Every CVE Search/ Get API key

CVE-2024-58057

idpf: convert workqueues to unbound

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

idpf: convert workqueues to unbound

When a workqueue is created with WQ_UNBOUND, its work items are served by special worker-pools, whose host workers are not bound to any specific CPU. In the default configuration (i.e. when queue_delayed_work and friends do not specify which CPU to run the work item on), WQ_UNBOUND allows the work item to be executed on any CPU in the same node of the CPU it was enqueued on. While this solution potentially sacrifices locality, it avoids contention with other processes that might dominate the CPU time of the processor the work item was scheduled on.

This is not just a theoretical problem: in a particular scenario misconfigured process was hogging most of the time from CPU0, leaving less than 0.5% of its CPU time to the kworker. The IDPF workqueues that were using the kworker on CPU0 suffered large completion delays as a result, causing performance degradation, timeouts and eventual system crash.

  • I have also run a manual test to gauge the performance improvement. The test consists of an antagonist process (./stress --cpu 2) consuming as much of CPU 0 as possible. This process is run under taskset 01 to bind it to CPU0, and its priority is changed with chrt -pQ 9900 10000 ${pid} and renice -n -20 ${pid} after start.

    Then, the IDPF driver is forced to prefer CPU0 by editing all calls to queue_delayed_work, mod_delayed_work, etc... to use CPU 0.

    Finally, ktraces for the workqueue events are collected.

    Without the current patch, the antagonist process can force arbitrary delays between workqueue_queue_work and workqueue_execute_start, that in my tests were as high as 30ms. With the current patch applied, the workqueue can be migrated to another unloaded CPU in the same node, and, keeping everything else equal, the maximum delay I could see was 6us.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.18%Up 0.1 points since Mar 7, 2025
90%50%10%1%

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

idpf: convert workqueues to unbound

When a workqueue is created with WQ_UNBOUND, its work items are served by special worker-pools, whose host workers are not bound to any specific CPU. In the default configuration (i.e. when queue_delayed_work and friends do not specify which CPU to run the work item on), WQ_UNBOUND allows the work item to be executed on any CPU in the same node of the CPU it was enqueued on. While this solution potentially sacrifices locality, it avoids contention with other processes that might dominate the CPU time of the processor the work item was scheduled on.

This is not just a theoretical problem: in a particular scenario misconfigured process was hogging most of the time from CPU0, leaving less than 0.5% of its CPU time to the kworker. The IDPF workqueues that were using the kworker on CPU0 suffered large completion delays as a result, causing performance degradation, timeouts and eventual system crash.

  • I have also run a manual test to gauge the performance improvement. The test consists of an antagonist process (./stress --cpu 2) consuming as much of CPU 0 as possible. This process is run under taskset 01 to bind it to CPU0, and its priority is changed with chrt -pQ 9900 10000 ${pid} and renice -n -20 ${pid} after start.

    Then, the IDPF driver is forced to prefer CPU0 by editing all calls to queue_delayed_work, mod_delayed_work, etc... to use CPU 0.

    Finally, ktraces for the workqueue events are collected.

    Without the current patch, the antagonist process can force arbitrary delays between workqueue_queue_work and workqueue_execute_start, that in my tests were as high as 30ms. With the current patch applied, the workqueue can be migrated to another unloaded CPU in the same node, and, keeping everything else equal, the maximum delay I could see was 6us.

Record
CVE-2024-58057
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
CVE List No score

idpf: convert workqueues to unbound

In the Linux kernel, the following vulnerability has been resolved:

idpf: convert workqueues to unbound

When a workqueue is created with WQ_UNBOUND, its work items are served by special worker-pools, whose host workers are not bound to any specific CPU. In the default configuration (i.e. when queue_delayed_work and friends do not specify which CPU to run the work item on), WQ_UNBOUND allows the work item to be executed on any CPU in the same node of the CPU it was enqueued on. While this solution potentially sacrifices locality, it avoids contention with other processes that might dominate the CPU time of the processor the work item was scheduled on.

This is not just a theoretical problem: in a particular scenario misconfigured process was hogging most of the time from CPU0, leaving less than 0.5% of its CPU time to the kworker. The IDPF workqueues that were using the kworker on CPU0 suffered large completion delays as a result, causing performance degradation, timeouts and eventual system crash.

  • I have also run a manual test to gauge the performance improvement. The test consists of an antagonist process (./stress --cpu 2) consuming as much of CPU 0 as possible. This process is run under taskset 01 to bind it to CPU0, and its priority is changed with chrt -pQ 9900 10000 ${pid} and renice -n -20 ${pid} after start.

    Then, the IDPF driver is forced to prefer CPU0 by editing all calls to queue_delayed_work, mod_delayed_work, etc... to use CPU 0.

    Finally, ktraces for the workqueue events are collected.

    Without the current patch, the antagonist process can force arbitrary delays between workqueue_queue_work and workqueue_execute_start, that in my tests were as high as 30ms. With the current patch applied, the workqueue can be migrated to another unloaded CPU in the same node, and, keeping everything else equal, the maximum delay I could see was 6us.

Record
CVE-2024-58057
Updated
2026-11-02
EUVDEUVD-2024-54042 No score

In the Linux kernel, the following vulnerability has been resolved:

idpf: convert workqueues to unbound

When a workqueue is created with WQ_UNBOUND, its work items are served by special worker-pools, whose host workers are not bound to any specific CPU. In the default configuration (i.e. when queue_delayed_work and friends do not specify which CPU to run the work item on), WQ_UNBOUND allows the work item to be executed on any CPU in the same node of the CPU it was enqueued on. While this solution potentially sacrifices locality, it avoids contention with other processes that might dominate the CPU time of the processor the work item was scheduled on.

This is not just a theoretical problem: in a particular scenario misconfigured process was hogging most of the time from CPU0, leaving less than 0.5% of its CPU time to the kworker. The IDPF workqueues that were using the kworker on CPU0 suffered large completion delays as a result, causing performance degradation, timeouts and eventual system crash.

  • I have also run a manual test to gauge the performance improvement. The test consists of an antagonist process (./stress --cpu 2) consuming as much of CPU 0 as possible. This process is run under taskset 01 to bind it to CPU0, and its priority is changed with chrt -pQ 9900 10000 ${pid} and renice -n -20 ${pid} after start.

    Then, the IDPF driver is forced to prefer CPU0 by editing all calls to queue_delayed_work, mod_delayed_work, etc... to use CPU 0.

    Finally, ktraces for the workqueue events are collected.

    Without the current patch, the antagonist process can force arbitrary delays between workqueue_queue_work and workqueue_execute_start, that in my tests were as high as 30ms. With the current patch applied, the workqueue can be migrated to another unloaded CPU in the same node, and, keeping everything else equal, the maximum delay I could see was 6us.

Record
EUVD-2024-54042
Updated
2026-11-02
GitHub AdvisoriesGHSA-25vp-mqrr-hv87 5.5

In the Linux kernel, the following vulnerability has been resolved: idpf: convert workqueues to...

In the Linux kernel, the following vulnerability has been resolved:

idpf: convert workqueues to unbound

When a workqueue is created with WQ_UNBOUND, its work items are served by special worker-pools, whose host workers are not bound to any specific CPU. In the default configuration (i.e. when queue_delayed_work and friends do not specify which CPU to run the work item on), WQ_UNBOUND allows the work item to be executed on any CPU in the same node of the CPU it was enqueued on. While this solution potentially sacrifices locality, it avoids contention with other processes that might dominate the CPU time of the processor the work item was scheduled on.

This is not just a theoretical problem: in a particular scenario misconfigured process was hogging most of the time from CPU0, leaving less than 0.5% of its CPU time to the kworker. The IDPF workqueues that were using the kworker on CPU0 suffered large completion delays as a result, causing performance degradation, timeouts and eventual system crash.

  • I have also run a manual test to gauge the performance improvement. The test consists of an antagonist process (./stress --cpu 2) consuming as much of CPU 0 as possible. This process is run under taskset 01 to bind it to CPU0, and its priority is changed with chrt -pQ 9900 10000 ${pid} and renice -n -20 ${pid} after start.

    Then, the IDPF driver is forced to prefer CPU0 by editing all calls to queue_delayed_work, mod_delayed_work, etc... to use CPU 0.

    Finally, ktraces for the workqueue events are collected.

    Without the current patch, the antagonist process can force arbitrary delays between workqueue_queue_work and workqueue_execute_start, that in my tests were as high as 30ms. With the current patch applied, the workqueue can be migrated to another unloaded CPU in the same node, and, keeping everything else equal, the maximum delay I could see was 6us.

