Every CVE Search/ Get API key

CVE-2025-21647

sched: sch_cake: add bounds checks to host bulk flow fairness counts

7.3 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

sched: sch_cake: add bounds checks to host bulk flow fairness counts

Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out of bounds memory access.

To avoid any such logic errors causing out of bounds memory accesses, this commit factors out all accesses to the per-host bulk flow counters to a series of helpers that perform bounds-checking before any increments and decrements. This also has the benefit of improving readability by moving the conditional checks for the flow mode into these helpers, instead of having them spread out throughout the code (which was the cause of the original logic error).

As part of this change, the flow quantum calculation is consolidated into a helper function, which means that the dithering applied to the ost load scaling is now applied both in the DRR rotation and when a sparse flow's quantum is first initiated. The only user-visible effect of this is that the maximum packet size that can be sent while a flow stays sparse will now vary with +/- one byte in some cases. This should not make a noticeable difference in practice, and thus it's not worth complicating the code to preserve the old behaviour.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
Low
Availability
High

Exploit likelihood

0.28%Up 0.2 points since Jan 20, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.3

sched: sch_cake: add bounds checks to host bulk flow fairness counts

In the Linux kernel, the following vulnerability has been resolved:

sched: sch_cake: add bounds checks to host bulk flow fairness counts

Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out of bounds memory access.

To avoid any such logic errors causing out of bounds memory accesses, this commit factors out all accesses to the per-host bulk flow counters to a series of helpers that perform bounds-checking before any increments and decrements. This also has the benefit of improving readability by moving the conditional checks for the flow mode into these helpers, instead of having them spread out throughout the code (which was the cause of the original logic error).

As part of this change, the flow quantum calculation is consolidated into a helper function, which means that the dithering applied to the ost load scaling is now applied both in the DRR rotation and when a sparse flow's quantum is first initiated. The only user-visible effect of this is that the maximum packet size that can be sent while a flow stays sparse will now vary with +/- one byte in some cases. This should not make a noticeable difference in practice, and thus it's not worth complicating the code to preserve the old behaviour.

Record
CVE-2025-21647
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
EUVDEUVD-2025-2596 7.3

In the Linux kernel, the following vulnerability has been resolved:

sched: sch_cake: add bounds checks to host bulk flow fairness counts

Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out of bounds memory access.

To avoid any such logic errors causing out of bounds memory accesses, this commit factors out all accesses to the per-host bulk flow counters to a series of helpers that perform bounds-checking before any increments and decrements. This also has the benefit of improving readability by moving the conditional checks for the flow mode into these helpers, instead of having them spread out throughout the code (which was the cause of the original logic error).

As part of this change, the flow quantum calculation is consolidated into a helper function, which means that the dithering applied to the ost load scaling is now applied both in the DRR rotation and when a sparse flow's quantum is first initiated. The only user-visible effect of this is that the maximum packet size that can be sent while a flow stays sparse will now vary with +/- one byte in some cases. This should not make a noticeable difference in practice, and thus it's not worth complicating the code to preserve the old behaviour.

Record
EUVD-2025-2596
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-j2g7-wj3p-j9c9 7.1

In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: add bounds...

In the Linux kernel, the following vulnerability has been resolved:

sched: sch_cake: add bounds checks to host bulk flow fairness counts

Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out of bounds memory access.

To avoid any such logic errors causing out of bounds memory accesses, this commit factors out all accesses to the per-host bulk flow counters to a series of helpers that perform bounds-checking before any increments and decrements. This also has the benefit of improving readability by moving the conditional checks for the flow mode into these helpers, instead of having them spread out throughout the code (which was the cause of the original logic error).

As part of this change, the flow quantum calculation is consolidated into a helper function, which means that the dithering applied to the ost load scaling is now applied both in the DRR rotation and when a sparse flow's quantum is first initiated. The only user-visible effect of this is that the maximum packet size that can be sent while a flow stays sparse will now vary with +/- one byte in some cases. This should not make a noticeable difference in practice, and thus it's not worth complicating the code to preserve the old behaviour.

Record
GHSA-j2g7-wj3p-j9c9
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 7.3

In the Linux kernel, the following vulnerability has been resolved:

sched: sch_cake: add bounds checks to host bulk flow fairness counts

Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out of bounds memory access.

To avoid any such logic errors causing out of bounds memory accesses, this commit factors out all accesses to the per-host bulk flow counters to a series of helpers that perform bounds-checking before any increments and decrements. This also has the benefit of improving readability by moving the conditional checks for the flow mode into these helpers, instead of having them spread out throughout the code (which was the cause of the original logic error).

As part of this change, the flow quantum calculation is consolidated into a helper function, which means that the dithering applied to the ost load scaling is now applied both in the DRR rotation and when a sparse flow's quantum is first initiated. The only user-visible effect of this is that the maximum packet size that can be sent while a flow stays sparse will now vary with +/- one byte in some cases. This should not make a noticeable difference in practice, and thus it's not worth complicating the code to preserve the old behaviour.

Record
CVE-2025-21647
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVBELL-CVE-2025-21647 7.1
Record
BELL-CVE-2025-21647
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSV 7.3

sched: sch_cake: add bounds checks to host bulk flow fairness counts

In the Linux kernel, the following vulnerability has been resolved:

sched: sch_cake: add bounds checks to host bulk flow fairness counts

Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out of bounds memory access.

To avoid any such logic errors causing out of bounds memory accesses, this commit factors out all accesses to the per-host bulk flow counters to a series of helpers that perform bounds-checking before any increments and decrements. This also has the benefit of improving readability by moving the conditional checks for the flow mode into these helpers, instead of having them spread out throughout the code (which was the cause of the original logic error).

As part of this change, the flow quantum calculation is consolidated into a helper function, which means that the dithering applied to the ost load scaling is now applied both in the DRR rotation and when a sparse flow's quantum is first initiated. The only user-visible effect of this is that the maximum packet size that can be sent while a flow stays sparse will now vary with +/- one byte in some cases. This should not make a noticeable difference in practice, and thus it's not worth complicating the code to preserve the old behaviour.

Record
CVE-2025-21647
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
Show 45 moreShow less
OSVDEBIAN-CVE-2025-21647 7.1

In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: add bounds checks to host bulk flow fairness counts Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out of bounds memory access. To avoid any such logic errors causing out of bounds memory accesses, this commit factors out all accesses to the per-host bulk flow counters to a series of helpers that perform bounds-checking before any increments and decrements. This also has the benefit of improving readability by moving the conditional checks for the flow mode into these helpers, instead of having them spread out throughout the code (which was the cause of the original logic error). As part of this change, the flow quantum calculation is consolidated into a helper function, which means that the dithering applied to the ost load scaling is now applied both in the DRR rotation and when a sparse flow's quantum is first initiated. The only user-visible effect of this is that the maximum packet size that can be sent while a flow stays sparse will now vary with +/- one byte in some cases. This should not make a noticeable difference in practice, and thus it's not worth complicating the code to preserve the old behaviour.

Record
DEBIAN-CVE-2025-21647
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1158 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ila: call nf_unregister_net_hooks() sooner

syzbot found an use-after-free Read in ila_nf_input [1]

Issue here is that ila_xlat_exit_net() frees the rhashtable, then call nf_unregister_net_hooks().

It should be done in the reverse way, with a synchronize_rcu().

This is a good match for a pre_exit() method.

[1] BUG: KASAN: use-after-free in rht_key_hashfn include/linux/rhashtable.h:159 [inline] BUG: KASAN: use-after-free in __rhashtable_lookup include/linux/rhashtable.h:604 [inline] BUG: KASAN: use-after-free in rhashtable_lookup include/linux/rhashtable.h:646 [inline] BUG: KASAN: use-after-free in rhashtable_lookup_fast+0x77a/0x9b0 include/linux/rhashtable.h:672 Read of size 4 at addr ffff888064620008 by task ksoftirqd/0/16

CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-rc4-syzkaller-00238-g2ad6d23f465a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 rht_key_hashfn include/linux/rhashtable.h:159 [inline] __rhashtable_lookup include/linux/rhashtable.h:604 [inline] rhashtable_lookup include/linux/rhashtable.h:646 [inline] rhashtable_lookup_fast+0x77a/0x9b0 include/linux/rhashtable.h:672 ila_lookup_wildcards net/ipv6/ila/ila_xlat.c:132 [inline] ila_xlat_addr net/ipv6/ila/ila_xlat.c:652 [inline] ila_nf_input+0x1fe/0x3c0 net/ipv6/ila/ila_xlat.c:190 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312 __netif_receive_skb_one_core net/core/dev.c:5661 [inline] __netif_receive_skb+0x1ea/0x650 net/core/dev.c:5775 process_backlog+0x662/0x15b0 net/core/dev.c:6108 __napi_poll+0xcb/0x490 net/core/dev.c:6772 napi_poll net/core/dev.c:6841 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:6963 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 run_ksoftirqd+0xca/0x130 kernel/softirq.c:928 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK>

The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x64620 flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) page_type: 0xbfffffff(buddy) raw: 00fff00000000000 ffffea0000959608 ffffea00019d9408 0000000000000000 raw: 0000000000000000 0000000000000003 00000000bfffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as freed page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52dc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_ZERO), pid 5242, tgid 5242 (syz-executor), ts 73611328570, free_ts 618981657187 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1493 prep_new_page mm/page_alloc.c:1501 [inline] get_page_from_freelist+0x2e4c/0x2f10 mm/page_alloc.c:3439 __alloc_pages_noprof+0x256/0x6c0 mm/page_alloc.c:4695 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] alloc_pages_node_noprof include/linux/gfp.h:296 [inline] ___kmalloc_large_node+0x8b/0x1d0 mm/slub.c:4103 __kmalloc_large_node_noprof+0x1a/0x80 mm/slub.c:4130 __do_kmalloc_node mm/slub.c:4146 [inline] __kmalloc_node_noprof+0x2d2/0x440 mm/slub.c:4164 __kvmalloc_node_noprof+0x72/0x190 mm/util.c:650 bucket_table_alloc lib/rhashtable.c:186 [inline] rhashtable_init_noprof+0x534/0xa60 lib/rhashtable.c:1071…

Record
OESA-2025-1158
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1159 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: wwan: t7xx: Fix FSM command timeout issue

When driver processes the internal state change command, it use an asynchronous thread to process the command operation. If the main thread detects that the task has timed out, the asynchronous thread will panic when executing the completion notification because the main thread completion object has been released.

BUG: unable to handle page fault for address: fffffffffffffff8 PGD 1f283a067 P4D 1f283a067 PUD 1f283c067 PMD 0 Oops: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:complete_all+0x3e/0xa0 [...] Call Trace: <TASK> ? __die_body+0x68/0xb0 ? page_fault_oops+0x379/0x3e0 ? exc_page_fault+0x69/0xa0 ? asm_exc_page_fault+0x22/0x30 ? complete_all+0x3e/0xa0 fsm_main_thread+0xa3/0x9c0 [mtk_t7xx (HASH:1400 5)] ? __pfx_autoremove_wake_function+0x10/0x10 kthread+0xd8/0x110 ? __pfx_fsm_main_thread+0x10/0x10 [mtk_t7xx (HASH:1400 5)] ? __pfx_kthread+0x10/0x10 ret_from_fork+0x38/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 </TASK> [...] CR2: fffffffffffffff8 ---[ end trace 0000000000000000 ]---

Use the reference counter to ensure safe release as Sergey suggests: https://lore.kernel.org/all/[email protected]/(CVE-2024-39282)

In the Linux kernel, the following vulnerability has been resolved:

i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request

Bus cleanup path in DMA mode may trigger a RING_OP_STAT interrupt when the ring is being stopped. Depending on timing between ring stop request completion, interrupt handler removal and code execution this may lead to a NULL pointer dereference in hci_dma_irq_handler() if it gets to run after the io_data pointer is set to NULL in hci_dma_cleanup().

Prevent this my masking the ring interrupts before ring stop request.(CVE-2024-45828)

In the Linux kernel, the following vulnerability has been resolved:

ethtool: fail closed if we can't get max channel used in indirection tables

Commit 0d1b7d6c9274 ("bnxt: fix crashes when reducing ring count with active RSS contexts") proves that allowing indirection table to contain channels with out of bounds IDs may lead to crashes. Currently the max channel check in the core gets skipped if driver can't fetch the indirection table or when we can't allocate memory.

Both of those conditions should be extremely rare but if they do happen we should try to be safe and fail the channel change.(CVE-2024-46834)

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change

When disabling wifi mt7921_ipv6_addr_change() is called as a notifier. At this point mvif->phy is already NULL so we cannot use it here.(CVE-2024-46860)

In the Linux kernel, the following vulnerability has been resolved:

usbnet: ipheth: do not stop RX on failing RX callback

RX callbacks can fail for multiple reasons:

  • Payload too short
  • Payload formatted incorrecly (e.g. bad NCM framing)
  • Lack of memory

None of these should cause the driver to seize up.

Make such failures non-critical and continue processing further incoming URBs.(CVE-2024-46861)

In the Linux kernel, the following vulnerability has been resolved:

nvme-rdma: unquiesce admin_q before destroy it

Kernel will hang on destroy admin_q while we create ctrl failed, such as following calltrace:

PID: 23644 TASK: ff2d52b40f439fc0 CPU: 2 COMMAND: "nvme" #0 [ff61d23de260fb78] __schedule at ffffffff8323bc15 #1 [ff61d23de260fc08] schedule at ffffffff8323c014 #2 [ff61d23de260fc28] blk_mq_freeze_queue_wait at ffffffff82a3dba1 #3 [ff61d23de260fc78] blk_freeze_queue at ffffffff82a4113a #4 [ff61d23de260fc90] blk_cleanup_queue at ffffffff82a33006 #5 [ff61d23de260fcb0] nvme_rdma_destroy_admin_queue at ffffffffc12686ce #6 [ff61d23de260fcc8]…

Record
OESA-2025-1159
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1160 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: wwan: t7xx: Fix FSM command timeout issue

When driver processes the internal state change command, it use an asynchronous thread to process the command operation. If the main thread detects that the task has timed out, the asynchronous thread will panic when executing the completion notification because the main thread completion object has been released.

