CVE-2025-21815, CVE-2025-21812, CVE-2025-21705, CVE-2025-21804, CVE-2025-21718, CVE-2025-21802, CVE-2025-21708, CVE-2024-58011, CVE-2025-21734, CVE-2025-21716, CVE-2024-57998, CVE-2025-21715, CVE-2024-57975, CVE-2024-57981, CVE-2025-21738, CVE-2025-21820, CVE-2025-21721, CVE-2024-58069, CVE-2025-21732, CVE-2025-21742, CVE-2025-21754, CVE-2025-21745, CVE-2024-57974, CVE-2025-21826, CVE-2025-37974, CVE-2025-21801, CVE-2024-58054, CVE-2024-58071, CVE-2025-21799, CVE-2024-58034, CVE-2024-58070, CVE-2025-21739, CVE-2024-58061, CVE-2024-57980, CVE-2025-21741, CVE-2024-57990, CVE-2025-21816, CVE-2025-21719, CVE-2024-57999, CVE-2025-37750, CVE-2024-49887, CVE-2025-21808, CVE-2024-58081, CVE-2025-21710, CVE-2025-21728, CVE-2024-58018, CVE-2025-21825, CVE-2024-57986, CVE-2025-21727, CVE-2024-57984, CVE-2025-21725, CVE-2024-57979, CVE-2024-58056, CVE-2025-21707, CVE-2025-21811, CVE-2024-58003, CVE-2024-58057, CVE-2024-58063, CVE-2024-58005, CVE-2025-21748, CVE-2024-57993, CVE-2024-58006, CVE-2025-21832, CVE-2024-58072, CVE-2025-21736, CVE-2025-21798, CVE-2025-21711, CVE-2024-58002, CVE-2024-58080, CVE-2025-21720, CVE-2024-58010, CVE-2025-21809, CVE-2025-21829, CVE-2024-58019, CVE-2025-21724, CVE-2024-58058, CVE-2025-21735, CVE-2024-57994, CVE-2024-58078, CVE-2024-57997, CVE-2025-21806, CVE-2024-58077, CVE-2024-58051, CVE-2024-58083, CVE-2024-58055, CVE-2025-21750, CVE-2024-58082, CVE-2024-58001, CVE-2025-21810, CVE-2025-21744, CVE-2024-57953, CVE-2024-58007, CVE-2025-21722, CVE-2025-21828, CVE-2025-21714, CVE-2024-58053, CVE-2025-21726, CVE-2024-58085, CVE-2024-58014, CVE-2024-58052, CVE-2025-21749, CVE-2025-21814, CVE-2025-21743, CVE-2024-57996, CVE-2025-21830, CVE-2025-21723, CVE-2024-58068, CVE-2025-21753, CVE-2024-57982)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• S390 architecture;
• Block layer subsystem;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Network block device driver;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• FireWire subsystem;
• GPU drivers;
• HID subsystem;
• I3C subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Fastrpc Driver;
• Network drivers;
• Operating Performance Points (OPP) driver;
• PCI subsystem;
• x86 platform drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• Remote Processor subsystem;
• Real Time Clock drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• Media staging drivers;
• TTY drivers;
• UFS subsystem;
• USB Gadget drivers;
• USB Host Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• NILFS2 file system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• KVM subsystem;
• Networking core;
• ptr_ring data structure definitions;
• Networking subsytem;
• Amateur Radio drivers;
• XFRM subsystem;
• Tracing infrastructure;
• BPF subsystem;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Memory management;
• Bluetooth subsystem;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Rose network layer;
• RxRPC session sockets;
• Network traffic control;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC audio core drivers; (CVE-2025-21829, CVE-2025-21753, CVE-2024-58051, CVE-2025-21738, CVE-2025-21727, CVE-2025-21719, CVE-2024-57982, CVE-2025-21745, CVE-2024-58003, CVE-2025-21716, CVE-2025-21728, CVE-2024-58001, CVE-2024-58069, CVE-2025-21754, CVE-2025-21812, CVE-2025-21816, CVE-2024-58071, CVE-2024-58018, CVE-2025-21708, CVE-2024-58078, CVE-2025-21707, CVE-2025-21741, CVE-2024-57996, CVE-2024-58019, CVE-2024-58014, CVE-2024-58058, CVE-2024-57953, CVE-2025-21710, CVE-2024-58061, CVE-2025-21808, CVE-2025-21826, CVE-2025-21725, CVE-2025-21722, CVE-2025-21733, CVE-2024-58034, CVE-2025