Record
GHSA-25vp-mqrr-hv87
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2024-58057 5.5
Record
BELL-CVE-2024-58057
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2024-58057 5.5

In the Linux kernel, the following vulnerability has been resolved: idpf: convert workqueues to unbound When a workqueue is created with WQ_UNBOUND, its work items are served by special worker-pools, whose host workers are not bound to any specific CPU. In the default configuration (i.e. when queue_delayed_work and friends do not specify which CPU to run the work item on), WQ_UNBOUND allows the work item to be executed on any CPU in the same node of the CPU it was enqueued on. While this solution potentially sacrifices locality, it avoids contention with other processes that might dominate the CPU time of the processor the work item was scheduled on. This is not just a theoretical problem: in a particular scenario misconfigured process was hogging most of the time from CPU0, leaving less than 0.5% of its CPU time to the kworker. The IDPF workqueues that were using the kworker on CPU0 suffered large completion delays as a result, causing performance degradation, timeouts and eventual system crash. * I have also run a manual test to gauge the performance improvement. The test consists of an antagonist process (./stress --cpu 2) consuming as much of CPU 0 as possible. This process is run under taskset 01 to bind it to CPU0, and its priority is changed with chrt -pQ 9900 10000 ${pid} and renice -n -20 ${pid} after start. Then, the IDPF driver is forced to prefer CPU0 by editing all calls to queue_delayed_work, mod_delayed_work, etc... to use CPU 0. Finally, ktraces for the workqueue events are collected. Without the current patch, the antagonist process can force arbitrary delays between workqueue_queue_work and workqueue_execute_start, that in my tests were as high as 30ms. With the current patch applied, the workqueue can be migrated to another unloaded CPU in the same node, and, keeping everything else equal, the maximum delay I could see was 6us.

Record
DEBIAN-CVE-2024-58057
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 29 moreShow less
OSVRHSA-2025:20095 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:20095
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:20518 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:20518
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:20095 7.8

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)

  • kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)

  • kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)

  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)

  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)

  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)

  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)

  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)

  • kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)

  • kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)

  • kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633)

  • kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)

  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)

  • kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)

  • kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)

  • kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)

  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)

  • kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)

  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)

  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)

  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)

  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)

  • kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)

  • kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)

  • kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)

  • kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)

  • kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)

  • kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)

  • kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)

  • kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)

  • kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)

  • kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)

  • kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)

  • kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)

  • kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)

  • kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)

  • kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)

  • kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)

  • kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)

  • kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)

  • kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)

  • kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)

  • kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)

  • kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)

  • kernel: HID: multitouch: Add NULL check in mt_input_configured…

Record
RLSA-2025:20095
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:20518 7.8

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830)

  • kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689)

  • kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744)

  • kernel: vfs: fix race between evice_inodes() and find_inode()&iput() (CVE-2024-47679)

  • kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727)

  • kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864)

  • kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060)

  • kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024)

  • kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195)

  • kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294)

  • kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052)

  • kernel: afs: Fix lock recursion (CVE-2024-53090)

  • kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)

  • kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)

  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)

  • kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229)

  • kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170)

  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)

  • kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)

  • kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)

  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)

  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)

  • kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)

  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)

  • kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709)

  • kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)

  • kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786)

  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)

  • kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)

  • kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)

  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)

  • kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)

  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)

  • kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672)

  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)

  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)

  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)

  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)

  • kernel: usbnet: fix memory leak in error case (CVE-2022-49657)

  • kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432)

  • kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672)

  • kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353)

  • kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437)

  • kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627)

  • kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670)

  • kernel: can: isotp: sanitize CAN ID checks in isotp_bind() (CVE-2022-49269)

  • kernel:…

Record
RLSA-2025:20518
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2404-CVE-2024-58057 5.5

CVE-2024-58057 in linux - Patched by Root

Root has patched CVE-2024-58057 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2024-58057
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2024-58057 5.7

In the Linux kernel, the following vulnerability has been resolved: idpf: convert workqueues to unbound When a workqueue is created with WQ_UNBOUND, its work items are served by special worker-pools, whose host workers are not bound to any specific CPU. In the default configuration (i.e. when queue_delayed_work and friends do not specify which CPU to run the work item on), WQ_UNBOUND allows the work item to be executed on any CPU in the same node of the CPU it was enqueued on. While this solution potentially sacrifices locality, it avoids contention with other processes that might dominate the CPU time of the processor the work item was scheduled on. This is not just a theoretical problem: in a particular scenario misconfigured process was hogging most of the time from CPU0, leaving less than 0.5% of its CPU time to the kworker. The IDPF workqueues that were using the kworker on CPU0 suffered large completion delays as a result, causing performance degradation, timeouts and eventual system crash. * I have also run a manual test to gauge the performance improvement. The test consists of an antagonist process (./stress --cpu 2) consuming as much of CPU 0 as possible. This process is run under taskset 01 to bind it to CPU0, and its priority is changed with chrt -pQ 9900 10000 ${pid} and renice -n -20 ${pid} after start. Then, the IDPF driver is forced to prefer CPU0 by editing all calls to queue_delayed_work, mod_delayed_work, etc... to use CPU 0. Finally, ktraces for the workqueue events are collected. Without the current patch, the antagonist process can force arbitrary delays between workqueue_queue_work and workqueue_execute_start, that in my tests were as high as 30ms. With the current patch applied, the workqueue can be migrated to another unloaded CPU in the same node, and, keeping everything else equal, the maximum delay I could see was 6us.

Record
UBUNTU-CVE-2024-58057
CVSS 4.0
5.7 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-06
OSVALSA-2025:20095 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  • kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)
  • kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)
  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  • kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)
  • kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)
  • kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633)
  • kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)
  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  • kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)
  • kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)
  • kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)
  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  • kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)
  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
  • kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)
  • kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)
  • kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)
  • kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)
  • kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)
  • kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)
  • kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)
  • kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)
  • kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)
  • kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)
  • kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)
  • kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)
  • kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)
  • kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
  • kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)
  • kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)
  • kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)
  • kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)
  • kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)
  • kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)
  • kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)
  • kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)
  • kernel: HID:…
Record
ALSA-2025:20095
Updated
2026-11-02
OSVALSA-2025:20518 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830)
  • kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689)
  • kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744)
  • kernel: vfs: fix race between evice_inodes() and find_inode()&iput() (CVE-2024-47679)
  • kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727)
  • kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864)
  • kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060)
  • kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024)
  • kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195)
  • kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294)
  • kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052)
  • kernel: afs: Fix lock recursion (CVE-2024-53090)
  • kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)
  • kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)
  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  • kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229)
  • kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170)
  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  • kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)
  • kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)
  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  • kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  • kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709)
  • kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)
  • kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786)
  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  • kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)
  • kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)
  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  • kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)
  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  • kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672)
  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
  • kernel: usbnet: fix memory leak in error case (CVE-2022-49657)
  • kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432)
  • kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672)
  • kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353)
  • kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437)
  • kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627)
  • kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670)
  • kernel: can: isotp: sanitize CAN ID…
Record
ALSA-2025:20518
Updated
2026-11-02
OSVCLSA-2026-1779434490 No score