BUG: unable to handle page fault for address: fffffffffffffff8 PGD 1f283a067 P4D 1f283a067 PUD 1f283c067 PMD 0 Oops: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:complete_all+0x3e/0xa0 [...] Call Trace: <TASK> ? __die_body+0x68/0xb0 ? page_fault_oops+0x379/0x3e0 ? exc_page_fault+0x69/0xa0 ? asm_exc_page_fault+0x22/0x30 ? complete_all+0x3e/0xa0 fsm_main_thread+0xa3/0x9c0 [mtk_t7xx (HASH:1400 5)] ? __pfx_autoremove_wake_function+0x10/0x10 kthread+0xd8/0x110 ? __pfx_fsm_main_thread+0x10/0x10 [mtk_t7xx (HASH:1400 5)] ? __pfx_kthread+0x10/0x10 ret_from_fork+0x38/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 </TASK> [...] CR2: fffffffffffffff8 ---[ end trace 0000000000000000 ]---

Use the reference counter to ensure safe release as Sergey suggests: https://lore.kernel.org/all/[email protected]/(CVE-2024-39282)

In the Linux kernel, the following vulnerability has been resolved:

i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request

Bus cleanup path in DMA mode may trigger a RING_OP_STAT interrupt when the ring is being stopped. Depending on timing between ring stop request completion, interrupt handler removal and code execution this may lead to a NULL pointer dereference in hci_dma_irq_handler() if it gets to run after the io_data pointer is set to NULL in hci_dma_cleanup().

Prevent this my masking the ring interrupts before ring stop request.(CVE-2024-45828)

In the Linux kernel, the following vulnerability has been resolved:

ethtool: fail closed if we can't get max channel used in indirection tables

Commit 0d1b7d6c9274 ("bnxt: fix crashes when reducing ring count with active RSS contexts") proves that allowing indirection table to contain channels with out of bounds IDs may lead to crashes. Currently the max channel check in the core gets skipped if driver can't fetch the indirection table or when we can't allocate memory.

Both of those conditions should be extremely rare but if they do happen we should try to be safe and fail the channel change.(CVE-2024-46834)

In the Linux kernel, the following vulnerability has been resolved:

nvme-rdma: unquiesce admin_q before destroy it

Kernel will hang on destroy admin_q while we create ctrl failed, such as following calltrace:

PID: 23644 TASK: ff2d52b40f439fc0 CPU: 2 COMMAND: "nvme" #0 [ff61d23de260fb78] __schedule at ffffffff8323bc15 #1 [ff61d23de260fc08] schedule at ffffffff8323c014 #2 [ff61d23de260fc28] blk_mq_freeze_queue_wait at ffffffff82a3dba1 #3 [ff61d23de260fc78] blk_freeze_queue at ffffffff82a4113a #4 [ff61d23de260fc90] blk_cleanup_queue at ffffffff82a33006 #5 [ff61d23de260fcb0] nvme_rdma_destroy_admin_queue at ffffffffc12686ce #6 [ff61d23de260fcc8] nvme_rdma_setup_ctrl at ffffffffc1268ced #7 [ff61d23de260fd28] nvme_rdma_create_ctrl at ffffffffc126919b #8 [ff61d23de260fd68] nvmf_dev_write at ffffffffc024f362 #9 [ff61d23de260fe38] vfs_write at ffffffff827d5f25 RIP: 00007fda7891d574 RSP: 00007ffe2ef06958 RFLAGS: 00000202 RAX: ffffffffffffffda RBX: 000055e8122a4d90 RCX: 00007fda7891d574 RDX: 000000000000012b RSI: 000055e8122a4d90 RDI: 0000000000000004 RBP: 00007ffe2ef079c0 R8: 000000000000012b R9: 000055e8122a4d90 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 R13: 000055e8122923c0 R14: 000000000000012b R15: 00007fda78a54500 ORIG_RAX: 0000000000000001 CS: 0033 SS: 002b

This due to we have…

Record
OESA-2025-1160
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1162 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ila: call nf_unregister_net_hooks() sooner

syzbot found an use-after-free Read in ila_nf_input [1]

Issue here is that ila_xlat_exit_net() frees the rhashtable, then call nf_unregister_net_hooks().

It should be done in the reverse way, with a synchronize_rcu().

This is a good match for a pre_exit() method.

[1] BUG: KASAN: use-after-free in rht_key_hashfn include/linux/rhashtable.h:159 [inline] BUG: KASAN: use-after-free in __rhashtable_lookup include/linux/rhashtable.h:604 [inline] BUG: KASAN: use-after-free in rhashtable_lookup include/linux/rhashtable.h:646 [inline] BUG: KASAN: use-after-free in rhashtable_lookup_fast+0x77a/0x9b0 include/linux/rhashtable.h:672 Read of size 4 at addr ffff888064620008 by task ksoftirqd/0/16

CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-rc4-syzkaller-00238-g2ad6d23f465a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 rht_key_hashfn include/linux/rhashtable.h:159 [inline] __rhashtable_lookup include/linux/rhashtable.h:604 [inline] rhashtable_lookup include/linux/rhashtable.h:646 [inline] rhashtable_lookup_fast+0x77a/0x9b0 include/linux/rhashtable.h:672 ila_lookup_wildcards net/ipv6/ila/ila_xlat.c:132 [inline] ila_xlat_addr net/ipv6/ila/ila_xlat.c:652 [inline] ila_nf_input+0x1fe/0x3c0 net/ipv6/ila/ila_xlat.c:190 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312 __netif_receive_skb_one_core net/core/dev.c:5661 [inline] __netif_receive_skb+0x1ea/0x650 net/core/dev.c:5775 process_backlog+0x662/0x15b0 net/core/dev.c:6108 __napi_poll+0xcb/0x490 net/core/dev.c:6772 napi_poll net/core/dev.c:6841 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:6963 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 run_ksoftirqd+0xca/0x130 kernel/softirq.c:928 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK>

The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x64620 flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) page_type: 0xbfffffff(buddy) raw: 00fff00000000000 ffffea0000959608 ffffea00019d9408 0000000000000000 raw: 0000000000000000 0000000000000003 00000000bfffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as freed page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52dc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_ZERO), pid 5242, tgid 5242 (syz-executor), ts 73611328570, free_ts 618981657187 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1493 prep_new_page mm/page_alloc.c:1501 [inline] get_page_from_freelist+0x2e4c/0x2f10 mm/page_alloc.c:3439 __alloc_pages_noprof+0x256/0x6c0 mm/page_alloc.c:4695 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] alloc_pages_node_noprof include/linux/gfp.h:296 [inline] ___kmalloc_large_node+0x8b/0x1d0 mm/slub.c:4103 __kmalloc_large_node_noprof+0x1a/0x80 mm/slub.c:4130 __do_kmalloc_node mm/slub.c:4146 [inline] __kmalloc_node_noprof+0x2d2/0x440 mm/slub.c:4164 __kvmalloc_node_noprof+0x72/0x190 mm/util.c:650 bucket_table_alloc lib/rhashtable.c:186 [inline] rhashtable_init_noprof+0x534/0xa60 lib/rhashtable.c:1071…

Record
OESA-2025-1162
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:20095 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:20095
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:20518 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:20518
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:2352 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:2352
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:20095 7.8

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)

  • kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)

  • kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)

  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)

  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)

  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)

  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)

  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)

  • kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)

  • kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)

  • kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633)

  • kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)

  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)

  • kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)

  • kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)

  • kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)

  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)

  • kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)

  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)

  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)

  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)

  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)

  • kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)

  • kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)

  • kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)

  • kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)

  • kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)

  • kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)

  • kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)

  • kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)

  • kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)

  • kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)

  • kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)

  • kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)

  • kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)

  • kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)

  • kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)

  • kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)

  • kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)

  • kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)

  • kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)

  • kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)

  • kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)

  • kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)

  • kernel: HID: multitouch: Add NULL check in mt_input_configured…

Record
RLSA-2025:20095
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:20518 7.8

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830)

  • kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689)

  • kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744)

  • kernel: vfs: fix race between evice_inodes() and find_inode()&iput() (CVE-2024-47679)

  • kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727)

  • kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864)

  • kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060)

  • kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024)

  • kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195)

  • kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294)

  • kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052)

  • kernel: afs: Fix lock recursion (CVE-2024-53090)

  • kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)

  • kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)

  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)

  • kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229)

  • kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170)

  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)

  • kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)

  • kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)

  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)

  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)

  • kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)

  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)

  • kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709)

  • kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)

  • kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786)

  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)

  • kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)

  • kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)

  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)

  • kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)

  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)

  • kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672)

  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)

  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)

  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)

  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)

  • kernel: usbnet: fix memory leak in error case (CVE-2022-49657)

  • kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432)

  • kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672)

  • kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353)

  • kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437)

  • kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627)

  • kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670)

  • kernel: can: isotp: sanitize CAN ID checks in isotp_bind() (CVE-2022-49269)

  • kernel:…

Record
RLSA-2025:20518
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-21647 7.1

In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: add bounds checks to host bulk flow fairness counts Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out of bounds memory access. To avoid any such logic errors causing out of bounds memory accesses, this commit factors out all accesses to the per-host bulk flow counters to a series of helpers that perform bounds-checking before any increments and decrements. This also has the benefit of improving readability by moving the conditional checks for the flow mode into these helpers, instead of having them spread out throughout the code (which was the cause of the original logic error). As part of this change, the flow quantum calculation is consolidated into a helper function, which means that the dithering applied to the ost load scaling is now applied both in the DRR rotation and when a sparse flow's quantum is first initiated. The only user-visible effect of this is that the maximum packet size that can be sent while a flow stays sparse will now vary with +/- one byte in some cases. This should not make a noticeable difference in practice, and thus it's not worth complicating the code to preserve the old behaviour.

Record
UBUNTU-CVE-2025-21647
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSVALSA-2025:20095 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  • kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)
  • kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)
  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  • kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)
  • kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)
  • kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633)
  • kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)
  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  • kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)
  • kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)
  • kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)
  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  • kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)
  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
  • kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)
  • kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)
  • kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)
  • kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)
  • kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)
  • kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)
  • kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)
  • kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)
  • kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)
  • kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)
  • kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)
  • kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)
  • kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)
  • kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
  • kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)
  • kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)
  • kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)
  • kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)
  • kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)
  • kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)
  • kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)
  • kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)
  • kernel: HID:…
Record
ALSA-2025:20095
Updated
2026-11-02
OSVALSA-2025:20518 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830)
  • kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689)
  • kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744)
  • kernel: vfs: fix race between evice_inodes() and find_inode()&iput() (CVE-2024-47679)
  • kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727)
  • kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864)
  • kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060)
  • kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024)
  • kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195)
  • kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294)
  • kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052)
  • kernel: afs: Fix lock recursion (CVE-2024-53090)
  • kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)
  • kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)
  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  • kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229)
  • kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170)
  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  • kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)
  • kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)
  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  • kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  • kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709)
  • kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)
  • kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786)
  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  • kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)
  • kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)
  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  • kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)
  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  • kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672)
  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
  • kernel: usbnet: fix memory leak in error case (CVE-2022-49657)
  • kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432)
  • kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672)
  • kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353)
  • kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437)
  • kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627)
  • kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670)
  • kernel: can: isotp: sanitize CAN ID…
Record
ALSA-2025:20518
Updated
2026-11-02
OSVCLSA-2025-1746479711 No score

kernel-uek: Fix of 225 CVEs

  • sctp: sysctl: auth_enable: avoid using current->nsproxy
  • sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy {CVE-2025-21640}
  • bpf: Use preempt_count() directly in bpf_send_signal_common()
  • Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy"
  • jfs: fix slab-out-of-bounds read in ea_get()
  • serial: 8250_dma: terminate correct DMA in tx_dma_flush()
  • Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy"
  • net: usb: usbnet: restore usb%d name exception for local mac addresses
  • vlan: fix memory leak in vlan_newlink() {CVE-2022-49636}
  • rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity
  • LTS tag: v5.4.291
  • eeprom: digsy_mtc: Make GPIO lookup table match the device
  • slimbus: messaging: Free transaction ID in delayed interrupt scenario {CVE-2025-21914}
  • intel_th: pci: Add Panther Lake-P/U support
  • intel_th: pci: Add Panther Lake-H support
  • intel_th: pci: Add Arrow Lake support
  • Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  • xhci: pci: Fix indentation in the PCI device ID definitions
  • usb: gadget: Check bmAttributes only if configuration is valid
  • usb: gadget: Fix setting self-powered state on suspend
  • usb: gadget: Set self-powered based on MaxPower and bmAttributes
  • usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
  • usb: typec: ucsi: increase timeout for PPM reset operations
  • usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916}
  • usb: renesas_usbhs: Flush the notify_hotplug_work {CVE-2025-21917}
  • usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
  • usb: renesas_usbhs: Use devm_usb_get_phy()
  • usb: renesas_usbhs: Call clk_put()
  • Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
  • gpio: rcar: Fix missing of_node_put() call
  • net: ipv6: fix missing dst ref drop in ila lwtunnel
  • net: ipv6: fix dst ref loop in ila lwtunnel
  • net-timestamp: support TCP GSO case for a few missing flags
  • vlan: enforce underlying device type {CVE-2025-21920}
  • ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922}
  • be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
  • drm/sched: Fix preprocessor guard
  • hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
  • llc: do not use skb_get() before dev_queue_xmit() {CVE-2025-21925}
  • hwmon: (ad7314) Validate leading zero bits and return error
  • hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
  • hwmon: (pmbus) Initialise page count in pmbus_identify()
  • caif_virtio: fix wrong pointer check in cfv_probe() {CVE-2025-21904}
  • net: gso: fix ownership in __udp_gso_segment {CVE-2025-21926}
  • HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
  • HID: google: fix unused variable warning under !CONFIG_ACPI
  • wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905}
  • mm/page_alloc: fix uninitialized variable
  • rapidio: fix an API misues when rio_add_net() fails {CVE-2025-21934}
  • rapidio: add check for rio_add_net() in rio_scan_alloc_net()
  • wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
  • wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910}
  • x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
  • x86/cpu: Validate CPUID leaf 0x2 EDX output
  • x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
  • platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
  • drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
  • ALSA: hda/realtek: update ALC222 depop optimize
  • ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
  • HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948}
  • Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
  • drm/amdgpu: disable BAR resize on Dell G5 SE
  • drm/amdgpu: Check extended configuration space register when system uses large bar
  • drm/amdgpu: skip BAR resizing if the bios already…
Record
CLSA-2025-1746479711
Updated
2026-11-02
OSVCLSA-2025-1764151168 No score