-21718, CVE-2025-21714, CVE-2025-21723, CVE-2025-21743, CVE-2025-21736, CVE-2024-58056, CVE-2025-21810, CVE-2024-58077, CVE-2024-58002, CVE-2024-49887, CVE-2025-21739, CVE-2024-57980, CVE-2025-21721, CVE-2025-21815, CVE-2025-21811, CVE-2024-57974, CVE-2024-58005, CVE-2025-21814, CVE-2024-58055, CVE-2025-21744, CVE-2025-21798, CVE-2024-58082, CVE-2024-58081, CVE-2025-21832, CVE-2024-58053, CVE-2025-21828, CVE-2024-58076, CVE-2025-21820, CVE-2024-58083, CVE-2024-58054, CVE-2024-57984, CVE-2025-21742, CVE-2024-58013, CVE-2025-21799, CVE-2025-21715, CVE-2025-21750, CVE-2025-21804, CVE-2024-57994, CVE-2024-58010, CVE-2024-58007, CVE-2024-58011, CVE-2024-57975, CVE-2025-37750, CVE-2025-21731, CVE-2025-21726, CVE-2024-58052, CVE-2024-57979, CVE-2025-21720, CVE-2025-21724, CVE-2024-57986, CVE-2024-58057, CVE-2024-58080, CVE-2024-58079, CVE-2024-57990, CVE-2025-21748, CVE-2025-21806, CVE-2025-21825, CVE-2024-58016, CVE-2025-21711, CVE-2024-58072, CVE-2025-21732, CVE-2024-57999, CVE-2024-57981, CVE-2024-58068, CVE-2025-21734, CVE-2024-58017, CVE-2024-57997, CVE-2025-21749, CVE-2025-37974, CVE-2025-21802, CVE-2024-58070, CVE-2025-21809, CVE-2024-58063, CVE-2024-58085, CVE-2025-21735, CVE-2024-57973, CVE-2024-58006, CVE-2024-57993, CVE-2025-21705, CVE-2024-57998, CVE-2025-21830, CVE-2025-21801)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• S390 architecture;
• Block layer subsystem;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Network block device driver;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• FireWire subsystem;
• GPU drivers;
• HID subsystem;
• I3C subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Fastrpc Driver;
• Network drivers;
• Operating Performance Points (OPP) driver;
• PCI subsystem;
• x86 platform drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• Remote Processor subsystem;
• Real Time Clock drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• Media staging drivers;
• TTY drivers;
• UFS subsystem;
• USB Gadget drivers;
• USB Host Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• NILFS2 file system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• KVM subsystem;
• Networking core;
• ptr_ring data structure definitions;
• Networking subsytem;
• Amateur Radio drivers;
• XFRM subsystem;
• Tracing infrastructure;
• BPF subsystem;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Memory management;
• Bluetooth subsystem;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Rose network layer;
• RxRPC session sockets;
• Network traffic control;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC audio core drivers; (CVE-2024-58055, CVE-2024-58077, CVE-2024-58080, CVE-2024-58082, CVE-2025-21743, CVE-2024-57953, CVE-2024-57994, CVE-2025-21806, CVE-2024-58007, CVE-2024-58002, CVE-2024-57974, CVE-2024-57980, CVE-2025-21720, CVE-2024-57990, CVE-2025-21725, CVE-2024-58057, CVE-2024-58018, CVE-2024-58011, CVE-2025-21814, CVE-2025-21799, CVE-2024-58017, CVE-2024-58014, CVE-2025-21731, CVE-2024-58072, CVE-2024-58069, CVE-2024-58006, CVE-2024-57984, CVE-2025-21710, CVE-2024-58061, CVE-2024-57997, CVE-2024-57975, CVE-2025-21724, CVE-2025-37974, CVE-2025-21808, CVE-2024-58056, CVE-2025-21753, CVE-2024-58068, CVE-2025-21728, CVE-2025-21714, CVE-2024-58054, CVE-2025-21741, CVE-2025-21736, CVE-2025-21715, CVE-2025-21802, CVE-2025-21739, CVE-2025-21727, CVE-2025-21749, CVE-2024-58053, CVE-2024-58081, CVE-2025-21828, CVE-2025-21705, CVE-2024-58051, CVE-2024-57979, CVE-2025-21754, CVE-2025-21734, CVE-2025-21829, CVE-2025-21735, CVE-2025-21826, CVE-2025-21738, CVE-2024-58079, CVE-2025-21815, CVE-2025-21708, CVE-2024-57986