kernel: Fix of 100 CVEs

  • tracing: Verify event formats that have "%*p.." {CVE-2025-37938}
  • HID: pidff: Fix null pointer dereference in pidff_find_fields {CVE-2025-37862}
  • scsi: st: Fix array overflow in st_setup() {CVE-2025-37857}
  • drm/amdkfd: debugfs hang_hws skip GPU with MES {CVE-2025-37853}
  • mm/vmscan: don't try to reclaim hwpoison folio {CVE-2025-37834}
  • cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() {CVE-2025-37830}
  • drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() {CVE-2025-37852}
  • cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() {CVE-2025-37829}
  • sound/virtio: Fix cancel_sync warnings on uninitialized work_structs {CVE-2025-37805}
  • net: tls: explicitly disallow disconnect {CVE-2025-37756}
  • drm/amd/pm: Prevent division by zero {CVE-2025-37770}
  • drm/amd/pm: Prevent division by zero {CVE-2025-37768}
  • net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. {CVE-2025-22111}
  • wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path {CVE-2025-23129}
  • x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs {CVE-2025-22045}
  • ftrace: Avoid potential division by zero in function_stat_show() {CVE-2025-21898}
  • md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime {CVE-2025-21712}
  • bpf: Fix softlockup in arena_map_free on 64k page kernel {CVE-2025-21851}
  • RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" {CVE-2025-21829}
  • mm: zswap: properly synchronize freeing resources during CPU hotunplug {CVE-2025-21693}
  • drop_monitor: fix incorrect initialization order {CVE-2025-21862}
  • ptp: Ensure info->enable callback is always set {CVE-2025-21814}
  • efi: Don't map the entire mokvar table to determine its size {CVE-2025-21872}
  • drm/amd/display: Assign normalized_pix_clk when color depth = 14 {CVE-2025-21956}
  • net: usb: rtl8150: enable basic endpoint checking {CVE-2025-21708}
  • nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() {CVE-2025-21848}
  • netfilter: nf_tables: reject mismatching sum of field_len with set key length {CVE-2025-21826}
  • mm: clear uffd-wp PTE/PMD state on mremap() {CVE-2025-21696}
  • wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910}
  • eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682}
  • vxlan: check vxlan_vnigroup_init() return value {CVE-2025-21790}
  • ata: libata-sff: Ensure that we cannot write outside the allocated buffer {CVE-2025-21738}
  • wifi: mac80211: don't flush non-uploaded STAs {CVE-2025-21828}
  • team: better TEAM_OPTION_TYPE_STRING validation {CVE-2025-21787}
  • ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922}
  • scsi: storvsc: Ratelimit warning logs to prevent VM denial of service {CVE-2025-21690}
  • sctp: sysctl: udp_port: avoid using current->nsproxy {CVE-2025-21637}
  • cgroup/cpuset: remove kernfs active break {CVE-2025-21634}
  • KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() {CVE-2024-58083}
  • idpf: convert workqueues to unbound {CVE-2024-58057}
  • xfrm: state: fix out-of-bounds read during lookup {CVE-2024-57982}
  • printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX {CVE-2024-58017}
  • Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() {CVE-2024-57988}
  • HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections {CVE-2024-57986}
  • virtio-blk: don't keep queue frozen during system suspend {CVE-2024-57946}
  • drm/amd/display: Initialize denominator defaults to 1 {CVE-2024-57950}
  • fs: relax assertions on failure to encode file handles {CVE-2024-57924}
  • drm/amd/display: Add check for granularity in dml ceil/floor helpers {CVE-2024-57922}
  • scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() {CVE-2024-56748}
  • ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() {CVE-2024-56782}
  • scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() {CVE-2024-56747}
  • netdevsim: prevent bad user input in…
Record
CLSA-2026-1779434490
Updated
2026-11-02
OSV No score

idpf: convert workqueues to unbound

In the Linux kernel, the following vulnerability has been resolved:

idpf: convert workqueues to unbound

When a workqueue is created with WQ_UNBOUND, its work items are served by special worker-pools, whose host workers are not bound to any specific CPU. In the default configuration (i.e. when queue_delayed_work and friends do not specify which CPU to run the work item on), WQ_UNBOUND allows the work item to be executed on any CPU in the same node of the CPU it was enqueued on. While this solution potentially sacrifices locality, it avoids contention with other processes that might dominate the CPU time of the processor the work item was scheduled on.

This is not just a theoretical problem: in a particular scenario misconfigured process was hogging most of the time from CPU0, leaving less than 0.5% of its CPU time to the kworker. The IDPF workqueues that were using the kworker on CPU0 suffered large completion delays as a result, causing performance degradation, timeouts and eventual system crash.

  • I have also run a manual test to gauge the performance improvement. The test consists of an antagonist process (./stress --cpu 2) consuming as much of CPU 0 as possible. This process is run under taskset 01 to bind it to CPU0, and its priority is changed with chrt -pQ 9900 10000 ${pid} and renice -n -20 ${pid} after start.

    Then, the IDPF driver is forced to prefer CPU0 by editing all calls to queue_delayed_work, mod_delayed_work, etc... to use CPU 0.

    Finally, ktraces for the workqueue events are collected.

    Without the current patch, the antagonist process can force arbitrary delays between workqueue_queue_work and workqueue_execute_start, that in my tests were as high as 30ms. With the current patch applied, the workqueue can be migrated to another unloaded CPU in the same node, and, keeping everything else equal, the maximum delay I could see was 6us.

Record
CVE-2024-58057
Updated
2026-11-02
OSVSUSE-SU-2025:01919-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
  • CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
  • CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-43869: perf: Fix hang while freeing sigtrap event (bsc#1229491).
  • CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
  • CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
  • CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
  • CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
  • CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
  • CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
  • CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
  • CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
  • CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
  • CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
  • CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086). -…
Record
SUSE-SU-2025:01919-1
Updated
2026-11-02
OSVSUSE-SU-2025:1177-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
  • CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
  • CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
  • CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
  • CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
  • CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
  • CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
  • CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
  • CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
  • CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
  • CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
  • CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
  • CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
  • CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
  • CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
  • CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
  • CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
  • CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
  • CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
  • CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
  • CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
  • CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738).
  • CVE-2025-21760: ndisc: extend RCU protection in ndisc_send_skb() (bsc#1238763).
  • CVE-2025-21761: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (bsc#1238775).
  • CVE-2025-21762: arp: use RCU protection in arp_xmit() (bsc#1238780).
  • CVE-2025-21763:…
Record
SUSE-SU-2025:1177-1
Updated
2026-11-02
OSVSUSE-SU-2025:1178-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
  • CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
  • CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
  • CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
  • CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
  • CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
  • CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
  • CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
  • CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
  • CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
  • CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
  • CVE-2024-57979: kABI workaround for pps changes (bsc#1238521).
  • CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
  • CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
  • CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
  • CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
  • CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
  • CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
  • CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
  • CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
  • CVE-2025-21733: tracing/osnoise: Fix resetting of tracepoints (bsc#1238494).
  • CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
  • CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
  • CVE-2025-21754: btrfs: fix assertion failure when splitting ordered extent after transaction abort (bsc#1238496).
  • CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738). -…
Record
SUSE-SU-2025:1178-1
Updated
2026-11-02
OSVSUSE-SU-2025:1180-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
  • CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
  • CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
  • CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
  • CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
  • CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
  • CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
  • CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
  • CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
  • CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
  • CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
  • CVE-2024-57979: kABI workaround for pps changes (bsc#1238521).
  • CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
  • CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
  • CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
  • CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
  • CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
  • CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
  • CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
  • CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
  • CVE-2025-21733: tracing/osnoise: Fix resetting of tracepoints (bsc#1238494).
  • CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
  • CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
  • CVE-2025-21754: btrfs: fix assertion failure when splitting ordered extent after transaction abort (bsc#1238496).
  • CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738). -…
Record
SUSE-SU-2025:1180-1
Updated
2026-11-02
OSVSUSE-SU-2025:20190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
  • CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
  • CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
  • CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…
Record
SUSE-SU-2025:20190-1
Updated
2026-11-02
OSVSUSE-SU-2025:20192-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
  • CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
  • CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free…
Record
SUSE-SU-2025:20192-1
Updated
2026-11-02
OSVSUSE-SU-2025:20260-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
  • CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
  • CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
  • CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…
Record
SUSE-SU-2025:20260-1
Updated
2026-11-02
OSVSUSE-SU-2025:20270-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
  • CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
  • CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free…
Record
SUSE-SU-2025:20270-1
Updated
2026-11-02
OSVUSN-7521-1 No score