kernel: Fix of 40 CVEs

  • perf/aux: Fix AUX buffer serialization {CVE-2024-46713}
  • block: fix uaf for flush rq while iterating tags {CVE-2024-53170}
  • zram: fix potential UAF of zram table {CVE-2025-21671}
  • sched: sch_cake: add bounds checks to host bulk flow fairness counts {CVE-2025-21647}
  • bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors {CVE-2024-56675}
  • net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789}
  • isofs: Prevent the use of too small fid {CVE-2025-37780}
  • net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749}
  • sctp: detect and prevent references to a freed transport in sendmsg {CVE-2025-23142}
  • ipv6: sr: Fix MAC comparison to be constant-time {CVE-2025-39702}
  • RDMA/rxe: Fix incomplete state save in rxe_requester {CVE-2023-53539}
  • crypto: xts - Handle EBUSY correctly {CVE-2023-53494}
  • Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252}
  • af_unix: Fix data-races around user->unix_inflight. {CVE-2023-53204}
  • fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-50367}
  • wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072}
  • wifi: rtlwifi: remove unused dualmac control leftovers
  • wifi: rtlwifi: remove unused timer and related code
  • partitions: mac: fix handling of bogus partition table {CVE-2025-21772}
  • ipmr: do not call mr_mfc_uses_dev() for unres entries {CVE-2025-21719}
  • wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014}
  • net: mdio: validate parameter addr in mdiobus_get_phy() {CVE-2023-53019}
  • ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751}
  • NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() {CVE-2025-39730}
  • net/mlx5e: Check for NOT_READY flag state after locking {CVE-2023-53581}
  • null_blk: Always check queue mode setting from configfs {CVE-2023-53576}
  • ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559}
  • rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() {CVE-2023-53558}
  • pstore/ram: Check start of empty przs during init {CVE-2023-53331}
  • wifi: ath11k: fix memory leak in WMI firmware stats {CVE-2023-53602}
  • wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta {CVE-2023-53229}
  • net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() {CVE-2022-50486}
  • RDMA/core: Make sure "ib_port" is valid when access sysfs node {CVE-2022-50475}
  • RDMA/rxe: Fix mr->map double free {CVE-2022-50543}
  • scsi: qla2xxx: Fix end of loop test
  • scsi: qla2xxx: Fix mem access after free
  • scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
  • scsi: target: Fix multiple LUN_RESET handling {CVE-2023-53586}
  • scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675}
  • scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses {CVE-2023-53675}
  • scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() {CVE-2023-53675}
  • scsi: lpfc: Fix buffer free/clear order in deferred receive path {CVE-2025-39841}
  • nbd: fix incomplete validation of ioctl arg {CVE-2023-53513}
  • efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817}
  • bnxt: avoid overflow in bnxt_get_nvram_directory() {CVE-2023-53661}
Record
CLSA-2025-1764151168
Updated
2026-11-02
OSVCLSA-2025-1766488019 No score

kernel: Fix of 63 CVEs

  • scsi: target: iscsi: Fix timeout on deleted connection {CVE-2025-38075}
  • tls: wait for pending async decryptions if tls_strp_msg_hold fails {CVE-2025-40176}
  • clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns {CVE-2025-38499}
  • rcu: Fix rcu_read_unlock() deadloop due to IRQ work {CVE-2025-39744}
  • page_pool: Fix use-after-free in page_pool_recycle_in_ring {CVE-2025-38129}
  • rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access {CVE-2025-38704}
  • bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors {CVE-2024-56675}
  • padata: Fix pd UAF once and for all {CVE-2025-38584}
  • padata: do not leak refcount in reorder_work {CVE-2025-38031}
  • Bluetooth: MGMT: Fix possible UAFs {CVE-2025-39981}
  • Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
  • Bluetooth: MGMT: Remove unused mgmt_pending_find_data
  • Bluetooth: MGMT: set_mesh: update LE scan interval and window
  • Bluetooth: hci_sync: fix set_local_name race condition {CVE-2025-39797}
  • xfrm: Duplicate SPI Handling {CVE-2025-39797}
  • kernfs: Fix UAF in polling when open file is released {CVE-2025-39881}
  • OPP: add index check to assert to avoid buffer overflow in _read_freq() {CVE-2024-57998}
  • block: fix uaf for flush rq while iterating tags {CVE-2024-58072} {CVE-2024-53170}
  • wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072}
  • wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014}
  • block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() {CVE-2025-21631}
  • net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-40954}
  • Squashfs: sanity check symbolic link size {CVE-2024-46744}
  • e1000e: fix heap overflow in e1000_set_eeprom {CVE-2025-39898}
  • wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864}
  • nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724}
  • i40e: fix idx validation in config queues msg {CVE-2025-39971}
  • NFS: Fix a race when updating an existing write {CVE-2025-39697}
  • tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-39955}
  • wifi: mt76: fix linked list corruption {CVE-2025-39918}
  • io_uring/waitid: always prune wait queue entry in io_waitid_wait() {CVE-2025-40047}
  • Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync {CVE-2025-39982}
  • workqueue: Put the pwq after detaching the rescuer from the pool {CVE-2025-21786}
  • zram: fix potential UAF of zram table {CVE-2025-21671}
  • sched: sch_cake: add bounds checks to host bulk flow fairness counts {CVE-2025-21647}
  • wifi: mt76: mt7925: fix off by one in mt7925_load_clc() {CVE-2024-57990}
  • blk-cgroup: Fix UAF in blkcg_unpin_online() {CVE-2024-56672}
  • NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() {CVE-2024-54456}
  • nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216}
  • igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
  • x86/tdx: Fix "in-kernel MMIO" check {CVE-2024-47727}
  • drm/amd/display: Check dce_hwseq before dereferencing it {CVE-2025-38361}
  • dm-bufio: don't schedule in atomic context {CVE-2025-37928}
  • usb: xhci: Fix isochronous Ring Underrun/Overrun event handling {CVE-2025-37882}
  • KVM: arm64: Tear down vGIC on failed vCPU creation {CVE-2025-37849}
  • usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022}
  • drm/amd/display: Fix out-of-bound accesses {CVE-2025-21985}
  • usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
  • pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702}
  • partitions: mac: fix handling of bogus partition table {CVE-2025-21772}
  • ipmr: do not call mr_mfc_uses_dev() for unres entries {CVE-2025-21719}
  • net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789}
  • isofs: Prevent the use of too small fid {CVE-2025-37780}
  • sctp: detect and prevent references to a freed transport in sendmsg {CVE-2025-23142}
  • iommu/amd: Fix…
Record
CLSA-2025-1766488019
Updated
2026-11-02
OSVLSN-0117-1 No score

Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: e100: Fix possible use after free in e100_xmit_prepare In e100_xmit_prepare(), if we can't map the skb, then return -ENOMEM, so e100_xmit_frame() will return NETDEV_TX_BUSY and the upper layer will resend the skb.

In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for real_dev Create a new macsec device but not get reference to real_dev.

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware crash.

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix overflow in oa batch buffer By default xe_bb_create_job() appends a MI_BATCH_BUFFER_END to batch buffer, this is not a problem if batch buffer is only used once but oa reuses the batch buffer for the same metric and at each call it appends a MI_BATCH_BUFFER_END, printing the warning below and then overflowing.

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent NULL dereference in nfsd4_process_cb_update() @ses is initialized to NULL.

In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() Explicitly verify the target vCPU is fully online prior to clamping the index in kvm_get_vcpu().

In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: add bounds checks to host bulk flow fairness counts Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out of bounds memory access.

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan [email protected] found that ets_class_from_arg() can index an Out- Of-Bound class in ets_class_from_arg() when passed clid of 0.

In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size before access If the first fragment is shorter than struct usb_cdc_notification, we can't calculate an expected_size.

In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000_drv_remove dm is netdev private data and it cannot be used after free_netdev() call.

In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block When get_block is called with a buffer_head allocated on the stack, such as do_mpage_readpage, stack corruption due to buffer_head UAF may occur in the following race condition situation.

Record
LSN-0117-1
Updated
2026-11-02
OSVMGASA-2025-0030 No score

Updated kernel, kmod-virtualbox, kmod-xtables-addons & dwarves packages fix security vulnerabilities

Upstream kernel version 6.6.74 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record
MGASA-2025-0030
Updated
2026-11-02
OSVMGASA-2025-0032 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.74 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2025-0032
Updated
2026-11-02
OSVSUSE-SU-2025:0784-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26708: mptcp: fastopen and PM-trigger subflow shutdown can race (bsc#1222672).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50185: mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
  • CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
  • CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
  • CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
  • CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
  • CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
  • CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
  • CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
  • CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
  • CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
  • CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
  • CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).

The following non-security bugs were fixed:

  • ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V (stable-fixes).
  • ALSA: hda/cirrus: Correct the full scale volume set logic (git-fixes).
  • ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (stable-fixes).
  • ALSA: hda/realtek: Fixup ALC225 depop procedure (git-fixes).
  • ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls() (git-fixes).
  • ALSA: seq: Drop UMP events when no UMP-conversion is set (git-fixes).
  • APEI: GHES: Have GHES honor the panic= setting (stable-fixes).
  • ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (stable-fixes).
  • ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close (git-fixes).
  • ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (git-fixes).
  • ASoC: amd: Add ACPI dependency to fix build error (stable-fixes).
  • ASoC: fsl_micfil: Enable default case in micfil_set_quality() (git-fixes).
  • ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB] (git-fixes).
  • Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (stable-fixes).
  • HID: Wacom: Add PCI Wacom device support (stable-fixes).
  • HID: hid-steam: Add Deck IMU support (stable-fixes).
  • HID: hid-steam: Add gamepad-only mode switched to by holding options (stable-fixes).
  • HID: hid-steam: Avoid overwriting smoothing parameter (stable-fixes).
  • HID: hid-steam: Clean up locking (stable-fixes).
  • HID: hid-steam: Disable watchdog instead of using a heartbeat (stable-fixes).
  • HID: hid-steam: Do not use cancel_delayed_work_sync in IRQ context (git-fixes).
  • HID: hid-steam: Fix cleanup in probe() (git-fixes).
  • HID: hid-steam: Make sure rumble work is canceled on removal (stable-fixes).
  • HID: hid-steam: Move hidraw input (un)registering to work (git-fixes).
  • HID: hid-steam: Update list of identifiers from SDL (stable-fixes).
  • HID: hid-steam: remove pointless error message (stable-fixes).
  • HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()…
Record
SUSE-SU-2025:0784-1
Updated
2026-11-02
OSVSUSE-SU-2025:0833-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033).
  • CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
  • CVE-2024-53226: RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (bsc#1236576)
  • CVE-2024-57948: mac802154: check local interfaces before deleting sdata list (bsc#1236677).
  • CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
  • CVE-2025-21690: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (bsc#1237025).
  • CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
  • CVE-2025-21699: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (bsc#1237139).

The following non-security bugs were fixed:

  • cpufreq/amd-pstate: Only print supported EPP values for performance governor (bsc#1236777).
  • iavf: fix the waiting time for initial reset (bsc#1235111).
  • ice: add ice_adapter for shared data across PFs on the same NIC (bsc#1235111).
  • ice: avoid the PTP hardware semaphore in gettimex64 path (bsc#1235111).
  • ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (bsc#1235111).
  • idpf: call set_real_num_queues in idpf_open (bsc#1236661 bsc#1237316).
  • ipv4/tcp: do not use per netns ctl sockets (bsc#1237693).
  • kabi: hide adding RCU head into struct netdev_name_node (bsc#1233749).
  • net: Fix undefined behavior in netdev name allocation (bsc#1233749).
  • net: avoid UAF on deleted altname (bsc#1233749).
  • net: check for altname conflicts when changing netdev's netns (bsc#1233749).
  • net: core: Use the bitmap API to allocate bitmaps (bsc#1233749).
  • net: do not send a MOVE event when netdev changes netns (bsc#1233749).
  • net: do not use input buffer of __dev_alloc_name() as a scratch space (bsc#1233749).
  • net: fix ifname in netlink ntf during netns move (bsc#1233749).
  • net: fix removing a namespace with conflicting altnames (bsc#1233749).
  • net: free altname using an RCU callback (bsc#1233749).
  • net: introduce a function to check if a netdev name is in use (bsc#1233749).
  • net: make dev_alloc_name() call dev_prep_valid_name() (bsc#1233749).
  • net: mana: Add get_link and get_link_ksettings in ethtool (bsc#1236761).
  • net: mana: Cleanup 'mana' debugfs dir after cleanup of all children (bsc#1236760).
  • net: mana: Enable debugfs files for MANA device (bsc#1236758).
  • net: minor __dev_alloc_name() optimization (bsc#1233749).
  • net: move altnames together with the netdevice (bsc#1233749).
  • net: netvsc: Update default VMBus channels (bsc#1236757).
  • net: reduce indentation of __dev_alloc_name() (bsc#1233749).
  • net: remove dev_valid_name() check from __dev_alloc_name() (bsc#1233749).
  • net: remove else after return in dev_prep_valid_name() (bsc#1233749).
  • net: trust the bitmap in __dev_alloc_name() (bsc#1233749).
  • nfsd: use explicit lock/unlock for directory ops (bsc#1234650 bsc#1233701 bsc#1232472).
  • rcu: Remove rcu_is_idle_cpu() (bsc#1236289).
  • scsi: storvsc: Set correct data length for sending SCSI command without payload (git-fixes).
  • x86/aperfmperf: Dont wake idle CPUs in arch_freq_get_on_cpu() (bsc#1236289).
  • x86/aperfmperf: Integrate the fallback code from show_cpuinfo() (bsc#1236289).
  • x86/aperfmperf: Make parts of the frequency invariance code unconditional (bsc#1236289).
  • x86/aperfmperf: Put frequency invariance aperf/mperf data into a struct (bsc#1236289).
  • x86/aperfmperf: Replace aperfmperf_get_khz() (bsc#1236289).
  • x86/aperfmperf: Replace arch_freq_get_on_cpu() (bsc#1236289).
  • x86/aperfmperf: Restructure arch_scale_freq_tick() (bsc#1236289).
  • x86/aperfmperf: Separate AP/BP frequency invariance init (bsc#1236289).
  • x86/aperfmperf: Store aperf/mperf data for cpu frequency reads (bsc#1236289).
  • x86/aperfmperf: Untangle Intel and AMD frequency invariance init (bsc#1236289). -…
Record
SUSE-SU-2025:0833-1
Updated
2026-11-02
OSVSUSE-SU-2025:0833-2 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033).
  • CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
  • CVE-2024-53226: RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (bsc#1236576)
  • CVE-2024-57948: mac802154: check local interfaces before deleting sdata list (bsc#1236677).
  • CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
  • CVE-2025-21690: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (bsc#1237025).
  • CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
  • CVE-2025-21699: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (bsc#1237139).