, CVE-2024-58085, CVE-2025-21801, CVE-2024-58071, CVE-2025-21810, CVE-2025-21726, CVE-2025-21744, CVE-2025-21830, CVE-2025-21748, CVE-2024-58001, CVE-2024-58063, CVE-2024-57996, CVE-2025-21716, CVE-2024-58013, CVE-2024-58019, CVE-2025-21811, CVE-2025-21711, CVE-2024-58076, CVE-2024-58070, CVE-2024-57982, CVE-2024-57998, CVE-2025-21745, CVE-2025-21804, CVE-2024-57973, CVE-2024-58083, CVE-2025-21742, CVE-2025-37750, CVE-2025-21733, CVE-2025-21750, CVE-2024-57981, CVE-2025-21718, CVE-2024-58058, CVE-2024-49887, CVE-2024-58003, CVE-2024-57993, CVE-2024-57999, CVE-2024-58010, CVE-2025-21825, CVE-2025-21732, CVE-2025-21719, CVE-2025-21721, CVE-2024-58034, CVE-2024-58005, CVE-2025-21707, CVE-2025-21809, CVE-2024-58078, CVE-2025-21812, CVE-2024-58016, CVE-2025-21816, CVE-2024-58052, CVE-2025-21722, CVE-2025-21832, CVE-2025-21723, CVE-2025-21820, CVE-2025-21798)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• PowerPC architecture;
• S390 architecture;
• Block layer subsystem;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Network block device driver;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• FireWire subsystem;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I3C subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Fastrpc Driver;
• Network drivers;
• Mellanox network drivers;
• Operating Performance Points (OPP) driver;
• PCI subsystem;
• x86 platform drivers;
• i.MX PM domains;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• Remote Processor subsystem;
• Real Time Clock drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• Media staging drivers;
• TTY drivers;
• UFS subsystem;
• USB Gadget drivers;
• USB Host Controller drivers;
• USB Serial drivers;
• AFS file system;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• GFS2 file system;
• NILFS2 file system;
• File system notification infrastructure;
• Overlay file system;
• Proc file system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• KVM subsystem;
• Networking core;
• ptr_ring data structure definitions;
• Networking subsytem;
• Amateur Radio drivers;
• XFRM subsystem;
• Tracing infrastructure;
• BPF subsystem;
• Kernel CPU control infrastructure;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Memory management;
• Bluetooth subsystem;
• DCCP (Datagram Congestion Control Protocol);
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• IEEE 802.15.4 subsystem;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• RxRPC session sockets;
• Network traffic control;
• VMware vSockets driver;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC audio core drivers; (CVE-2025-21830, CVE-2025-21678, CVE-2025-21815, CVE-2024-57974, CVE-2025-21725, CVE-2025-21718, CVE-2025-21748, CVE-2025-21732, CVE-2024-57953, CVE-2025-21727, CVE-2025-21816, CVE-2025-21719, CVE-2024-53124, CVE-2024-58019, CVE-2025-38001, CVE-2025-21720, CVE-2025-21734, CVE-2025-21672, CVE-2025-21692, CVE-2024-58076, CVE-2025-21694, CVE-2024-58061, CVE-2025-21714, CVE-2025-21689, CVE-2024-49887, CVE-2024-57949, CVE-2025-38177, CVE-2025-21683, CVE-2025-21669, CVE-2025-21722, CVE-2024-57980, CVE-2025-38000, CVE-2025-37932, CVE-2024-58034, CVE-2024-58081, CVE-2025-21733, CVE-2025-21682, CVE-2024-57924, CVE-2025-21743, CVE-2024-57975, CVE-2025-37798, CVE-2024-58058, CVE-2025-21809, CVE-2025-21676, CVE-2024-57993, CVE-2025-21699, CVE-2024-58016, CVE-2025-21832, CVE-2025-21804, CVE-2024-58011, CVE-2024-58007, CVE-2025-21826, CVE-2024-58055, CVE-2025-21668, CVE-2025-21715, CVE-2024-58078, CVE-2025-21829, CVE-2025-21811, CVE-2025-21814, CVE-2024-58053, CVE-2025-21726, CVE-2025-21943, CVE-2025-37750, CVE-2025-21673, CVE-2024-57984, CVE-2025-37997, CVE-2025-21684, CVE-2025-21750, CVE-2024-58013, CVE-2025-21799, CVE-2024-58083, CVE-2025-21798, CVE-2025-21731, CVE-2025-21708, CVE-2024-57986, CVE-2025-21744, CVE-2024-58014, CVE-2025-21721, CVE-2024-58063, CVE-2024-57979, CVE-2024-58005, CVE-2025-21728, CVE-2025-21681, CVE-2025-21806, CVE-2024-57982, CVE-2024-58002, CVE-2024-58082, CVE-2025-21812, CVE-2025-21745, CVE-2024-58017, CVE-2025-21665, CVE-2025-21828, CVE-2025-37890,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• S390 