linux, linux-azure, linux-azure-6.11, linux-gcp, linux-gcp-6.11, linux-hwe-6.11, linux-oem-6.11, linux-raspi, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Hardware crypto device drivers;
  • FireWire subsystem;
  • EFI core;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • Network drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • x86 platform drivers;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • Remote Processor subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Framebuffer layer;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • BPF subsystem;
  • Timer subsystem;
  • KVM subsystem;
  • Networking core;
  • ptr_ring data structure definitions;
  • Networking subsytem;
  • Amateur Radio drivers;
  • L3 Master device support module;
  • TCP network protocol;
  • XFRM subsystem;
  • Tracing infrastructure;
  • io_uring subsystem;
  • Process Accounting mechanism;
  • Perf events;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Workqueue subsystem;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • RxRPC session sockets;
  • Network traffic control;
  • Wireless networking;
  • Key management;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module;
  • SoC audio core drivers;
  • SOF drivers; (CVE-2025-21737, CVE-2025-21711, CVE-2025-21987, CVE-2025-21848, CVE-2024-49570, CVE-2025-21762, CVE-2025-21738, CVE-2025-21712, CVE-2025-21719, CVE-2025-21870, CVE-2024-57984, CVE-2025-21815, CVE-2025-21744, CVE-2024-58058, CVE-2024-58078, CVE-2024-57990, CVE-2024-54458, CVE-2025-21899, CVE-2025-21814, CVE-2025-21746, CVE-2024-54456, CVE-2025-21739, CVE-2024-58057, CVE-2025-21855, CVE-2025-21758, CVE-2024-58006, CVE-2024-58007, CVE-2025-21720, CVE-2024-58090, CVE-2025-21852, CVE-2024-57982, CVE-2024-58013, CVE-2024-58082, CVE-2025-21825, CVE-2024-58072, CVE-2024-57996, CVE-2025-21787, CVE-2025-21742, CVE-2025-21705, CVE-2025-21829, CVE-2024-58060, CVE-2025-21811, CVE-2025-21900, CVE-2025-21853, CVE-2025-21809, CVE-2025-21938, CVE-2025-21728, CVE-2025-21785, CVE-2025-21732, CVE-2025-21888, CVE-2025-21768, CVE-2025-21875, CVE-2025-21721, CVE-2025-21766, CVE-2025-21892, CVE-2024-57953, CVE-2025-21772, CVE-2025-21735, CVE-2024-58017, CVE-2024-58086, CVE-2024-58084, CVE-2025-21761, CVE-2024-58008, CVE-2024-57988, CVE-2025-21874, CVE-2024-58011, CVE-2025-21706, CVE-2024-57999, CVE-2025-21858, CVE-2024-58061, CVE-2025-21727, CVE-2025-21780, CVE-2024-58051, CVE-2025-21791, CVE-2025-21788, CVE-2025-21786, CVE-2024-58012, CVE-2024-58010, CVE-2024-58001, CVE-2025-21844, CVE-2025-21708, CVE-2024-57834, CVE-2025-21873,…
Record
USN-7521-1
Updated
2026-11-02
OSVUSN-7521-3 No score

linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Hardware crypto device drivers;
  • FireWire subsystem;
  • EFI core;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • Network drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • x86 platform drivers;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • Remote Processor subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Framebuffer layer;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • BPF subsystem;
  • Timer subsystem;
  • KVM subsystem;
  • Networking core;
  • ptr_ring data structure definitions;
  • Networking subsytem;
  • Amateur Radio drivers;
  • L3 Master device support module;
  • TCP network protocol;
  • XFRM subsystem;
  • Tracing infrastructure;
  • io_uring subsystem;
  • Process Accounting mechanism;
  • Perf events;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Workqueue subsystem;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • RxRPC session sockets;
  • Network traffic control;
  • Wireless networking;
  • Key management;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module;
  • SoC audio core drivers;
  • SOF drivers; (CVE-2025-21799, CVE-2025-21765, CVE-2024-57834, CVE-2025-21971, CVE-2025-21855, CVE-2024-58019, CVE-2025-21987, CVE-2025-21754, CVE-2025-21779, CVE-2024-57986, CVE-2025-21809, CVE-2025-21887, CVE-2025-21744, CVE-2024-58014, CVE-2025-21892, CVE-2025-21848, CVE-2024-58051, CVE-2024-58085, CVE-2025-21862, CVE-2024-57981, CVE-2024-57987, CVE-2024-58053, CVE-2024-58063, CVE-2024-58079, CVE-2025-21875, CVE-2025-21715, CVE-2024-58004, CVE-2025-21857, CVE-2025-21856, CVE-2025-21938, CVE-2024-58082, CVE-2025-21815, CVE-2025-21864, CVE-2024-52559, CVE-2024-58078, CVE-2024-57989, CVE-2024-58001, CVE-2025-21889, CVE-2025-21739, CVE-2024-58005, CVE-2025-21829, CVE-2024-58069, CVE-2025-21712, CVE-2025-21846, CVE-2025-21883, CVE-2025-21852, CVE-2025-21808, CVE-2025-21900, CVE-2025-21888, CVE-2025-21784, CVE-2025-21838, CVE-2024-58054, CVE-2025-21781, CVE-2025-21737, CVE-2024-58013, CVE-2025-21885, CVE-2025-21877, CVE-2024-58010, CVE-2025-21844, CVE-2024-58012, CVE-2024-58083, CVE-2025-21783, CVE-2025-21798, CVE-2024-57973, CVE-2024-57982, CVE-2025-21708, CVE-2024-58003, CVE-2025-21786, CVE-2025-21750, CVE-2025-21870, CVE-2025-21745, CVE-2024-58081, CVE-2024-57979, CVE-2025-21718, CVE-2025-21816, CVE-2025-21868, CVE-2025-21731, CVE-2025-21814, CVE-2025-21826, CVE-2024-58006, CVE-2025-21821, CVE-2024-57852, CVE-2025-21746,…
Record
USN-7521-3
Updated
2026-11-02
OSVUSN-7651-1 No score

linux, linux-aws, linux-oem-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • Block layer subsystem;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Network block device driver;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • FireWire subsystem;
  • GPU drivers;
  • HID subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • Network drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • x86 platform drivers;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • Remote Processor subsystem;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • Media staging drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • NILFS2 file system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • KVM subsystem;
  • Networking core;
  • ptr_ring data structure definitions;
  • Networking subsytem;
  • Amateur Radio drivers;
  • XFRM subsystem;
  • Tracing infrastructure;
  • BPF subsystem;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Memory management;
  • Bluetooth subsystem;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Rose network layer;
  • RxRPC session sockets;
  • Network traffic control;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module;
  • SoC audio core drivers; (CVE-2024-57980, CVE-2024-58061, CVE-2025-21742, CVE-2025-21820, CVE-2024-57993, CVE-2024-58071, CVE-2024-58017, CVE-2024-58019, CVE-2025-21745, CVE-2024-58016, CVE-2024-58011, CVE-2024-58054, CVE-2025-21731, CVE-2024-58058, CVE-2024-58082, CVE-2025-21722, CVE-2024-58063, CVE-2024-58014, CVE-2025-21735, CVE-2025-21828, CVE-2025-21804, CVE-2024-58018, CVE-2025-21814, CVE-2024-58005, CVE-2024-58078, CVE-2025-21832, CVE-2025-21725, CVE-2025-21732, CVE-2025-21718, CVE-2024-58069, CVE-2024-58052, CVE-2024-57973, CVE-2025-21825, CVE-2024-58056, CVE-2024-58080, CVE-2025-21810, CVE-2024-57953, CVE-2025-37974, CVE-2024-57979, CVE-2025-21708, CVE-2024-57974, CVE-2025-21753, CVE-2025-21736, CVE-2025-21728, CVE-2025-21743, CVE-2025-21815, CVE-2025-21802, CVE-2025-21739, CVE-2024-57986, CVE-2024-57982, CVE-2025-21749, CVE-2025-21806, CVE-2025-21754, CVE-2025-21738, CVE-2025-21716, CVE-2025-21705, CVE-2024-57998, CVE-2024-58006, CVE-2024-58068, CVE-2025-21748, CVE-2024-58077, CVE-2025-21723, CVE-2024-58013, CVE-2025-21719, CVE-2024-58002, CVE-2025-21750, CVE-2024-58053, CVE-2024-58070, CVE-2025-21809, CVE-2024-57975, CVE-2025-21816, CVE-2025-21798, CVE-2024-58051, CVE-2024-58083, CVE-2025-21808, CVE-2025-21799, CVE-2024-57996, CVE-2024-58085, CVE-2025-21744, CVE-2024-57994, CVE-2024-58055, CVE-2024-58076, CVE-2025-21710, CVE-2025-21707, CVE-2024-58072, CVE-2025-21726, CVE-2025-21811, CVE-2025-37750, CVE-2024-58001, CVE-2025-21714, CVE-2025-21711, CVE-2025-21830, CVE-2024-58007, CVE-2025-21812, CVE-2025-21734, CVE-2024-58034, CVE-2024-58081, CVE-2024-58079, CVE-2024-58003, CVE-2025-21721, CVE-2024-49887, CVE-2024-57984, CVE-2025-21715, CVE-2025-21801, CVE-2024-57997, CVE-2025-21741, CVE-2025-21727, CVE-2024-58057, CVE-2025-21724, CVE-2024-57990, CVE-2024-57981, CVE-2024-57999, CVE-2025-21733, CVE-2025-21829, CVE-2024-58010, CVE-2025-21720, CVE-2025-21826)
Record
USN-7651-1
Updated
2026-11-02
OSVUSN-7651-2 No score

linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • Block layer subsystem;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Network block device driver;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • FireWire subsystem;
  • GPU drivers;
  • HID subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • Network drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • x86 platform drivers;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • Remote Processor subsystem;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • Media staging drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • NILFS2 file system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • KVM subsystem;
  • Networking core;
  • ptr_ring data structure definitions;
  • Networking subsytem;
  • Amateur Radio drivers;
  • XFRM subsystem;
  • Tracing infrastructure;
  • BPF subsystem;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Memory management;
  • Bluetooth subsystem;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Rose network layer;
  • RxRPC session sockets;
  • Network traffic control;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module;
  • SoC audio core drivers; (CVE-2024-57980, CVE-2024-57999, CVE-2025-21727, CVE-2024-58058, CVE-2024-58052, CVE-2025-21739, CVE-2025-21722, CVE-2024-58072, CVE-2025-21748, CVE-2024-57993, CVE-2024-58003, CVE-2024-58077, CVE-2025-21734, CVE-2024-58070, CVE-2025-21719, CVE-2024-58006, CVE-2025-21826, CVE-2024-58061, CVE-2025-21745, CVE-2025-21715, CVE-2024-58078, CVE-2025-21829, CVE-2024-49887, CVE-2025-21742, CVE-2025-21721, CVE-2025-21724, CVE-2025-21828, CVE-2025-21814, CVE-2025-21801, CVE-2024-57953, CVE-2024-58081, CVE-2024-58080, CVE-2025-21753, CVE-2025-21732, CVE-2025-21811, CVE-2025-37974, CVE-2024-58068, CVE-2024-58010, CVE-2024-58011, CVE-2024-58085, CVE-2025-21714, CVE-2025-21705, CVE-2025-21735, CVE-2024-58001, CVE-2024-58082, CVE-2024-58055, CVE-2025-21743, CVE-2025-21716, CVE-2024-57998, CVE-2025-21731, CVE-2024-58017, CVE-2024-58053, CVE-2025-21808, CVE-2024-57997, CVE-2024-58016, CVE-2024-58076, CVE-2025-21710, CVE-2025-21738, CVE-2025-21809, CVE-2025-21733, CVE-2025-21810, CVE-2024-57996, CVE-2024-58005, CVE-2025-21720, CVE-2025-21728, CVE-2024-58054, CVE-2024-58057, CVE-2025-21725, CVE-2025-21812, CVE-2025-21830, CVE-2024-58014, CVE-2025-21832, CVE-2024-58002, CVE-2025-21802, CVE-2024-57986, CVE-2025-21749, CVE-2024-58018, CVE-2024-57984, CVE-2025-21736, CVE-2024-58079, CVE-2024-58034, CVE-2024-57973, CVE-2024-57974, CVE-2025-21718, CVE-2025-21723, CVE-2024-58019, CVE-2025-21820, CVE-2024-58013, CVE-2025-21707, CVE-2024-58071, CVE-2025-21711, CVE-2024-58056, CVE-2024-58007, CVE-2024-58051, CVE-2025-21815, CVE-2024-57982, CVE-2025-21799, CVE-2025-21754, CVE-2025-21708, CVE-2025-21798, CVE-2024-57979, CVE-2024-57981, CVE-2024-58069, CVE-2025-21744, CVE-2025-21741, CVE-2024-58063, CVE-2024-58083, CVE-2024-57994, CVE-2025-21804, CVE-2025-21825, CVE-2024-57990, CVE-2025-21726, CVE-2025-21806, CVE-2024-57975, CVE-2025-21750, CVE-2025-21816, CVE-2025-37750)
Record
USN-7651-2
Updated
2026-11-02
OSVUSN-7651-3 No score

linux-aws-6.8, linux-gke, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • Block layer subsystem;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Network block device driver;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • FireWire subsystem;
  • GPU drivers;
  • HID subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • Network drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • x86 platform drivers;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • Remote Processor subsystem;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • Media staging drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • NILFS2 file system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • KVM subsystem;
  • Networking core;
  • ptr_ring data structure definitions;
  • Networking subsytem;
  • Amateur Radio drivers;
  • XFRM subsystem;
  • Tracing infrastructure;
  • BPF subsystem;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Memory management;
  • Bluetooth subsystem;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Rose network layer;
  • RxRPC session sockets;
  • Network traffic control;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module;
  • SoC audio core drivers; (CVE-2024-58058, CVE-2024-57984, CVE-2025-21727, CVE-2025-21812, CVE-2024-58070, CVE-2024-57974, CVE-2025-21810, CVE-2025-21816, CVE-2024-58085, CVE-2025-21738, CVE-2024-58057, CVE-2025-21733, CVE-2024-58054, CVE-2024-57994, CVE-2025-21721, CVE-2024-57979, CVE-2025-21825, CVE-2025-37750, CVE-2025-21750, CVE-2025-21798, CVE-2024-58080, CVE-2024-58034, CVE-2025-21724, CVE-2025-21714, CVE-2025-21742, CVE-2025-21720, CVE-2024-58077, CVE-2025-21710, CVE-2024-58014, CVE-2024-58052, CVE-2024-57986, CVE-2024-58007, CVE-2024-58017, CVE-2025-21731, CVE-2024-58056, CVE-2025-21722, CVE-2025-21826, CVE-2024-58079, CVE-2024-58005, CVE-2025-21732, CVE-2025-21749, CVE-2024-57998, CVE-2024-58055, CVE-2025-21809, CVE-2025-21806, CVE-2025-21820, CVE-2024-58010, CVE-2025-21829, CVE-2025-21705, CVE-2024-58082, CVE-2024-58051, CVE-2024-57982, CVE-2025-21723, CVE-2024-58053, CVE-2024-57973, CVE-2024-58006, CVE-2025-21707, CVE-2024-58061, CVE-2025-21735, CVE-2025-21804, CVE-2024-58068, CVE-2024-57996, CVE-2025-21748, CVE-2024-57999, CVE-2024-58069, CVE-2024-57953, CVE-2025-21718, CVE-2024-49887, CVE-2025-21708, CVE-2024-58063, CVE-2024-58001, CVE-2025-21811, CVE-2025-21744, CVE-2025-21754, CVE-2025-21734, CVE-2025-21715, CVE-2024-57981, CVE-2025-21743, CVE-2024-57990, CVE-2024-58011, CVE-2025-21745, CVE-2024-58076, CVE-2024-58002, CVE-2024-57997, CVE-2025-21728, CVE-2025-21802, CVE-2025-21830, CVE-2025-21719, CVE-2025-21711, CVE-2024-57975, CVE-2025-37974, CVE-2025-21716, CVE-2024-58071, CVE-2024-58019, CVE-2025-21828, CVE-2025-21832, CVE-2025-21799, CVE-2025-21739, CVE-2024-58083, CVE-2025-21725, CVE-2024-58013, CVE-2025-21801, CVE-2025-21808, CVE-2024-58003, CVE-2025-21814, CVE-2024-58016, CVE-2024-58072, CVE-2024-57993, CVE-2024-58018, CVE-2025-21726, CVE-2024-57980, CVE-2024-58081, CVE-2024-58078, CVE-2025-21736, CVE-2025-21753, CVE-2025-21741, CVE-2025-21815)
Record
USN-7651-3
Updated
2026-11-02
OSVUSN-7651-4 No score