The following non-security bugs were fixed:

  • cpufreq/amd-pstate: Only print supported EPP values for performance governor (bsc#1236777).
  • iavf: fix the waiting time for initial reset (bsc#1235111).
  • ice: add ice_adapter for shared data across PFs on the same NIC (bsc#1235111).
  • ice: avoid the PTP hardware semaphore in gettimex64 path (bsc#1235111).
  • ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (bsc#1235111).
  • idpf: call set_real_num_queues in idpf_open (bsc#1236661 bsc#1237316).
  • ipv4/tcp: do not use per netns ctl sockets (bsc#1237693).
  • kabi: hide adding RCU head into struct netdev_name_node (bsc#1233749).
  • net: Fix undefined behavior in netdev name allocation (bsc#1233749).
  • net: avoid UAF on deleted altname (bsc#1233749).
  • net: check for altname conflicts when changing netdev's netns (bsc#1233749).
  • net: core: Use the bitmap API to allocate bitmaps (bsc#1233749).
  • net: do not send a MOVE event when netdev changes netns (bsc#1233749).
  • net: do not use input buffer of __dev_alloc_name() as a scratch space (bsc#1233749).
  • net: fix ifname in netlink ntf during netns move (bsc#1233749).
  • net: fix removing a namespace with conflicting altnames (bsc#1233749).
  • net: free altname using an RCU callback (bsc#1233749).
  • net: introduce a function to check if a netdev name is in use (bsc#1233749).
  • net: make dev_alloc_name() call dev_prep_valid_name() (bsc#1233749).
  • net: mana: Add get_link and get_link_ksettings in ethtool (bsc#1236761).
  • net: mana: Cleanup 'mana' debugfs dir after cleanup of all children (bsc#1236760).
  • net: mana: Enable debugfs files for MANA device (bsc#1236758).
  • net: minor __dev_alloc_name() optimization (bsc#1233749).
  • net: move altnames together with the netdevice (bsc#1233749).
  • net: netvsc: Update default VMBus channels (bsc#1236757).
  • net: reduce indentation of __dev_alloc_name() (bsc#1233749).
  • net: remove dev_valid_name() check from __dev_alloc_name() (bsc#1233749).
  • net: remove else after return in dev_prep_valid_name() (bsc#1233749).
  • net: trust the bitmap in __dev_alloc_name() (bsc#1233749).
  • nfsd: use explicit lock/unlock for directory ops (bsc#1234650 bsc#1233701 bsc#1232472).
  • rcu: Remove rcu_is_idle_cpu() (bsc#1236289).
  • scsi: storvsc: Set correct data length for sending SCSI command without payload (git-fixes).
  • x86/aperfmperf: Dont wake idle CPUs in arch_freq_get_on_cpu() (bsc#1236289).
  • x86/aperfmperf: Integrate the fallback code from show_cpuinfo() (bsc#1236289).
  • x86/aperfmperf: Make parts of the frequency invariance code unconditional (bsc#1236289).
  • x86/aperfmperf: Put frequency invariance aperf/mperf data into a struct (bsc#1236289).
  • x86/aperfmperf: Replace aperfmperf_get_khz() (bsc#1236289).
  • x86/aperfmperf: Replace arch_freq_get_on_cpu() (bsc#1236289).
  • x86/aperfmperf: Restructure arch_scale_freq_tick() (bsc#1236289).
  • x86/aperfmperf: Separate AP/BP frequency invariance init (bsc#1236289).
  • x86/aperfmperf: Store aperf/mperf data for cpu frequency reads (bsc#1236289).
  • x86/aperfmperf: Untangle Intel and AMD frequency invariance init (bsc#1236289). -…
Record
SUSE-SU-2025:0833-2
Updated
2026-11-02
OSVSUSE-SU-2025:0847-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
  • CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).
  • CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).
  • CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
  • CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
  • CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
  • CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
  • CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
  • CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
  • CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
  • CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (bsc#1236680).
  • CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
  • CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
  • CVE-2025-21669: vsock/virtio: discard packets if the transport changes (bsc#1236683).
  • CVE-2025-21670: vsock/bpf: return early if transport is not assigned (bsc#1236685).
  • CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
  • CVE-2025-21675: net/mlx5: Clear port select structure when fail to create (bsc#1236694).
  • CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
  • CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
  • CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
  • CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
  • CVE-2025-21700: net: sched:…
Record
SUSE-SU-2025:0847-1
Updated
2026-11-02
OSVSUSE-SU-2025:0853-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033).
  • CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
  • CVE-2024-53226: RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (bsc#1236576)
  • CVE-2024-57948: mac802154: check local interfaces before deleting sdata list (bsc#1236677).
  • CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
  • CVE-2025-21690: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (bsc#1237025).
  • CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
  • CVE-2025-21699: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (bsc#1237139).

The following non-security bugs were fixed:

  • NFSD: use explicit lock/unlock for directory ops (bsc#1234650 bsc#1233701 bsc#1232472).
  • cpufreq/amd-pstate: Only print supported EPP values for performance governor (bsc#1236777).
  • iavf: fix the waiting time for initial reset (bsc#1235111).
  • ice: add ice_adapter for shared data across PFs on the same NIC (bsc#1235111).
  • ice: avoid the PTP hardware semaphore in gettimex64 path (bsc#1235111).
  • ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (bsc#1235111).
  • idpf: call set_real_num_queues in idpf_open (bsc#1236661 bsc#1237316).
  • ipv4/tcp: do not use per netns ctl sockets (bsc#1237693).
  • kabi: hide adding RCU head into struct netdev_name_node (bsc#1233749).
  • net: Fix undefined behavior in netdev name allocation (bsc#1233749).
  • net: avoid UAF on deleted altname (bsc#1233749).
  • net: check for altname conflicts when changing netdev's netns (bsc#1233749).
  • net: core: Use the bitmap API to allocate bitmaps (bsc#1233749).
  • net: do not send a MOVE event when netdev changes netns (bsc#1233749).
  • net: do not use input buffer of __dev_alloc_name() as a scratch space (bsc#1233749).
  • net: fix ifname in netlink ntf during netns move (bsc#1233749).
  • net: fix removing a namespace with conflicting altnames (bsc#1233749).
  • net: free altname using an RCU callback (bsc#1233749).
  • net: introduce a function to check if a netdev name is in use (bsc#1233749).
  • net: make dev_alloc_name() call dev_prep_valid_name() (bsc#1233749).
  • net: mana: Add get_link and get_link_ksettings in ethtool (bsc#1236761).
  • net: mana: Cleanup 'mana' debugfs dir after cleanup of all children (bsc#1236760).
  • net: mana: Enable debugfs files for MANA device (bsc#1236758).
  • net: minor __dev_alloc_name() optimization (bsc#1233749).
  • net: move altnames together with the netdevice (bsc#1233749).
  • net: netvsc: Update default VMBus channels (bsc#1236757).
  • net: reduce indentation of __dev_alloc_name() (bsc#1233749).
  • net: remove dev_valid_name() check from __dev_alloc_name() (bsc#1233749).
  • net: remove else after return in dev_prep_valid_name() (bsc#1233749).
  • net: trust the bitmap in __dev_alloc_name() (bsc#1233749).
  • rcu: Remove rcu_is_idle_cpu() (bsc#1236289).
  • scsi: storvsc: Set correct data length for sending SCSI command without payload (git-fixes).
  • x86/aperfmperf: Dont wake idle CPUs in arch_freq_get_on_cpu() (bsc#1236289).
  • x86/aperfmperf: Integrate the fallback code from show_cpuinfo() (bsc#1236289).
  • x86/aperfmperf: Make parts of the frequency invariance code unconditional (bsc#1236289).
  • x86/aperfmperf: Put frequency invariance aperf/mperf data into a struct (bsc#1236289).
  • x86/aperfmperf: Replace aperfmperf_get_khz() (bsc#1236289).
  • x86/aperfmperf: Replace arch_freq_get_on_cpu() (bsc#1236289).
  • x86/aperfmperf: Restructure arch_scale_freq_tick() (bsc#1236289).
  • x86/aperfmperf: Separate AP/BP frequency invariance init (bsc#1236289).
  • x86/aperfmperf: Store aperf/mperf data for cpu frequency reads (bsc#1236289).
  • x86/aperfmperf: Untangle Intel and AMD frequency invariance init (bsc#1236289). -…
Record
SUSE-SU-2025:0853-1
Updated
2026-11-02
OSVSUSE-SU-2025:0856-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
  • CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
  • CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).
  • CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
  • CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
  • CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
  • CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
  • CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
  • CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
  • CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
  • CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
  • CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
  • CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
  • CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
  • CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
  • CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
  • CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21728: bpf: Send signals asynchronously if !preemptible (bsc#1237879).
  • CVE-2025-21705: mptcp: handle fastopen disconnect correctly (bsc#1238525).
  • CVE-2025-21715: net: davicom: fix UAF in dm9000_drv_remove (bsc#1237889).
  • CVE-2025-21716: vxlan: Fix uninit-value in vxlan_vnifilter_dump() (bsc#1237891).
  • CVE-2025-21719: ipmr: do not call mr_mfc_uses_dev() for unres entries (bsc#1238860).
  • CVE-2025-21724: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (bsc#1238863).
  • CVE-2025-21725: smb: client: fix oops due to unset link speed (bsc#1238877). -…
Record
SUSE-SU-2025:0856-1
Updated
2026-11-02
OSVSUSE-SU-2025:0955-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
  • CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
  • CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).
  • CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
  • CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
  • CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
  • CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
  • CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
  • CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
  • CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
  • CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
  • CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
  • CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
  • CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
  • CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
  • CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
  • CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21705: mptcp: handle fastopen disconnect correctly (bsc#1238525).
  • CVE-2025-21715: net: davicom: fix UAF in dm9000_drv_remove (bsc#1237889).
  • CVE-2025-21716: vxlan: Fix uninit-value in vxlan_vnifilter_dump() (bsc#1237891).
  • CVE-2025-21719: ipmr: do not call mr_mfc_uses_dev() for unres entries (bsc#1238860).
  • CVE-2025-21724: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (bsc#1238863).
  • CVE-2025-21725: smb: client: fix oops due to unset link speed (bsc#1238877).
  • CVE-2025-21728: bpf: Send signals asynchronously if !preemptible (bsc#1237879).
  • CVE-2025-21767: clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic…
Record
SUSE-SU-2025:0955-1
Updated
2026-11-02
OSVSUSE-SU-2025:20190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
  • CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
  • CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
  • CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…
Record
SUSE-SU-2025:20190-1
Updated
2026-11-02
OSVSUSE-SU-2025:20192-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
  • CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
  • CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free…
Record
SUSE-SU-2025:20192-1
Updated
2026-11-02
OSVSUSE-SU-2025:20260-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
  • CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
  • CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
  • CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…
Record
SUSE-SU-2025:20260-1
Updated
2026-11-02
OSVSUSE-SU-2025:20270-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
  • CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
  • CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free…
Record
SUSE-SU-2025:20270-1
Updated
2026-11-02
OSVUSN-7379-1 No score

linux, linux-aws, linux-azure, linux-gcp, linux-hwe-6.11, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • Ublk userspace block driver;
  • Virtio block driver;
  • Bluetooth drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Microchip PCI driver;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • Power supply drivers;
  • Voltage and Current Regulator drivers;
  • SCSI subsystem;
  • i.MX SoC drivers;
  • SPI subsystem;
  • UFS subsystem;
  • USB Gadget drivers;
  • TDX Guest driver;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • Overlay file system;
  • Diskquota system;
  • SMB network file system;
  • DRM display driver;
  • BPF subsystem;
  • VLANs driver;
  • KASAN memory debugging framework;
  • Memory management;
  • StackDepot library;
  • Bluetooth subsystem;
  • LAPB network protocol;
  • Netfilter;
  • io_uring subsystem;
  • Control group (cgroup);
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Scheduler infrastructure;
  • Seccomp subsystem;
  • Tracing infrastructure;
  • Workqueue subsystem;
  • KUnit library;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • NET/ROM layer;
  • Packet sockets;
  • RDS protocol;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • TIPC protocol;
  • Wireless networking;
  • eXpress Data Path;
  • SELinux security module;
  • ALSA framework;
  • Intel ASoC drivers;
  • SOF drivers; (CVE-2024-57921, CVE-2024-56614, CVE-2024-56558, CVE-2024-56589, CVE-2024-56662, CVE-2024-56610, CVE-2024-56717, CVE-2024-57890, CVE-2024-55639, CVE-2024-56562, CVE-2025-21633, CVE-2024-56598, CVE-2024-47794, CVE-2024-41935, CVE-2024-57901, CVE-2024-56587, CVE-2024-56581, CVE-2024-56783, CVE-2024-57888, CVE-2024-57809, CVE-2024-57926, CVE-2025-21650, CVE-2024-56634, CVE-2025-21639, CVE-2025-21656, CVE-2024-56578, CVE-2025-21632, CVE-2024-56784, CVE-2025-21644, CVE-2024-56776, CVE-2024-56764, CVE-2024-56652, CVE-2024-56550, CVE-2024-56569, CVE-2024-57904, CVE-2024-49569, CVE-2024-56770, CVE-2024-56606, CVE-2024-57806, CVE-2024-56646, CVE-2024-57895, CVE-2024-57880, CVE-2024-56650, CVE-2024-56591, CVE-2024-56590, CVE-2024-56642, CVE-2024-56713, CVE-2025-21663, CVE-2024-57938, CVE-2024-56760, CVE-2024-56583, CVE-2025-21662, CVE-2024-56629, CVE-2024-47408, CVE-2024-57850, CVE-2024-56777, CVE-2024-56626, CVE-2024-56773, CVE-2024-56647, CVE-2025-21664, CVE-2024-56564, CVE-2024-56597, CVE-2024-56623, CVE-2024-57897, CVE-2024-56670, CVE-2024-56567, CVE-2024-57931, CVE-2024-56761, CVE-2024-57935, CVE-2024-53690, CVE-2025-21640, CVE-2024-56608, CVE-2024-57878, CVE-2025-21648, CVE-2024-57898, CVE-2024-57889, CVE-2024-56644, CVE-2024-56763, CVE-2024-57900,…
Record
USN-7379-1
Updated
2026-11-02
OSVUSN-7381-1 No score