architecture;
• x86 architecture;
• Block layer subsystem;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Network block device driver;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• FireWire subsystem;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I3C subsystem;
• InfiniBand drivers;
• Input Device (Mouse) drivers;
• IOMMU subsystem;
• Multiple devices driver;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Fastrpc Driver;
• Network drivers;
• Operating Performance Points (OPP) driver;
• PCI subsystem;
• x86 platform drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• Remote Processor subsystem;
• Real Time Clock drivers;
• S/390 drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• SPI subsystem;
• Media staging drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• UFS subsystem;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Framebuffer layer;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• KVM subsystem;
• Networking core;
• ptr_ring data structure definitions;
• Networking subsytem;
• Amateur Radio drivers;
• L3 Master device support module;
• TCP network protocol;
• XFRM subsystem;
• Tracing infrastructure;
• io_uring subsystem;
• Process Accounting mechanism;
• BPF subsystem;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Workqueue subsystem;
• Memory management;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• RxRPC session sockets;
• Network traffic control;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC audio core drivers;
• SOF drivers; (CVE-2025-37750, CVE-2025-21707, CVE-2025-21814, CVE-2025-21863, CVE-2025-21775, CVE-2024-57997, CVE-2025-21749, CVE-2025-21739, CVE-2025-21829, CVE-2025-21731, CVE-2025-21704, CVE-2024-57979, CVE-2025-21864, CVE-2024-57953, CVE-2025-21796, CVE-2025-21826, CVE-2024-57998, CVE-2025-21784, CVE-2024-58072, CVE-2025-21859, CVE-2025-21790, CVE-2025-21762, CVE-2025-37797, CVE-2024-57981, CVE-2024-58068, CVE-2025-21810, CVE-2024-58070, CVE-2025-21738, CVE-2024-58081, CVE-2024-58010, CVE-2025-21832, CVE-2025-21839, CVE-2024-58061, CVE-2024-58069, CVE-2024-58055, CVE-2024-57834, CVE-2025-21804, CVE-2025-21783, CVE-2025-21772, CVE-2024-57975, CVE-2024-57980, CVE-2024-58082, CVE-2025-21741, CVE-2025-21733, CVE-2025-21750, CVE-2025-21728, CVE-2025-21716, CVE-2025-21753, CVE-2025-21802, CVE-2024-57993, CVE-2025-21785, CVE-2024-57994, CVE-2025-21868, CVE-2025-21812, CVE-2025-21760, CVE-2025-21782, CVE-2025-21763, CVE-2024-57999, CVE-2025-21823, CVE-2024-57986, CVE-2024-58080, CVE-2025-21766, CVE-2025-21743, CVE-2025-21838, CVE-2025-21706, CVE-2025-21820, CVE-2024-58003, CVE-2025-21809, CVE-2025-21867, CVE-2024-57982, CVE-2025-21759, CVE-2024-57984, CVE-2025-21736, CVE-2024-58058, CVE-2025-21754, CVE-2024-49887, CVE-2025-21781, CVE-2025-21795, CVE-2025-21746, CVE-2024-58019, CVE-2025-21780, CVE-2024-58083, CVE-2025-21734, CVE-2025-21764, CVE-2025-21825, CVE-2024-54456, CVE-2024-58056, CVE-2025-21861, CVE-2024-57973, CVE-2025-21735, CVE-2025-21705, CVE-2024-57990, CVE-2025-21836, CVE-2025-21816, CVE-2024-58088, CVE-2024-58005, CVE-2025-21761,…