linux-gcp, linux-gcp-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • Block layer subsystem;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Network block device driver;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • FireWire subsystem;
  • GPU drivers;
  • HID subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • Network drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • x86 platform drivers;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • Remote Processor subsystem;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • Media staging drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • NILFS2 file system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • KVM subsystem;
  • Networking core;
  • ptr_ring data structure definitions;
  • Networking subsytem;
  • Amateur Radio drivers;
  • XFRM subsystem;
  • Tracing infrastructure;
  • BPF subsystem;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Memory management;
  • Bluetooth subsystem;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Rose network layer;
  • RxRPC session sockets;
  • Network traffic control;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module;
  • SoC audio core drivers; (CVE-2024-58052, CVE-2025-21826, CVE-2025-21736, CVE-2025-21809, CVE-2025-21723, CVE-2024-57994, CVE-2025-21802, CVE-2024-58003, CVE-2024-58078, CVE-2025-21742, CVE-2025-21721, CVE-2024-57973, CVE-2025-21830, CVE-2025-21733, CVE-2025-21714, CVE-2024-58002, CVE-2025-21804, CVE-2025-21825, CVE-2024-58014, CVE-2024-58055, CVE-2025-21808, CVE-2024-57986, CVE-2024-57997, CVE-2024-57981, CVE-2025-21753, CVE-2025-21743, CVE-2025-37750, CVE-2024-57975, CVE-2025-21741, CVE-2025-21715, CVE-2025-21744, CVE-2025-21829, CVE-2025-21801, CVE-2025-21815, CVE-2024-58051, CVE-2024-58082, CVE-2024-58058, CVE-2024-58079, CVE-2024-58006, CVE-2024-58011, CVE-2025-21750, CVE-2024-57996, CVE-2025-21705, CVE-2024-58056, CVE-2024-58072, CVE-2025-21806, CVE-2024-57999, CVE-2025-21814, CVE-2024-58080, CVE-2024-57953, CVE-2025-37974, CVE-2025-21732, CVE-2024-58069, CVE-2024-58053, CVE-2024-58054, CVE-2025-21725, CVE-2025-21708, CVE-2025-21799, CVE-2024-57998, CVE-2024-57984, CVE-2025-21719, CVE-2024-58057, CVE-2024-57990, CVE-2024-57979, CVE-2025-21722, CVE-2025-21812, CVE-2024-58071, CVE-2024-57974, CVE-2024-58076, CVE-2024-57980, CVE-2024-58005, CVE-2024-58007, CVE-2024-58083, CVE-2025-21716, CVE-2025-21710, CVE-2025-21745, CVE-2024-58063, CVE-2024-58018, CVE-2024-57993, CVE-2024-49887, CVE-2025-21798, CVE-2024-58081, CVE-2025-21810, CVE-2024-58068, CVE-2024-58013, CVE-2025-21731, CVE-2024-57982, CVE-2025-21727, CVE-2025-21738, CVE-2025-21811, CVE-2024-58085, CVE-2025-21735, CVE-2025-21720, CVE-2025-21748, CVE-2025-21749, CVE-2024-58077, CVE-2025-21711, CVE-2025-21726, CVE-2025-21754, CVE-2024-58019, CVE-2025-21739, CVE-2024-58010, CVE-2024-58070, CVE-2025-21724, CVE-2024-58061, CVE-2025-21820, CVE-2025-21816, CVE-2025-21718, CVE-2024-58017, CVE-2025-21734, CVE-2025-21728, CVE-2024-58034, CVE-2024-58016, CVE-2024-58001, CVE-2025-21832, CVE-2025-21707, CVE-2025-21828)
Record
USN-7651-4
Updated
2026-11-02
OSVUSN-7651-5 No score

linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • Block layer subsystem;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Network block device driver;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • FireWire subsystem;
  • GPU drivers;
  • HID subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • Network drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • x86 platform drivers;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • Remote Processor subsystem;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • Media staging drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • NILFS2 file system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • KVM subsystem;
  • Networking core;
  • ptr_ring data structure definitions;
  • Networking subsytem;
  • Amateur Radio drivers;
  • XFRM subsystem;
  • Tracing infrastructure;
  • BPF subsystem;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Memory management;
  • Bluetooth subsystem;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Rose network layer;
  • RxRPC session sockets;
  • Network traffic control;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module;
  • SoC audio core drivers; (CVE-2024-57973, CVE-2024-58076, CVE-2025-21733, CVE-2024-58016, CVE-2024-58013, CVE-2025-21731, CVE-2024-58017, CVE-2024-58079, CVE-2025-21815, CVE-2025-21812, CVE-2025-21705, CVE-2025-21804, CVE-2025-21718, CVE-2025-21802, CVE-2025-21708, CVE-2024-58011, CVE-2025-21734, CVE-2025-21716, CVE-2024-57998, CVE-2025-21715, CVE-2024-57975, CVE-2024-57981, CVE-2025-21738, CVE-2025-21820, CVE-2025-21721, CVE-2024-58069, CVE-2025-21732, CVE-2025-21742, CVE-2025-21754, CVE-2025-21745, CVE-2024-57974, CVE-2025-21826, CVE-2025-37974, CVE-2025-21801, CVE-2024-58054, CVE-2024-58071, CVE-2025-21799, CVE-2024-58034, CVE-2024-58070, CVE-2025-21739, CVE-2024-58061, CVE-2024-57980, CVE-2025-21741, CVE-2024-57990, CVE-2025-21816, CVE-2025-21719, CVE-2024-57999, CVE-2025-37750, CVE-2024-49887, CVE-2025-21808, CVE-2024-58081, CVE-2025-21710, CVE-2025-21728, CVE-2024-58018, CVE-2025-21825, CVE-2024-57986, CVE-2025-21727, CVE-2024-57984, CVE-2025-21725, CVE-2024-57979, CVE-2024-58056, CVE-2025-21707, CVE-2025-21811, CVE-2024-58003, CVE-2024-58057, CVE-2024-58063, CVE-2024-58005, CVE-2025-21748, CVE-2024-57993, CVE-2024-58006, CVE-2025-21832, CVE-2024-58072, CVE-2025-21736, CVE-2025-21798, CVE-2025-21711, CVE-2024-58002, CVE-2024-58080, CVE-2025-21720, CVE-2024-58010, CVE-2025-21809, CVE-2025-21829, CVE-2024-58019, CVE-2025-21724, CVE-2024-58058, CVE-2025-21735, CVE-2024-57994, CVE-2024-58078, CVE-2024-57997, CVE-2025-21806, CVE-2024-58077, CVE-2024-58051, CVE-2024-58083, CVE-2024-58055, CVE-2025-21750, CVE-2024-58082, CVE-2024-58001, CVE-2025-21810, CVE-2025-21744, CVE-2024-57953, CVE-2024-58007, CVE-2025-21722, CVE-2025-21828, CVE-2025-21714, CVE-2024-58053, CVE-2025-21726, CVE-2024-58085, CVE-2024-58014, CVE-2024-58052, CVE-2025-21749, CVE-2025-21814, CVE-2025-21743, CVE-2024-57996, CVE-2025-21830, CVE-2025-21723, CVE-2024-58068, CVE-2025-21753, CVE-2024-57982)
Record
USN-7651-5
Updated
2026-11-02
OSVUSN-7651-6 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • Block layer subsystem;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Network block device driver;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • FireWire subsystem;
  • GPU drivers;
  • HID subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • Network drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • x86 platform drivers;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • Remote Processor subsystem;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • Media staging drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • NILFS2 file system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • KVM subsystem;
  • Networking core;
  • ptr_ring data structure definitions;
  • Networking subsytem;
  • Amateur Radio drivers;
  • XFRM subsystem;
  • Tracing infrastructure;
  • BPF subsystem;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Memory management;
  • Bluetooth subsystem;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Rose network layer;
  • RxRPC session sockets;
  • Network traffic control;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module;
  • SoC audio core drivers; (CVE-2025-21829, CVE-2025-21753, CVE-2024-58051, CVE-2025-21738, CVE-2025-21727, CVE-2025-21719, CVE-2024-57982, CVE-2025-21745, CVE-2024-58003, CVE-2025-21716, CVE-2025-21728, CVE-2024-58001, CVE-2024-58069, CVE-2025-21754, CVE-2025-21812, CVE-2025-21816, CVE-2024-58071, CVE-2024-58018, CVE-2025-21708, CVE-2024-58078, CVE-2025-21707, CVE-2025-21741, CVE-2024-57996, CVE-2024-58019, CVE-2024-58014, CVE-2024-58058, CVE-2024-57953, CVE-2025-21710, CVE-2024-58061, CVE-2025-21808, CVE-2025-21826, CVE-2025-21725, CVE-2025-21722, CVE-2025-21733, CVE-2024-58034, CVE-2025-21718, CVE-2025-21714, CVE-2025-21723, CVE-2025-21743, CVE-2025-21736, CVE-2024-58056, CVE-2025-21810, CVE-2024-58077, CVE-2024-58002, CVE-2024-49887, CVE-2025-21739, CVE-2024-57980, CVE-2025-21721, CVE-2025-21815, CVE-2025-21811, CVE-2024-57974, CVE-2024-58005, CVE-2025-21814, CVE-2024-58055, CVE-2025-21744, CVE-2025-21798, CVE-2024-58082, CVE-2024-58081, CVE-2025-21832, CVE-2024-58053, CVE-2025-21828, CVE-2024-58076, CVE-2025-21820, CVE-2024-58083, CVE-2024-58054, CVE-2024-57984, CVE-2025-21742, CVE-2024-58013, CVE-2025-21799, CVE-2025-21715, CVE-2025-21750, CVE-2025-21804, CVE-2024-57994, CVE-2024-58010, CVE-2024-58007, CVE-2024-58011, CVE-2024-57975, CVE-2025-37750, CVE-2025-21731, CVE-2025-21726, CVE-2024-58052, CVE-2024-57979, CVE-2025-21720, CVE-2025-21724, CVE-2024-57986, CVE-2024-58057, CVE-2024-58080, CVE-2024-58079, CVE-2024-57990, CVE-2025-21748, CVE-2025-21806, CVE-2025-21825, CVE-2024-58016, CVE-2025-21711, CVE-2024-58072, CVE-2025-21732, CVE-2024-57999, CVE-2024-57981, CVE-2024-58068, CVE-2025-21734, CVE-2024-58017, CVE-2024-57997, CVE-2025-21749, CVE-2025-37974, CVE-2025-21802, CVE-2024-58070, CVE-2025-21809, CVE-2024-58063, CVE-2024-58085, CVE-2025-21735, CVE-2024-57973, CVE-2024-58006, CVE-2024-57993, CVE-2025-21705, CVE-2024-57998, CVE-2025-21830, CVE-2025-21801)
Record
USN-7651-6
Updated
2026-11-02
OSVUSN-7652-1 No score

linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • Block layer subsystem;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Network block device driver;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • FireWire subsystem;
  • GPU drivers;
  • HID subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • Network drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • x86 platform drivers;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • Remote Processor subsystem;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • Media staging drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • NILFS2 file system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • KVM subsystem;
  • Networking core;
  • ptr_ring data structure definitions;
  • Networking subsytem;
  • Amateur Radio drivers;
  • XFRM subsystem;
  • Tracing infrastructure;
  • BPF subsystem;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Memory management;
  • Bluetooth subsystem;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Rose network layer;
  • RxRPC session sockets;
  • Network traffic control;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module;
  • SoC audio core drivers; (CVE-2024-58055, CVE-2024-58077, CVE-2024-58080, CVE-2024-58082, CVE-2025-21743, CVE-2024-57953, CVE-2024-57994, CVE-2025-21806, CVE-2024-58007, CVE-2024-58002, CVE-2024-57974, CVE-2024-57980, CVE-2025-21720, CVE-2024-57990, CVE-2025-21725, CVE-2024-58057, CVE-2024-58018, CVE-2024-58011, CVE-2025-21814, CVE-2025-21799, CVE-2024-58017, CVE-2024-58014, CVE-2025-21731, CVE-2024-58072, CVE-2024-58069, CVE-2024-58006, CVE-2024-57984, CVE-2025-21710, CVE-2024-58061, CVE-2024-57997, CVE-2024-57975, CVE-2025-21724, CVE-2025-37974, CVE-2025-21808, CVE-2024-58056, CVE-2025-21753, CVE-2024-58068, CVE-2025-21728, CVE-2025-21714, CVE-2024-58054, CVE-2025-21741, CVE-2025-21736, CVE-2025-21715, CVE-2025-21802, CVE-2025-21739, CVE-2025-21727, CVE-2025-21749, CVE-2024-58053, CVE-2024-58081, CVE-2025-21828, CVE-2025-21705, CVE-2024-58051, CVE-2024-57979, CVE-2025-21754, CVE-2025-21734, CVE-2025-21829, CVE-2025-21735, CVE-2025-21826, CVE-2025-21738, CVE-2024-58079, CVE-2025-21815, CVE-2025-21708, CVE-2024-57986, CVE-2024-58085, CVE-2025-21801, CVE-2024-58071, CVE-2025-21810, CVE-2025-21726, CVE-2025-21744, CVE-2025-21830, CVE-2025-21748, CVE-2024-58001, CVE-2024-58063, CVE-2024-57996, CVE-2025-21716, CVE-2024-58013, CVE-2024-58019, CVE-2025-21811, CVE-2025-21711, CVE-2024-58076, CVE-2024-58070, CVE-2024-57982, CVE-2024-57998, CVE-2025-21745, CVE-2025-21804, CVE-2024-57973, CVE-2024-58083, CVE-2025-21742, CVE-2025-37750, CVE-2025-21733, CVE-2025-21750, CVE-2024-57981, CVE-2025-21718, CVE-2024-58058, CVE-2024-49887, CVE-2024-58003, CVE-2024-57993, CVE-2024-57999, CVE-2024-58010, CVE-2025-21825, CVE-2025-21732, CVE-2025-21719, CVE-2025-21721, CVE-2024-58034, CVE-2024-58005, CVE-2025-21707, CVE-2025-21809, CVE-2024-58078, CVE-2025-21812, CVE-2024-58016, CVE-2025-21816, CVE-2024-58052, CVE-2025-21722, CVE-2025-21832, CVE-2025-21723, CVE-2025-21820, CVE-2025-21798)
Record
USN-7652-1
Updated
2026-11-02
OSVUSN-7653-1 No score

linux-hwe-6.8 vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • Block layer subsystem;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Network block device driver;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • FireWire subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • Network drivers;
  • Mellanox network drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • Remote Processor subsystem;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • Media staging drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Serial drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • GFS2 file system;
  • NILFS2 file system;
  • File system notification infrastructure;
  • Overlay file system;
  • Proc file system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • KVM subsystem;
  • Networking core;
  • ptr_ring data structure definitions;
  • Networking subsytem;
  • Amateur Radio drivers;
  • XFRM subsystem;
  • Tracing infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Memory management;
  • Bluetooth subsystem;
  • DCCP (Datagram Congestion Control Protocol);
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • RxRPC session sockets;
  • Network traffic control;
  • VMware vSockets driver;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module;
  • SoC audio core drivers; (CVE-2025-21830, CVE-2025-21678, CVE-2025-21815, CVE-2024-57974, CVE-2025-21725, CVE-2025-21718, CVE-2025-21748, CVE-2025-21732, CVE-2024-57953, CVE-2025-21727, CVE-2025-21816, CVE-2025-21719, CVE-2024-53124, CVE-2024-58019, CVE-2025-38001, CVE-2025-21720, CVE-2025-21734, CVE-2025-21672, CVE-2025-21692, CVE-2024-58076, CVE-2025-21694, CVE-2024-58061, CVE-2025-21714, CVE-2025-21689, CVE-2024-49887, CVE-2024-57949, CVE-2025-38177, CVE-2025-21683, CVE-2025-21669, CVE-2025-21722, CVE-2024-57980, CVE-2025-38000, CVE-2025-37932, CVE-2024-58034, CVE-2024-58081, CVE-2025-21733, CVE-2025-21682, CVE-2024-57924, CVE-2025-21743, CVE-2024-57975, CVE-2025-37798, CVE-2024-58058, CVE-2025-21809, CVE-2025-21676, CVE-2024-57993, CVE-2025-21699, CVE-2024-58016, CVE-2025-21832, CVE-2025-21804, CVE-2024-58011, CVE-2024-58007, CVE-2025-21826, CVE-2024-58055, CVE-2025-21668, CVE-2025-21715, CVE-2024-58078, CVE-2025-21829, CVE-2025-21811, CVE-2025-21814, CVE-2024-58053, CVE-2025-21726, CVE-2025-21943, CVE-2025-37750, CVE-2025-21673, CVE-2024-57984, CVE-2025-37997, CVE-2025-21684, CVE-2025-21750, CVE-2024-58013, CVE-2025-21799, CVE-2024-58083, CVE-2025-21798, CVE-2025-21731, CVE-2025-21708, CVE-2024-57986, CVE-2025-21744, CVE-2024-58014, CVE-2025-21721, CVE-2024-58063, CVE-2024-57979, CVE-2024-58005, CVE-2025-21728, CVE-2025-21681, CVE-2025-21806, CVE-2024-57982, CVE-2024-58002, CVE-2024-58082, CVE-2025-21812, CVE-2025-21745, CVE-2024-58017, CVE-2025-21665, CVE-2025-21828, CVE-2025-37890,…
Record
USN-7653-1
Updated
2026-11-03
OSVUSN-7737-1 No score