linux-lowlatency-hwe-6.11 vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • Ublk userspace block driver;
  • Virtio block driver;
  • Bluetooth drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Microchip PCI driver;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • Power supply drivers;
  • Voltage and Current Regulator drivers;
  • SCSI subsystem;
  • i.MX SoC drivers;
  • SPI subsystem;
  • UFS subsystem;
  • USB Gadget drivers;
  • TDX Guest driver;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • Overlay file system;
  • Diskquota system;
  • SMB network file system;
  • DRM display driver;
  • BPF subsystem;
  • VLANs driver;
  • KASAN memory debugging framework;
  • Memory management;
  • StackDepot library;
  • Bluetooth subsystem;
  • LAPB network protocol;
  • Network namespace;
  • Netfilter;
  • io_uring subsystem;
  • Control group (cgroup);
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Scheduler infrastructure;
  • Seccomp subsystem;
  • Tracing infrastructure;
  • Workqueue subsystem;
  • KUnit library;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • NET/ROM layer;
  • Packet sockets;
  • RDS protocol;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • TIPC protocol;
  • Wireless networking;
  • eXpress Data Path;
  • SELinux security module;
  • ALSA framework;
  • Intel ASoC drivers;
  • SOF drivers; (CVE-2024-56712, CVE-2024-56761, CVE-2025-21661, CVE-2024-56565, CVE-2024-57804, CVE-2024-57887, CVE-2025-21642, CVE-2024-56779, CVE-2025-21656, CVE-2024-57890, CVE-2024-36476, CVE-2024-57843, CVE-2024-56594, CVE-2024-41932, CVE-2025-21653, CVE-2024-56567, CVE-2024-56665, CVE-2024-54191, CVE-2024-57893, CVE-2024-57932, CVE-2024-56656, CVE-2024-57945, CVE-2024-57931, CVE-2024-56599, CVE-2024-57897, CVE-2024-57903, CVE-2024-57918, CVE-2024-57795, CVE-2024-56662, CVE-2025-21639, CVE-2024-55881, CVE-2024-57889, CVE-2024-57884, CVE-2024-57934, CVE-2024-39282, CVE-2024-56718, CVE-2024-56644, CVE-2024-56760, CVE-2024-43098, CVE-2024-47143, CVE-2024-55642, CVE-2024-56634, CVE-2024-56564, CVE-2024-56768, CVE-2024-56649, CVE-2024-57919, CVE-2024-56620, CVE-2024-56625, CVE-2024-56655, CVE-2024-56772, CVE-2025-21637, CVE-2024-56617, CVE-2024-57879, CVE-2024-56715, CVE-2024-56550, CVE-2024-50051, CVE-2024-56673, CVE-2024-51729, CVE-2025-21664,…
Record
USN-7381-1
Updated
2026-11-02
OSVUSN-7382-1 No score

linux-oem-6.11 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • Ublk userspace block driver;
  • Virtio block driver;
  • Bluetooth drivers;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EFI core;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Multiple devices driver;
  • Media drivers;
  • Microchip PCI driver;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • Power supply drivers;
  • Voltage and Current Regulator drivers;
  • SCSI subsystem;
  • i.MX SoC drivers;
  • SPI subsystem;
  • UFS subsystem;
  • USB Gadget drivers;
  • TDX Guest driver;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • F2FS file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • Overlay file system;
  • Diskquota system;
  • SMB network file system;
  • DRM display driver;
  • BPF subsystem;
  • VLANs driver;
  • KASAN memory debugging framework;
  • Memory management;
  • StackDepot library;
  • Bluetooth subsystem;
  • LAPB network protocol;
  • Netfilter;
  • io_uring subsystem;
  • Control group (cgroup);
  • DMA mapping infrastructure;
  • KCSAN framework;
  • Scheduler infrastructure;
  • Seccomp subsystem;
  • Tracing infrastructure;
  • Workqueue subsystem;
  • KUnit library;
  • CAN network layer;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • NET/ROM layer;
  • Packet sockets;
  • RDS protocol;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • TIPC protocol;
  • Wireless networking;
  • eXpress Data Path;
  • SELinux security module;
  • ALSA framework;
  • Intel ASoC drivers;
  • SOF drivers; (CVE-2024-47794, CVE-2025-21653, CVE-2024-55642, CVE-2024-56580, CVE-2024-36476, CVE-2024-56623, CVE-2024-56773, CVE-2024-48873, CVE-2024-47141, CVE-2024-57910, CVE-2024-56759, CVE-2024-54460, CVE-2024-57839, CVE-2024-56625, CVE-2024-55916, CVE-2025-21664, CVE-2025-21652, CVE-2024-56624, CVE-2024-56574, CVE-2024-50051, CVE-2025-21655, CVE-2024-56578, CVE-2024-56782, CVE-2024-57939, CVE-2024-57935, CVE-2024-56647, CVE-2024-57905, CVE-2024-57921, CVE-2024-56660, CVE-2025-21650, CVE-2025-21631, CVE-2024-56642, CVE-2024-56552, CVE-2024-57934, CVE-2024-56621, CVE-2024-57881, CVE-2024-41932, CVE-2024-56770, CVE-2024-57897, CVE-2024-56785, CVE-2024-56664, CVE-2024-57945, CVE-2024-57938, CVE-2024-56636, CVE-2024-56572, CVE-2024-43098, CVE-2024-56760, CVE-2024-57916, CVE-2024-56714, CVE-2025-21660, CVE-2024-57906, CVE-2025-21638, CVE-2024-53687, CVE-2024-56652, CVE-2024-51729, CVE-2024-49571, CVE-2024-57883, CVE-2024-54191, CVE-2024-56712, CVE-2024-49568, CVE-2024-57932, CVE-2024-57893, CVE-2024-56645, CVE-2024-56719, CVE-2024-56641, CVE-2024-57802, CVE-2024-56775, CVE-2024-56627, CVE-2024-56638, CVE-2024-57929, CVE-2024-56615, CVE-2024-56566, CVE-2024-56620, CVE-2024-56577, CVE-2025-21656, CVE-2024-57887, CVE-2024-52319, CVE-2024-56657, CVE-2024-57872,…
Record
USN-7382-1
Updated
2026-11-02
OSVUSN-7510-1 No score

linux, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Network block device driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • InfiniBand drivers;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Network drivers;
  • PCI subsystem;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • RapidIO drivers;
  • Real Time Clock drivers;
  • SLIMbus drivers;
  • QCOM SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB DSL drivers;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • ACRN Hypervisor Service Module driver;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • KVM subsystem;
  • L3 Master device support module;
  • Process Accounting mechanism;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • Network traffic control;
  • Wireless networking;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module; (CVE-2025-21731, CVE-2025-21926, CVE-2025-21830, CVE-2024-58010, CVE-2025-21745, CVE-2025-21871, CVE-2024-57980, CVE-2025-21916, CVE-2025-21735, CVE-2025-21763, CVE-2025-21799, CVE-2025-21811, CVE-2025-21814, CVE-2024-58083, CVE-2025-21922, CVE-2025-21802, CVE-2024-58034, CVE-2025-21758, CVE-2024-58069, CVE-2025-21905, CVE-2024-57986, CVE-2025-21718, CVE-2024-58020, CVE-2025-21858, CVE-2025-21749, CVE-2025-21928, CVE-2024-58085, CVE-2025-21795, CVE-2025-21744, CVE-2025-21776, CVE-2025-21804, CVE-2024-57973, CVE-2025-21848, CVE-2025-21844, CVE-2024-56721, CVE-2024-58079, CVE-2025-21781, CVE-2025-21866, CVE-2024-58052, CVE-2024-58017, CVE-2024-58071, CVE-2025-21791, CVE-2024-26982, CVE-2025-21787, CVE-2024-58090, CVE-2025-21951, CVE-2025-21846, CVE-2025-21722, CVE-2024-58001, CVE-2025-21715, CVE-2025-21919, CVE-2025-21904, CVE-2024-57977, CVE-2025-21785, CVE-2025-21950, CVE-2025-21924, CVE-2024-57979, CVE-2025-21711, CVE-2024-47726, CVE-2024-58002, CVE-2025-21914, CVE-2024-58086, CVE-2024-58005, CVE-2025-21835, CVE-2024-58051, CVE-2025-21761, CVE-2025-21760, CVE-2025-21767, CVE-2025-21766, CVE-2025-21726, CVE-2025-21865, CVE-2024-58014, CVE-2025-21878, CVE-2025-21934, CVE-2024-58007, CVE-2025-21898, CVE-2025-21806, CVE-2024-58058, CVE-2025-21779, CVE-2024-58063, CVE-2025-21708, CVE-2025-21684, CVE-2024-57834, CVE-2025-21971, CVE-2025-21762, CVE-2025-21728, CVE-2024-58076, CVE-2025-21704, CVE-2025-21719, CVE-2025-21948, CVE-2025-21707, CVE-2025-21917, CVE-2025-21782, CVE-2025-21943, CVE-2025-21765, CVE-2025-21721, CVE-2024-58016, CVE-2025-21859, CVE-2025-21909, CVE-2025-21748, CVE-2025-21912, CVE-2025-21736, CVE-2025-21862, CVE-2024-57978, CVE-2025-21826, CVE-2025-21920, CVE-2025-21772, CVE-2025-21877, CVE-2025-21935, CVE-2024-56599, CVE-2025-21820, CVE-2025-21764, CVE-2025-21796, CVE-2025-21887, CVE-2025-21753, CVE-2025-21910, CVE-2024-57981, CVE-2025-21727, CVE-2025-21875, CVE-2024-58072, CVE-2024-58055, CVE-2025-21925, CVE-2025-21823, CVE-2025-21647)
Record
USN-7510-1
Updated
2026-11-02
OSVUSN-7510-2 No score

linux-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Network block device driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • InfiniBand drivers;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Network drivers;
  • PCI subsystem;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • RapidIO drivers;
  • Real Time Clock drivers;
  • SLIMbus drivers;
  • QCOM SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB DSL drivers;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • ACRN Hypervisor Service Module driver;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • KVM subsystem;
  • L3 Master device support module;
  • Process Accounting mechanism;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • Network traffic control;
  • Wireless networking;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module; (CVE-2025-21731, CVE-2025-21926, CVE-2025-21830, CVE-2024-58010, CVE-2025-21745, CVE-2025-21871, CVE-2024-57980, CVE-2025-21916, CVE-2025-21735, CVE-2025-21763, CVE-2025-21799, CVE-2025-21811, CVE-2025-21814, CVE-2024-58083, CVE-2025-21922, CVE-2025-21802, CVE-2024-58034, CVE-2025-21758, CVE-2024-58069, CVE-2025-21905, CVE-2024-57986, CVE-2025-21718, CVE-2024-58020, CVE-2025-21858, CVE-2025-21749, CVE-2025-21928, CVE-2024-58085, CVE-2025-21795, CVE-2025-21744, CVE-2025-21776, CVE-2025-21804, CVE-2024-57973, CVE-2025-21848, CVE-2025-21844, CVE-2024-56721, CVE-2024-58079, CVE-2025-21781, CVE-2025-21866, CVE-2024-58052, CVE-2024-58017, CVE-2024-58071, CVE-2025-21791, CVE-2024-26982, CVE-2025-21787, CVE-2024-58090, CVE-2025-21951, CVE-2025-21846, CVE-2025-21722, CVE-2024-58001, CVE-2025-21715, CVE-2025-21919, CVE-2025-21904, CVE-2024-57977, CVE-2025-21785, CVE-2025-21950, CVE-2025-21924, CVE-2024-57979, CVE-2025-21711, CVE-2024-47726, CVE-2024-58002, CVE-2025-21914, CVE-2024-58086, CVE-2024-58005, CVE-2025-21835, CVE-2024-58051, CVE-2025-21761, CVE-2025-21760, CVE-2025-21767, CVE-2025-21766, CVE-2025-21726, CVE-2025-21865, CVE-2024-58014, CVE-2025-21878, CVE-2025-21934, CVE-2024-58007, CVE-2025-21898, CVE-2025-21806, CVE-2024-58058, CVE-2025-21779, CVE-2024-58063, CVE-2025-21708, CVE-2025-21684, CVE-2024-57834, CVE-2025-21971, CVE-2025-21762, CVE-2025-21728, CVE-2024-58076, CVE-2025-21704, CVE-2025-21719, CVE-2025-21948, CVE-2025-21707, CVE-2025-21917, CVE-2025-21782, CVE-2025-21943, CVE-2025-21765, CVE-2025-21721, CVE-2024-58016, CVE-2025-21859, CVE-2025-21909, CVE-2025-21748, CVE-2025-21912, CVE-2025-21736, CVE-2025-21862, CVE-2024-57978, CVE-2025-21826, CVE-2025-21920, CVE-2025-21772, CVE-2025-21877, CVE-2025-21935, CVE-2024-56599, CVE-2025-21820, CVE-2025-21764, CVE-2025-21796, CVE-2025-21887, CVE-2025-21753, CVE-2025-21910, CVE-2024-57981, CVE-2025-21727, CVE-2025-21875, CVE-2024-58072, CVE-2024-58055, CVE-2025-21925, CVE-2025-21823, CVE-2025-21647)
Record
USN-7510-2
Updated
2026-11-02
OSVUSN-7510-3 No score