linux-azure, linux-azure-6.8, linux-azure-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Network block device driver;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • FireWire subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • Network drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • x86 platform drivers;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • Remote Processor subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Framebuffer layer;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • KVM subsystem;
  • Networking core;
  • ptr_ring data structure definitions;
  • Networking subsytem;
  • Amateur Radio drivers;
  • L3 Master device support module;
  • TCP network protocol;
  • XFRM subsystem;
  • Tracing infrastructure;
  • io_uring subsystem;
  • Process Accounting mechanism;
  • BPF subsystem;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Workqueue subsystem;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • RxRPC session sockets;
  • Network traffic control;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module;
  • SoC audio core drivers;
  • SOF drivers; (CVE-2025-37750, CVE-2025-21707, CVE-2025-21814, CVE-2025-21863, CVE-2025-21775, CVE-2024-57997, CVE-2025-21749, CVE-2025-21739, CVE-2025-21829, CVE-2025-21731, CVE-2025-21704, CVE-2024-57979, CVE-2025-21864, CVE-2024-57953, CVE-2025-21796, CVE-2025-21826, CVE-2024-57998, CVE-2025-21784, CVE-2024-58072, CVE-2025-21859, CVE-2025-21790, CVE-2025-21762, CVE-2025-37797, CVE-2024-57981, CVE-2024-58068, CVE-2025-21810, CVE-2024-58070, CVE-2025-21738, CVE-2024-58081, CVE-2024-58010, CVE-2025-21832, CVE-2025-21839, CVE-2024-58061, CVE-2024-58069, CVE-2024-58055, CVE-2024-57834, CVE-2025-21804, CVE-2025-21783, CVE-2025-21772, CVE-2024-57975, CVE-2024-57980, CVE-2024-58082, CVE-2025-21741, CVE-2025-21733, CVE-2025-21750, CVE-2025-21728, CVE-2025-21716, CVE-2025-21753, CVE-2025-21802, CVE-2024-57993, CVE-2025-21785, CVE-2024-57994, CVE-2025-21868, CVE-2025-21812, CVE-2025-21760, CVE-2025-21782, CVE-2025-21763, CVE-2024-57999, CVE-2025-21823, CVE-2024-57986, CVE-2024-58080, CVE-2025-21766, CVE-2025-21743, CVE-2025-21838, CVE-2025-21706, CVE-2025-21820, CVE-2024-58003, CVE-2025-21809, CVE-2025-21867, CVE-2024-57982, CVE-2025-21759, CVE-2024-57984, CVE-2025-21736, CVE-2024-58058, CVE-2025-21754, CVE-2024-49887, CVE-2025-21781, CVE-2025-21795, CVE-2025-21746, CVE-2024-58019, CVE-2025-21780, CVE-2024-58083, CVE-2025-21734, CVE-2025-21764, CVE-2025-21825, CVE-2024-54456, CVE-2024-58056, CVE-2025-21861, CVE-2024-57973, CVE-2025-21735, CVE-2025-21705, CVE-2024-57990, CVE-2025-21836, CVE-2025-21816, CVE-2024-58088, CVE-2024-58005, CVE-2025-21761,…
Record
USN-7737-1
Updated
2026-11-03

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-cross-headers
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-doc
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-headers
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules-extra-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-abi-stablelists
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-core
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-cross-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-debug-uki-virt-addons
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-doc
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-core
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-debug-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-rt-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-selftests-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-tools
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-tools-libs
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-uki-virt
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
kernel-uki-virt-addons
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
libperf
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
libperf-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
perf
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
python3-perf
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
rtla
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
rv
TuxCare:AlmaLinux:9.6
From an advisory covering 100 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els1
5.14.0-570.62.1.el9_6.tuxcare.5.els1
Kernel
Linux
 6.7.0 up to 6.12.13, 6.13.0 up to 6.13.2
6.12.136.13.2
linux
Debian:13
 before 6.12.13-1
6.12.13-1
linux
Debian:14
 before 6.12.13-1
6.12.13-1
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-doc
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-tools-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
libperf-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
perf
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
perf-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
python3-perf
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
python3-perf-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
rtla
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
rv
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-abi-stablelists
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-uki-virt
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-modules-extra-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-tools
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-tools-libs
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-uki-virt
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel
Rocky Linux:10
From an advisory covering 88 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel
Rocky Linux:9
From an advisory covering 111 CVEs
 before 0:5.14.0-611.5.1.el9_7
0:5.14.0-611.5.1.el9_7
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 433 CVEs
 before 6.4.0-15061.21.coco15sp6.1
6.4.0-15061.21.coco15sp6.1
kernel-coco_debug
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 433 CVEs
 before 6.4.0-15061.21.coco15sp6.1
6.4.0-15061.21.coco15sp6.1
kernel-source-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 433 CVEs
 before 6.4.0-15061.21.coco15sp6.1
6.4.0-15061.21.coco15sp6.1
kernel-syms-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 433 CVEs
 before 6.4.0-15061.21.coco15sp6.1
6.4.0-15061.21.coco15sp6.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 186 CVEs
 before 6.4.0-150600.8.34.2
6.4.0-150600.8.34.2
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 186 CVEs
 before 6.4.0-150600.8.34.2
6.4.0-150600.8.34.2
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 186 CVEs
 before 6.4.0-150600.8.34.1
6.4.0-150600.8.34.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 186 CVEs
 before 6.4.0-150600.8.34.2
6.4.0-150600.8.34.2
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 186 CVEs
 before 6.4.0-150600.8.34.2
6.4.0-150600.8.34.2
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 186 CVEs
 before 6.4.0-150600.8.34.1
6.4.0-150600.8.34.1
kernel-livepatch-SLE15-SP6-RT_Update_10
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 189 CVEs
 before 1-150600.1.5.1
1-150600.1.5.1
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.10.34.1
6.4.0-150600.10.34.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.10.34.1
6.4.0-150600.10.34.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.10.34.1
6.4.0-150600.10.34.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.10.34.1
6.4.0-150600.10.34.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.10.34.1
6.4.0-150600.10.34.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.10.34.1
6.4.0-150600.10.34.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.10.34.1
6.4.0-150600.10.34.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.10.34.1
6.4.0-150600.10.34.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2
6.4.0-150600.23.47.2
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2
6.4.0-150600.23.47.2
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2.150600.12.20.2
6.4.0-150600.23.47.2.150600.12.20.2
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2
6.4.0-150600.23.47.2
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2
6.4.0-150600.23.47.2
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.1
6.4.0-150600.23.47.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.1
6.4.0-150600.23.47.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2
6.4.0-150600.23.47.2
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.1
6.4.0-150600.23.47.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2
6.4.0-150600.23.47.2
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2
6.4.0-150600.23.47.2
kernel-livepatch-SLE15-SP6_Update_10
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 189 CVEs
 before 1-150600.13.5.1
1-150600.13.5.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2
6.4.0-150600.23.47.2
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2
6.4.0-150600.23.47.2
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.1
6.4.0-150600.23.47.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2
6.4.0-150600.23.47.2
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2
6.4.0-150600.23.47.2
kernel-default
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2
6.4.0-150600.23.47.2
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2.150600.12.20.2
6.4.0-150600.23.47.2.150600.12.20.2
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.1
6.4.0-150600.23.47.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2
6.4.0-150600.23.47.2
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.1
6.4.0-150600.23.47.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.1
6.4.0-150600.23.47.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2
6.4.0-150600.23.47.2
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.1
6.4.0-150600.23.47.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.23.47.2
6.4.0-150600.23.47.2
kernel-livepatch-MICRO-6-0-RT_Update_6
SUSE:Linux Micro 6.0
From an advisory covering 272 CVEs
 before 1-3.1
1-3.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 272 CVEs
 before 6.4.0-28.1
6.4.0-28.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 272 CVEs
 before 6.4.0-28.1
6.4.0-28.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 347 CVEs
 before 6.4.0-28.1
6.4.0-28.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 347 CVEs
 before 6.4.0-28.1.21.6
6.4.0-28.1.21.6
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 347 CVEs
 before 6.4.0-28.1
6.4.0-28.1
kernel-livepatch-MICRO-6-0_Update_6
SUSE:Linux Micro 6.0
From an advisory covering 347 CVEs
 before 1-3.1
1-3.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 347 CVEs
 before 6.4.0-28.1
6.4.0-28.1
kernel-livepatch-MICRO-6-0-RT_Update_6
SUSE:Linux Micro 6.1
From an advisory covering 272 CVEs
 before 1-3.1
1-3.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 272 CVEs
 before 6.4.0-28.1
6.4.0-28.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 272 CVEs
 before 6.4.0-28.1
6.4.0-28.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 347 CVEs
 before 6.4.0-28.1
6.4.0-28.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 347 CVEs
 before 6.4.0-28.1.21.6
6.4.0-28.1.21.6
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 347 CVEs
 before 6.4.0-28.1
6.4.0-28.1
kernel-livepatch-MICRO-6-0_Update_6
SUSE:Linux Micro 6.1
From an advisory covering 347 CVEs
 before 1-3.1
1-3.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 347 CVEs
 before 6.4.0-28.1
6.4.0-28.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-aws-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1032.34~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 14 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.1
6.8.0-1032.34~22.04.1
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1034.39~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1
Show 13 moreShow less
6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.1
6.8.0-1034.39~22.04.1
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
 None known

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-58057 is a medium vulnerability (CVSS 5.5) in Linux, published March 6, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. Fixed in linux-lts 6.12.41-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 373 package rows, 60 versions, 2,548 references and the rest of 17 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open