linux-azure, linux-azure-5.15, linux-nvidia-tegra vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Network block device driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • InfiniBand drivers;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Network drivers;
  • PCI subsystem;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • RapidIO drivers;
  • Real Time Clock drivers;
  • SLIMbus drivers;
  • QCOM SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB DSL drivers;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • ACRN Hypervisor Service Module driver;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • KVM subsystem;
  • L3 Master device support module;
  • Process Accounting mechanism;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • Network traffic control;
  • Wireless networking;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module; (CVE-2024-58069, CVE-2025-21912, CVE-2025-21922, CVE-2025-21765, CVE-2025-21823, CVE-2025-21971, CVE-2024-58010, CVE-2025-21767, CVE-2025-21727, CVE-2025-21916, CVE-2025-21859, CVE-2025-21844, CVE-2024-58063, CVE-2025-21704, CVE-2024-57986, CVE-2025-21846, CVE-2024-58007, CVE-2025-21708, CVE-2025-21731, CVE-2024-58058, CVE-2024-58090, CVE-2025-21791, CVE-2025-21917, CVE-2024-26982, CVE-2024-47726, CVE-2025-21848, CVE-2025-21948, CVE-2025-21796, CVE-2025-21919, CVE-2025-21950, CVE-2024-58085, CVE-2025-21766, CVE-2025-21764, CVE-2025-21781, CVE-2024-58071, CVE-2024-58072, CVE-2025-21726, CVE-2025-21858, CVE-2024-58005, CVE-2025-21866, CVE-2025-21935, CVE-2025-21753, CVE-2025-21904, CVE-2025-21877, CVE-2024-58002, CVE-2025-21776, CVE-2025-21926, CVE-2025-21865, CVE-2025-21898, CVE-2024-58076, CVE-2025-21707, CVE-2025-21735, CVE-2025-21905, CVE-2025-21928, CVE-2025-21647, CVE-2025-21718, CVE-2025-21814, CVE-2025-21925, CVE-2024-58001, CVE-2025-21811, CVE-2024-58055, CVE-2024-58086, CVE-2025-21736, CVE-2025-21871, CVE-2025-21878, CVE-2025-21684, CVE-2025-21763, CVE-2025-21782, CVE-2024-58052, CVE-2025-21820, CVE-2024-57979, CVE-2025-21787, CVE-2025-21749, CVE-2025-21779, CVE-2024-57981, CVE-2025-21719, CVE-2025-21785, CVE-2024-57973, CVE-2025-21745, CVE-2025-21943, CVE-2025-21875, CVE-2025-21795, CVE-2025-21748, CVE-2025-21862, CVE-2025-21744, CVE-2025-21835, CVE-2025-21762, CVE-2025-21760, CVE-2024-58051, CVE-2024-58020, CVE-2024-56721, CVE-2025-21772, CVE-2025-21914, CVE-2024-58014, CVE-2024-58017, CVE-2025-21920, CVE-2025-21711, CVE-2024-57834, CVE-2025-21910, CVE-2025-21909, CVE-2025-21887, CVE-2024-56599, CVE-2025-21806, CVE-2025-21826, CVE-2025-21722, CVE-2024-57977, CVE-2025-21951, CVE-2025-21721, CVE-2024-58034, CVE-2024-57980, CVE-2024-58079, CVE-2024-58083, CVE-2025-21758, CVE-2024-58016, CVE-2024-57978, CVE-2025-21799, CVE-2025-21715, CVE-2025-21761, CVE-2025-21934, CVE-2025-21924, CVE-2025-21830, CVE-2025-21728, CVE-2025-21802, CVE-2025-21804)
Record
USN-7510-3
Updated
2026-11-02
OSVUSN-7510-4 No score

linux-intel-iot-realtime, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Network block device driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • InfiniBand drivers;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Network drivers;
  • PCI subsystem;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • RapidIO drivers;
  • Real Time Clock drivers;
  • SLIMbus drivers;
  • QCOM SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB DSL drivers;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • ACRN Hypervisor Service Module driver;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • KVM subsystem;
  • L3 Master device support module;
  • Process Accounting mechanism;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • Network traffic control;
  • Wireless networking;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module; (CVE-2025-21761, CVE-2025-21715, CVE-2025-21802, CVE-2024-57980, CVE-2025-21708, CVE-2025-21722, CVE-2025-21948, CVE-2024-58063, CVE-2025-21765, CVE-2024-58086, CVE-2025-21753, CVE-2025-21943, CVE-2025-21924, CVE-2024-57978, CVE-2025-21760, CVE-2025-21726, CVE-2025-21647, CVE-2025-21866, CVE-2025-21763, CVE-2025-21950, CVE-2024-57977, CVE-2025-21799, CVE-2024-57981, CVE-2025-21871, CVE-2025-21887, CVE-2025-21772, CVE-2025-21878, CVE-2024-58090, CVE-2025-21859, CVE-2024-57986, CVE-2024-57973, CVE-2024-58007, CVE-2025-21898, CVE-2025-21787, CVE-2025-21865, CVE-2025-21848, CVE-2025-21806, CVE-2024-58005, CVE-2024-58058, CVE-2024-56599, CVE-2024-58034, CVE-2025-21846, CVE-2025-21719, CVE-2025-21749, CVE-2025-21766, CVE-2025-21744, CVE-2024-58010, CVE-2025-21704, CVE-2024-26982, CVE-2024-58020, CVE-2025-21916, CVE-2024-58055, CVE-2024-58014, CVE-2024-58051, CVE-2025-21767, CVE-2025-21707, CVE-2025-21795, CVE-2024-58002, CVE-2025-21928, CVE-2025-21925, CVE-2024-58085, CVE-2025-21877, CVE-2025-21684, CVE-2024-58083, CVE-2025-21904, CVE-2024-58016, CVE-2025-21934, CVE-2025-21951, CVE-2025-21782, CVE-2025-21758, CVE-2025-21728, CVE-2025-21858, CVE-2025-21823, CVE-2025-21910, CVE-2025-21736, CVE-2025-21796, CVE-2025-21779, CVE-2025-21718, CVE-2024-56721, CVE-2024-58069, CVE-2024-58079, CVE-2025-21721, CVE-2025-21711, CVE-2025-21791, CVE-2025-21971, CVE-2025-21811, CVE-2025-21785, CVE-2025-21814, CVE-2025-21764, CVE-2024-58052, CVE-2025-21776, CVE-2024-58076, CVE-2024-47726, CVE-2025-21762, CVE-2025-21804, CVE-2025-21926, CVE-2025-21826, CVE-2025-21731, CVE-2024-57979, CVE-2025-21909, CVE-2025-21835, CVE-2025-21905, CVE-2025-21748, CVE-2024-58071, CVE-2025-21830, CVE-2025-21922, CVE-2024-57834, CVE-2025-21745, CVE-2025-21727, CVE-2025-21781, CVE-2025-21862, CVE-2024-58072, CVE-2025-21844, CVE-2025-21912, CVE-2025-21875, CVE-2025-21919, CVE-2025-21820, CVE-2024-58017, CVE-2025-21914, CVE-2025-21917, CVE-2025-21920, CVE-2025-21735, CVE-2025-21935, CVE-2024-58001)
Record
USN-7510-4
Updated
2026-11-02
OSVUSN-7510-5 No score

linux-azure-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Network block device driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • InfiniBand drivers;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Network drivers;
  • PCI subsystem;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • RapidIO drivers;
  • Real Time Clock drivers;
  • SLIMbus drivers;
  • QCOM SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB DSL drivers;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • ACRN Hypervisor Service Module driver;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • KVM subsystem;
  • L3 Master device support module;
  • Process Accounting mechanism;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • Network traffic control;
  • Wireless networking;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module; (CVE-2025-21760, CVE-2025-21904, CVE-2025-21708, CVE-2025-21719, CVE-2024-58058, CVE-2025-21814, CVE-2024-56721, CVE-2025-21715, CVE-2024-58016, CVE-2025-21796, CVE-2025-21795, CVE-2025-21728, CVE-2025-21776, CVE-2024-57834, CVE-2025-21806, CVE-2025-21684, CVE-2025-21858, CVE-2025-21875, CVE-2025-21718, CVE-2025-21726, CVE-2025-21762, CVE-2025-21745, CVE-2025-21749, CVE-2025-21910, CVE-2025-21707, CVE-2024-57986, CVE-2025-21735, CVE-2024-58002, CVE-2025-21753, CVE-2025-21909, CVE-2025-21934, CVE-2025-21802, CVE-2024-58010, CVE-2025-21862, CVE-2025-21887, CVE-2025-21948, CVE-2024-57977, CVE-2025-21781, CVE-2025-21928, CVE-2024-26982, CVE-2025-21704, CVE-2024-58071, CVE-2024-57980, CVE-2025-21916, CVE-2025-21647, CVE-2024-57978, CVE-2025-21951, CVE-2025-21766, CVE-2025-21924, CVE-2025-21920, CVE-2025-21835, CVE-2025-21846, CVE-2025-21791, CVE-2024-58063, CVE-2024-58007, CVE-2025-21877, CVE-2025-21878, CVE-2025-21917, CVE-2025-21779, CVE-2024-57973, CVE-2024-57979, CVE-2025-21772, CVE-2024-58014, CVE-2025-21711, CVE-2025-21919, CVE-2024-58083, CVE-2025-21763, CVE-2024-58072, CVE-2025-21943, CVE-2025-21866, CVE-2025-21811, CVE-2025-21767, CVE-2025-21761, CVE-2025-21799, CVE-2024-56599, CVE-2025-21820, CVE-2025-21871, CVE-2025-21935, CVE-2024-58069, CVE-2024-58090, CVE-2024-58005, CVE-2025-21736, CVE-2025-21912, CVE-2025-21823, CVE-2025-21922, CVE-2025-21721, CVE-2024-58076, CVE-2025-21905, CVE-2025-21865, CVE-2025-21830, CVE-2024-58001, CVE-2024-58086, CVE-2024-58017, CVE-2024-58052, CVE-2025-21744, CVE-2025-21859, CVE-2025-21787, CVE-2024-58085, CVE-2025-21731, CVE-2024-58051, CVE-2025-21914, CVE-2025-21748, CVE-2024-58020, CVE-2025-21804, CVE-2025-21727, CVE-2025-21765, CVE-2025-21826, CVE-2025-21758, CVE-2024-58034, CVE-2024-58055, CVE-2025-21844, CVE-2025-21782, CVE-2024-57981, CVE-2025-21785, CVE-2025-21848, CVE-2025-21898, CVE-2025-21722, CVE-2025-21925, CVE-2025-21764, CVE-2024-47726, CVE-2025-21971, CVE-2025-21926, CVE-2025-21950, CVE-2024-58079)
Record
USN-7510-5
Updated
2026-11-02
OSVUSN-7510-6 No score

linux-aws-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Network block device driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • InfiniBand drivers;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Network drivers;
  • PCI subsystem;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • RapidIO drivers;
  • Real Time Clock drivers;
  • SLIMbus drivers;
  • QCOM SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB DSL drivers;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • ACRN Hypervisor Service Module driver;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • KVM subsystem;
  • L3 Master device support module;
  • Process Accounting mechanism;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • Network traffic control;
  • Wireless networking;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module; (CVE-2024-57973, CVE-2025-21728, CVE-2025-21684, CVE-2024-57980, CVE-2025-21919, CVE-2025-21802, CVE-2025-21748, CVE-2024-58034, CVE-2025-21877, CVE-2024-57981, CVE-2024-58071, CVE-2025-21926, CVE-2025-21848, CVE-2025-21766, CVE-2024-57834, CVE-2024-58085, CVE-2025-21914, CVE-2025-21758, CVE-2025-21707, CVE-2025-21726, CVE-2025-21731, CVE-2025-21916, CVE-2025-21826, CVE-2025-21917, CVE-2025-21760, CVE-2025-21925, CVE-2024-58086, CVE-2025-21948, CVE-2025-21943, CVE-2025-21782, CVE-2024-56599, CVE-2025-21875, CVE-2025-21753, CVE-2025-21721, CVE-2025-21711, CVE-2025-21787, CVE-2025-21928, CVE-2024-57979, CVE-2025-21779, CVE-2025-21924, CVE-2024-58020, CVE-2025-21905, CVE-2024-58002, CVE-2025-21744, CVE-2025-21763, CVE-2024-58017, CVE-2025-21736, CVE-2024-58069, CVE-2025-21715, CVE-2024-58083, CVE-2025-21934, CVE-2024-58055, CVE-2025-21761, CVE-2025-21772, CVE-2025-21796, CVE-2025-21718, CVE-2025-21719, CVE-2025-21887, CVE-2025-21806, CVE-2024-58063, CVE-2025-21871, CVE-2025-21858, CVE-2025-21922, CVE-2025-21767, CVE-2024-58058, CVE-2024-57986, CVE-2025-21971, CVE-2025-21912, CVE-2025-21862, CVE-2024-58001, CVE-2024-58005, CVE-2024-58079, CVE-2025-21749, CVE-2024-58076, CVE-2024-47726, CVE-2025-21722, CVE-2024-58007, CVE-2024-26982, CVE-2024-58016, CVE-2025-21647, CVE-2025-21814, CVE-2024-57978, CVE-2025-21823, CVE-2025-21795, CVE-2025-21910, CVE-2024-58051, CVE-2024-58010, CVE-2025-21776, CVE-2025-21859, CVE-2025-21950, CVE-2025-21811, CVE-2025-21935, CVE-2025-21799, CVE-2025-21835, CVE-2024-58090, CVE-2025-21844, CVE-2024-58052, CVE-2025-21951, CVE-2025-21865, CVE-2025-21820, CVE-2025-21804, CVE-2025-21765, CVE-2025-21727, CVE-2025-21830, CVE-2025-21846, CVE-2025-21781, CVE-2025-21704, CVE-2025-21735, CVE-2024-58072, CVE-2025-21878, CVE-2025-21909, CVE-2024-56721, CVE-2025-21866, CVE-2025-21904, CVE-2025-21898, CVE-2025-21920, CVE-2025-21745, CVE-2025-21785, CVE-2025-21791, CVE-2024-57977, CVE-2025-21764, CVE-2024-58014, CVE-2025-21762, CVE-2025-21708)
Record
USN-7510-6
Updated
2026-11-02
OSVUSN-7510-7 No score

linux-aws, linux-intel-iotg-5.15, linux-nvidia-tegra-igx, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Network block device driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • InfiniBand drivers;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Network drivers;
  • PCI subsystem;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • RapidIO drivers;
  • Real Time Clock drivers;
  • SLIMbus drivers;
  • QCOM SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB DSL drivers;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • ACRN Hypervisor Service Module driver;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • KVM subsystem;
  • L3 Master device support module;
  • Process Accounting mechanism;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • Network traffic control;
  • Wireless networking;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module; (CVE-2025-21767, CVE-2025-21875, CVE-2025-21719, CVE-2025-21760, CVE-2025-21704, CVE-2025-21749, CVE-2024-56721, CVE-2025-21731, CVE-2025-21910, CVE-2024-58063, CVE-2025-21835, CVE-2025-21726, CVE-2024-58086, CVE-2025-21934, CVE-2024-58014, CVE-2025-21904, CVE-2024-56599, CVE-2025-21727, CVE-2025-21877, CVE-2025-21799, CVE-2024-58071, CVE-2025-21776, CVE-2025-21905, CVE-2025-21926, CVE-2025-21922, CVE-2025-21858, CVE-2024-47726, CVE-2025-21647, CVE-2025-21764, CVE-2025-21862, CVE-2025-21846, CVE-2025-21848, CVE-2024-57973, CVE-2025-21796, CVE-2025-21814, CVE-2025-21878, CVE-2025-21898, CVE-2025-21795, CVE-2025-21735, CVE-2025-21785, CVE-2025-21950, CVE-2024-26982, CVE-2024-57986, CVE-2025-21948, CVE-2024-58072, CVE-2025-21766, CVE-2025-21715, CVE-2025-21920, CVE-2025-21823, CVE-2024-58020, CVE-2024-58017, CVE-2024-58069, CVE-2025-21871, CVE-2024-58085, CVE-2025-21791, CVE-2025-21765, CVE-2025-21782, CVE-2024-58001, CVE-2025-21909, CVE-2024-58079, CVE-2025-21811, CVE-2025-21943, CVE-2025-21924, CVE-2025-21928, CVE-2025-21826, CVE-2025-21708, CVE-2025-21802, CVE-2025-21951, CVE-2025-21744, CVE-2025-21925, CVE-2025-21971, CVE-2024-58076, CVE-2025-21761, CVE-2025-21914, CVE-2025-21684, CVE-2024-58083, CVE-2025-21830, CVE-2025-21887, CVE-2025-21748, CVE-2025-21721, CVE-2024-57980, CVE-2024-58034, CVE-2025-21935, CVE-2025-21859, CVE-2024-58052, CVE-2025-21912, CVE-2025-21753, CVE-2025-21787, CVE-2025-21806, CVE-2025-21917, CVE-2025-21718, CVE-2024-57979, CVE-2025-21866, CVE-2025-21758, CVE-2025-21781, CVE-2025-21711, CVE-2025-21745, CVE-2024-58051, CVE-2024-58016, CVE-2024-58002, CVE-2025-21844, CVE-2024-57977, CVE-2024-57981, CVE-2025-21728, CVE-2024-58090, CVE-2024-58007, CVE-2025-21763, CVE-2025-21762, CVE-2024-58005, CVE-2025-21916, CVE-2024-57834, CVE-2025-21707, CVE-2025-21865, CVE-2025-21736, CVE-2024-57978, CVE-2025-21919, CVE-2025-21820, CVE-2025-21804, CVE-2025-21722, CVE-2024-58055, CVE-2025-21779, CVE-2025-21772, CVE-2024-58010, CVE-2024-58058)
Record
USN-7510-7
Updated
2026-11-02
OSVUSN-7510-8 No score

linux-aws-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Network block device driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • InfiniBand drivers;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Network drivers;
  • PCI subsystem;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • RapidIO drivers;
  • Real Time Clock drivers;
  • SLIMbus drivers;
  • QCOM SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB DSL drivers;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • ACRN Hypervisor Service Module driver;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • KVM subsystem;
  • L3 Master device support module;
  • Process Accounting mechanism;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • Network traffic control;
  • Wireless networking;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module; (CVE-2025-21804, CVE-2025-21779, CVE-2025-21878, CVE-2025-21735, CVE-2024-57977, CVE-2025-21951, CVE-2025-21704, CVE-2025-21859, CVE-2025-21760, CVE-2025-21862, CVE-2024-57834, CVE-2025-21745, CVE-2025-21762, CVE-2024-58005, CVE-2025-21846, CVE-2025-21914, CVE-2025-21736, CVE-2025-21928, CVE-2024-57986, CVE-2025-21761, CVE-2024-58086, CVE-2025-21731, CVE-2025-21766, CVE-2025-21844, CVE-2024-58072, CVE-2024-58069, CVE-2025-21924, CVE-2025-21848, CVE-2025-21950, CVE-2025-21934, CVE-2025-21647, CVE-2024-58076, CVE-2025-21726, CVE-2025-21791, CVE-2025-21722, CVE-2025-21971, CVE-2025-21719, CVE-2025-21904, CVE-2025-21875, CVE-2025-21877, CVE-2025-21758, CVE-2024-58001, CVE-2024-58007, CVE-2024-58010, CVE-2025-21787, CVE-2025-21905, CVE-2024-58055, CVE-2025-21782, CVE-2024-58090, CVE-2025-21910, CVE-2025-21708, CVE-2025-21826, CVE-2024-57980, CVE-2024-58051, CVE-2024-56721, CVE-2025-21909, CVE-2025-21802, CVE-2025-21744, CVE-2024-58058, CVE-2025-21728, CVE-2024-47726, CVE-2024-58079, CVE-2024-58002, CVE-2024-58014, CVE-2025-21898, CVE-2025-21811, CVE-2024-57979, CVE-2025-21865, CVE-2025-21748, CVE-2025-21749, CVE-2025-21920, CVE-2025-21763, CVE-2025-21764, CVE-2025-21887, CVE-2025-21858, CVE-2024-58034, CVE-2025-21820, CVE-2024-57978, CVE-2025-21866, CVE-2025-21922, CVE-2025-21926, CVE-2025-21753, CVE-2024-58052, CVE-2025-21684, CVE-2025-21823, CVE-2024-58016, CVE-2025-21835, CVE-2025-21925, CVE-2025-21707, CVE-2025-21785, CVE-2025-21795, CVE-2025-21718, CVE-2025-21935, CVE-2025-21765, CVE-2025-21715, CVE-2025-21916, CVE-2025-21727, CVE-2025-21912, CVE-2024-58071, CVE-2024-58083, CVE-2025-21948, CVE-2024-56599, CVE-2025-21721, CVE-2024-58063, CVE-2025-21806, CVE-2025-21772, CVE-2025-21776, CVE-2025-21830, CVE-2025-21917, CVE-2024-58020, CVE-2025-21871, CVE-2025-21796, CVE-2025-21711, CVE-2024-58017, CVE-2024-58085, CVE-2024-57981, CVE-2024-57973, CVE-2025-21919, CVE-2025-21814, CVE-2024-26982, CVE-2025-21781, CVE-2025-21943, CVE-2025-21799, CVE-2025-21767)
Record
USN-7510-8
Updated
2026-11-02
OSVUSN-7511-1 No score

linux-gcp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Network block device driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • InfiniBand drivers;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Network drivers;
  • PCI subsystem;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • RapidIO drivers;
  • Real Time Clock drivers;
  • SLIMbus drivers;
  • QCOM SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB DSL drivers;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • ACRN Hypervisor Service Module driver;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • KVM subsystem;
  • L3 Master device support module;
  • Process Accounting mechanism;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • Network traffic control;
  • Wireless networking;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module; (CVE-2024-58063, CVE-2025-21802, CVE-2025-21910, CVE-2025-21718, CVE-2025-21707, CVE-2025-21781, CVE-2025-21726, CVE-2024-56599, CVE-2025-21735, CVE-2025-21859, CVE-2025-21924, CVE-2024-57980, CVE-2024-58002, CVE-2024-58090, CVE-2025-21728, CVE-2024-58055, CVE-2024-57978, CVE-2025-21704, CVE-2025-21820, CVE-2025-21776, CVE-2025-21919, CVE-2025-21765, CVE-2025-21935, CVE-2025-21647, CVE-2025-21804, CVE-2024-58072, CVE-2025-21865, CVE-2025-21887, CVE-2024-58079, CVE-2024-58020, CVE-2024-35889, CVE-2024-58017, CVE-2024-58005, CVE-2025-21862, CVE-2025-21875, CVE-2025-21925, CVE-2025-21951, CVE-2025-21866, CVE-2025-21871, CVE-2025-21914, CVE-2025-21948, CVE-2025-21715, CVE-2025-21848, CVE-2025-21905, CVE-2025-21830, CVE-2024-58051, CVE-2025-21909, CVE-2025-21711, CVE-2025-21684, CVE-2025-21844, CVE-2025-21904, CVE-2025-21898, CVE-2025-21767, CVE-2024-58069, CVE-2024-57834, CVE-2025-21934, CVE-2025-21926, CVE-2025-21708, CVE-2025-21736, CVE-2024-58085, CVE-2024-26982, CVE-2024-58083, CVE-2025-21920, CVE-2025-21764, CVE-2025-21753, CVE-2025-21799, CVE-2025-21846, CVE-2024-57979, CVE-2025-21785, CVE-2024-58010, CVE-2024-57986, CVE-2025-21762, CVE-2025-21912, CVE-2025-21744, CVE-2025-21787, CVE-2025-21761, CVE-2025-21971, CVE-2025-21943, CVE-2024-47726, CVE-2025-21721, CVE-2025-21748, CVE-2025-21791, CVE-2025-21796, CVE-2025-21806, CVE-2025-21779, CVE-2024-58001, CVE-2025-21745, CVE-2025-21814, CVE-2025-21719, CVE-2025-21950, CVE-2025-21858, CVE-2025-21823, CVE-2025-21758, CVE-2024-57981, CVE-2024-58058, CVE-2024-56721, CVE-2025-21811, CVE-2024-58086, CVE-2025-21722, CVE-2025-21727, CVE-2025-21760, CVE-2024-58076, CVE-2025-21916, CVE-2025-21826, CVE-2024-57973, CVE-2025-21795, CVE-2025-21763, CVE-2024-58014, CVE-2025-21917, CVE-2024-57977, CVE-2024-44964, CVE-2024-58016, CVE-2024-58007, CVE-2025-21928, CVE-2024-58052, CVE-2025-21749, CVE-2025-21772, CVE-2025-21877, CVE-2025-21782, CVE-2025-21922, CVE-2025-21766, CVE-2024-58034, CVE-2025-21835, CVE-2025-21878, CVE-2025-21731, CVE-2024-58071)
Record
USN-7511-1
Updated
2026-11-02
OSVUSN-7511-2 No score

linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Network block device driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • InfiniBand drivers;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Network drivers;
  • PCI subsystem;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • RapidIO drivers;
  • Real Time Clock drivers;
  • SLIMbus drivers;
  • QCOM SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB DSL drivers;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • ACRN Hypervisor Service Module driver;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • KVM subsystem;
  • L3 Master device support module;
  • Process Accounting mechanism;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • Network traffic control;
  • Wireless networking;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module; (CVE-2024-58063, CVE-2025-21802, CVE-2025-21910, CVE-2025-21718, CVE-2025-21707, CVE-2025-21781, CVE-2025-21726, CVE-2024-56599, CVE-2025-21735, CVE-2025-21859, CVE-2025-21924, CVE-2024-57980, CVE-2024-58002, CVE-2024-58090, CVE-2025-21728, CVE-2024-58055, CVE-2024-57978, CVE-2025-21704, CVE-2025-21820, CVE-2025-21776, CVE-2025-21919, CVE-2025-21765, CVE-2025-21935, CVE-2025-21647, CVE-2025-21804, CVE-2024-58072, CVE-2025-21865, CVE-2025-21887, CVE-2024-58079, CVE-2024-58020, CVE-2024-35889, CVE-2024-58017, CVE-2024-58005, CVE-2025-21862, CVE-2025-21875, CVE-2025-21925, CVE-2025-21951, CVE-2025-21866, CVE-2025-21871, CVE-2025-21914, CVE-2025-21948, CVE-2025-21715, CVE-2025-21848, CVE-2025-21905, CVE-2025-21830, CVE-2024-58051, CVE-2025-21909, CVE-2025-21711, CVE-2025-21684, CVE-2025-21844, CVE-2025-21904, CVE-2025-21898, CVE-2025-21767, CVE-2024-58069, CVE-2024-57834, CVE-2025-21934, CVE-2025-21926, CVE-2025-21708, CVE-2025-21736, CVE-2024-58085, CVE-2024-26982, CVE-2024-58083, CVE-2025-21920, CVE-2025-21764, CVE-2025-21753, CVE-2025-21799, CVE-2025-21846, CVE-2024-57979, CVE-2025-21785, CVE-2024-58010, CVE-2024-57986, CVE-2025-21762, CVE-2025-21912, CVE-2025-21744, CVE-2025-21787, CVE-2025-21761, CVE-2025-21971, CVE-2025-21943, CVE-2024-47726, CVE-2025-21721, CVE-2025-21748, CVE-2025-21791, CVE-2025-21796, CVE-2025-21806, CVE-2025-21779, CVE-2024-58001, CVE-2025-21745, CVE-2025-21814, CVE-2025-21719, CVE-2025-21950, CVE-2025-21858, CVE-2025-21823, CVE-2025-21758, CVE-2024-57981, CVE-2024-58058, CVE-2024-56721, CVE-2025-21811, CVE-2024-58086, CVE-2025-21722, CVE-2025-21727, CVE-2025-21760, CVE-2024-58076, CVE-2025-21916, CVE-2025-21826, CVE-2024-57973, CVE-2025-21795, CVE-2025-21763, CVE-2024-58014, CVE-2025-21917, CVE-2024-57977, CVE-2024-44964, CVE-2024-58016, CVE-2024-58007, CVE-2025-21928, CVE-2024-58052, CVE-2025-21749, CVE-2025-21772, CVE-2025-21877, CVE-2025-21782, CVE-2025-21922, CVE-2025-21766, CVE-2024-58034, CVE-2025-21835, CVE-2025-21878, CVE-2025-21731, CVE-2024-58071)
Record
USN-7511-2
Updated
2026-11-02
OSVUSN-7511-3 No score

linux-gke vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Network block device driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • InfiniBand drivers;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Network drivers;
  • PCI subsystem;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • RapidIO drivers;
  • Real Time Clock drivers;
  • SLIMbus drivers;
  • QCOM SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB DSL drivers;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • ACRN Hypervisor Service Module driver;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • KVM subsystem;
  • L3 Master device support module;
  • Process Accounting mechanism;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • Network traffic control;
  • Wireless networking;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module; (CVE-2024-58002, CVE-2025-21767, CVE-2024-58051, CVE-2025-21909, CVE-2025-21866, CVE-2025-21823, CVE-2025-21922, CVE-2025-21804, CVE-2024-58069, CVE-2025-21761, CVE-2025-21799, CVE-2024-58034, CVE-2025-21826, CVE-2024-58007, CVE-2025-21948, CVE-2025-21910, CVE-2025-21748, CVE-2024-57834, CVE-2025-21926, CVE-2025-21722, CVE-2024-58072, CVE-2024-58086, CVE-2025-21914, CVE-2025-21802, CVE-2025-21916, CVE-2025-21943, CVE-2025-21830, CVE-2025-21950, CVE-2025-21736, CVE-2024-58014, CVE-2025-21785, CVE-2025-21766, CVE-2025-21878, CVE-2024-56721, CVE-2025-21707, CVE-2025-21904, CVE-2025-21782, CVE-2025-21776, CVE-2025-21726, CVE-2025-21862, CVE-2024-57986, CVE-2025-21647, CVE-2025-21887, CVE-2025-21877, CVE-2024-44964, CVE-2024-58052, CVE-2025-21796, CVE-2024-58085, CVE-2025-21934, CVE-2025-21760, CVE-2025-21924, CVE-2024-57979, CVE-2025-21875, CVE-2024-58083, CVE-2025-21811, CVE-2025-21749, CVE-2025-21814, CVE-2025-21727, CVE-2025-21715, CVE-2025-21684, CVE-2025-21917, CVE-2025-21731, CVE-2024-58016, CVE-2024-58090, CVE-2025-21865, CVE-2024-58010, CVE-2025-21719, CVE-2025-21925, CVE-2025-21846, CVE-2024-58020, CVE-2024-58017, CVE-2024-58063, CVE-2025-21844, CVE-2024-58079, CVE-2024-58055, CVE-2024-57981, CVE-2024-56599, CVE-2024-26982, CVE-2025-21835, CVE-2025-21935, CVE-2024-58005, CVE-2025-21791, CVE-2024-57977, CVE-2024-57978, CVE-2025-21806, CVE-2025-21772, CVE-2025-21859, CVE-2025-21728, CVE-2025-21781, CVE-2024-57980, CVE-2025-21744, CVE-2025-21721, CVE-2025-21718, CVE-2025-21858, CVE-2025-21704, CVE-2025-21905, CVE-2025-21951, CVE-2025-21971, CVE-2025-21848, CVE-2025-21745, CVE-2025-21928, CVE-2024-58076, CVE-2025-21763, CVE-2025-21762, CVE-2025-21919, CVE-2025-21708, CVE-2025-21795, CVE-2024-57973, CVE-2025-21753, CVE-2025-21912, CVE-2024-47726, CVE-2024-35889, CVE-2024-58071, CVE-2025-21787, CVE-2025-21871, CVE-2025-21711, CVE-2025-21765, CVE-2024-58058, CVE-2025-21898, CVE-2025-21735, CVE-2025-21758, CVE-2025-21820, CVE-2025-21779, CVE-2025-21920, CVE-2024-58001, CVE-2025-21764)
Record
USN-7511-3
Updated
2026-11-02
OSVUSN-7512-1 No score

linux-gcp-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Network block device driver;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • InfiniBand drivers;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Network drivers;
  • PCI subsystem;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • RapidIO drivers;
  • Real Time Clock drivers;
  • SLIMbus drivers;
  • QCOM SoC drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • USB DSL drivers;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • ACRN Hypervisor Service Module driver;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • KVM subsystem;
  • L3 Master device support module;
  • Netfilter;
  • Process Accounting mechanism;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • B.A.T.M.A.N. meshing protocol;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Logical Link layer;
  • Multipath TCP;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • Network traffic control;
  • Wireless networking;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module; (CVE-2025-21914, CVE-2024-58090, CVE-2024-58017, CVE-2024-58069, CVE-2025-21920, CVE-2025-21935, CVE-2024-57977, CVE-2025-21763, CVE-2025-21684, CVE-2025-21721, CVE-2025-21736, CVE-2024-58020, CVE-2025-21799, CVE-2025-21904, CVE-2025-21934, CVE-2025-21719, CVE-2025-21811, CVE-2025-21727, CVE-2024-58071, CVE-2025-21905, CVE-2024-26982, CVE-2025-21820, CVE-2024-58052, CVE-2025-21925, CVE-2025-21796, CVE-2025-21779, CVE-2025-21823, CVE-2024-58063, CVE-2025-21772, CVE-2025-21924, CVE-2025-21765, CVE-2024-56721, CVE-2025-21859, CVE-2025-21760, CVE-2025-21753, CVE-2025-21835, CVE-2025-21887, CVE-2024-58002, CVE-2024-58086, CVE-2025-21744, CVE-2025-21848, CVE-2024-57986, CVE-2025-21865, CVE-2025-21766, CVE-2025-21715, CVE-2023-52664, CVE-2025-21764, CVE-2024-58085, CVE-2025-21704, CVE-2024-58072, CVE-2024-58079, CVE-2025-21846, CVE-2025-21647, CVE-2025-21726, CVE-2024-58034, CVE-2025-21943, CVE-2025-21875, CVE-2025-21871, CVE-2025-21898, CVE-2024-58083, CVE-2025-21748, CVE-2024-57834, CVE-2024-58051, CVE-2025-21862, CVE-2025-21722, CVE-2025-21912, CVE-2025-21950, CVE-2025-21917, CVE-2024-57973, CVE-2024-56599, CVE-2025-21922, CVE-2025-21787, CVE-2025-21919, CVE-2025-21971, CVE-2024-57979, CVE-2024-35889, CVE-2025-21804, CVE-2025-21782, CVE-2025-21910, CVE-2025-21909, CVE-2025-21708, CVE-2025-21830, CVE-2025-21791, CVE-2024-58016, CVE-2025-21711, CVE-2025-21928, CVE-2024-58007, CVE-2024-58005, CVE-2023-52927, CVE-2025-21802, CVE-2024-58010, CVE-2024-58001, CVE-2024-47726, CVE-2024-57978, CVE-2024-58055, CVE-2025-21735, CVE-2025-21795, CVE-2025-21745, CVE-2025-21878, CVE-2025-21877, CVE-2025-21826, CVE-2024-58076, CVE-2025-21806, CVE-2025-21858, CVE-2025-21866, CVE-2025-21776, CVE-2025-21785, CVE-2025-21758, CVE-2024-57980, CVE-2025-21728, CVE-2024-58014, CVE-2025-21814, CVE-2025-21762, CVE-2025-21951, CVE-2025-21767, CVE-2025-21844, CVE-2025-21781, CVE-2024-58058, CVE-2025-21761, CVE-2025-21707, CVE-2025-21731, CVE-2024-44964, CVE-2025-21749, CVE-2024-57981, CVE-2025-21948, CVE-2025-21926, CVE-2025-21916, CVE-2025-21718)
Record
USN-7512-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-cross-headers
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-doc
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-headers
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules-extra-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
linux-lts
Alpaquita:23
 6.1.124-r0 up to 6.1.127-r0
6.1.127-r0
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-container
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-container-debug
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-debug
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-devel
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-headers
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
kernel-uek-tools
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
perf
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
python-perf
TuxCare:OracleLinux:7
From an advisory covering 218 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els1
5.4.17-2136.338.4.2.el7uek.tuxcare.els1
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.7.els24
7.0.0-284.1101.el9_2.tuxcare.7.els24
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 39 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els24
5.14.0-284.1101.el9_2.tuxcare.7.els24
Kernel
Linux
 before 5.4.291, 5.5.0 up to 5.10.235, 5.11.0 up to 5.15.179, 5.16.0 up to 6.1.125, 6.2.0 up to 6.6.72, 6.7.0 up to 6.12.10
5.4.2915.10.2355.15.1796.1.1256.6.726.12.10
linux
Debian:12
 before 6.1.128-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 29 moreShow less
6.1.119-16.1.123-16.1.124-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.128-1
linux
Debian:13
 before 6.12.10-1
6.12.10-1
linux
Debian:14
 before 6.12.10-1
6.12.10-1
linux-6.1
Debian:11
From an advisory covering 333 CVEs
 before 6.1.128-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1
6.1.128-1~deb11u1
linux
Debian:11
From an advisory covering 242 CVEs
 before 5.10.237-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 40 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.234-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.237-1
linux
Debian:12
From an advisory covering 60 CVEs
 before 6.1.128-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 29 moreShow less
6.1.119-16.1.123-16.1.124-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.128-1
linux-aws
Ubuntu:Pro:18.04:LTS
From an advisory covering 11 CVEs
 before 4.15.0-1189.202, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1189.202
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 11 CVEs
 before 4.15.0-1197.212, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
4.15.0-1197.212
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 11 CVEs
 before 4.15.0-1182.199, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
4.15.0-1182.199
linux
Ubuntu:Pro:18.04:LTS
From an advisory covering 11 CVEs
 before 4.15.0-247.259, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-247.259
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
From an advisory covering 11 CVEs
 before 5.4.0-224.244~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-224.244~18.04.1
linux-oracle
Ubuntu:Pro:18.04:LTS
From an advisory covering 11 CVEs
 before 4.15.0-1151.162, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
4.15.0-1151.162
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 11 CVEs
 before 5.15.0-1098.105~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1098.105~20.04.1
linux-aws
Ubuntu:Pro:20.04:LTS
From an advisory covering 11 CVEs
 before 5.4.0-1153.163, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
5.4.0-1153.163
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 11 CVEs
 before 5.15.0-1102.111~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1102.111~20.04.1
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 11 CVEs
 before 5.15.0-1098.107~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1098.107~20.04.1
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 11 CVEs
 before 5.15.0-164.174~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-164.174~20.04.1
linux-lowlatency-hwe-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 11 CVEs
 before 5.15.0-164.174~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-164.174~20.04.1
linux
Ubuntu:Pro:20.04:LTS
From an advisory covering 11 CVEs
 before 5.4.0-224.244, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-224.244
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 11 CVEs
 before 5.15.0-1092.95~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 42 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.1
5.15.0-1092.95~20.04.1
linux-oracle-5.15
Ubuntu:Pro:20.04:LTS
From an advisory covering 11 CVEs
 before 5.15.0-1095.101~20.04.1, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1
5.15.0-1095.101~20.04.1
linux-aws
Ubuntu:Pro:22.04:LTS
From an advisory covering 11 CVEs
 before 5.15.0-1098.105, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71
5.15.0-1098.105
linux-azure
Ubuntu:Pro:22.04:LTS
From an advisory covering 11 CVEs
 before 5.15.0-1102.111, plus listed versions
5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6
Show 45 moreShow less
5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1056.645.15.0-1057.655.15.0-1058.665.15.0-1059.675.15.0-1060.695.15.0-1061.705.15.0-1063.725.15.0-1064.735.15.0-1066.75
5.15.0-1102.111
linux-gcp
Ubuntu:Pro:22.04:LTS
From an advisory covering 11 CVEs
 before 5.15.0-1098.107, plus listed versions
5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7
Show 45 moreShow less
5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.245.15.0-1019.255.15.0-1021.285.15.0-1022.295.15.0-1025.325.15.0-1026.335.15.0-1027.345.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1032.405.15.0-1034.425.15.0-1035.435.15.0-1036.445.15.0-1037.455.15.0-1038.465.15.0-1039.475.15.0-1040.485.15.0-1041.495.15.0-1042.505.15.0-1044.525.15.0-1045.535.15.0-1046.545.15.0-1047.555.15.0-1048.565.15.0-1049.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1055.635.15.0-1058.665.15.0-1059.675.15.0-1060.685.15.0-1062.705.15.0-1063.715.15.0-1064.725.15.0-1065.73
5.15.0-1098.107
linux
Ubuntu:Pro:22.04:LTS
From an advisory covering 11 CVEs
 before 5.15.0-164.174, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
5.15.0-164.174
linux-oracle
Ubuntu:Pro:22.04:LTS
From an advisory covering 11 CVEs
 before 5.15.0-1095.101, plus listed versions
5.13.0-1008.105.15.0-1001.35.15.0-1002.45.15.0-1003.55.15.0-1006.8
Show 45 moreShow less
5.15.0-1007.95.15.0-1009.125.15.0-1011.155.15.0-1013.175.15.0-1016.205.15.0-1017.225.15.0-1018.235.15.0-1019.245.15.0-1021.275.15.0-1022.285.15.0-1025.315.15.0-1026.325.15.0-1027.335.15.0-1029.355.15.0-1030.365.15.0-1032.385.15.0-1033.395.15.0-1034.405.15.0-1035.415.15.0-1036.425.15.0-1037.435.15.0-1038.445.15.0-1039.455.15.0-1040.465.15.0-1041.475.15.0-1042.485.15.0-1044.505.15.0-1045.515.15.0-1046.525.15.0-1047.535.15.0-1048.545.15.0-1049.555.15.0-1050.565.15.0-1051.575.15.0-1052.585.15.0-1053.595.15.0-1054.605.15.0-1055.615.15.0-1058.645.15.0-1059.655.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70
5.15.0-1095.101
linux-aws
Ubuntu:Pro:24.04:LTS
From an advisory covering 11 CVEs
 before 6.8.0-1041.43, plus listed versions
6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8
Show 29 moreShow less
6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1023.256.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1035.376.8.0-1036.386.8.0-1038.406.8.0-1039.416.8.0-1040.42
6.8.0-1041.43
linux-azure
Ubuntu:Pro:24.04:LTS
From an advisory covering 11 CVEs
 before 6.8.0-1041.47, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6
Show 23 moreShow less
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.206.8.0-1018.216.8.0-1020.236.8.0-1021.256.8.0-1025.306.8.0-1026.316.8.0-1027.326.8.0-1028.336.8.0-1029.346.8.0-1030.356.8.0-1031.366.8.0-1034.396.8.0-1038.446.8.0-1040.46
6.8.0-1041.47
linux-gcp
Ubuntu:Pro:24.04:LTS
From an advisory covering 11 CVEs
 before 6.8.0-1042.45, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6
Show 31 moreShow less
6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1034.366.8.0-1036.386.8.0-1037.396.8.0-1039.416.8.0-1040.426.8.0-1041.43
6.8.0-1042.45
linux
Ubuntu:Pro:24.04:LTS
From an advisory covering 11 CVEs
 before 6.8.0-86.87, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 33 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.476.8.0-48.486.8.0-49.496.8.0-50.516.8.0-51.526.8.0-52.536.8.0-53.556.8.0-54.566.8.0-55.576.8.0-56.586.8.0-57.596.8.0-58.606.8.0-59.616.8.0-60.636.8.0-62.656.8.0-63.666.8.0-64.676.8.0-71.716.8.0-78.786.8.0-79.796.8.0-83.836.8.0-84.846.8.0-85.85
6.8.0-86.87
linux-ibm
Ubuntu:Pro:24.04:LTS
From an advisory covering 11 CVEs
 before 6.8.0-1039.39, plus listed versions
6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5
Show 27 moreShow less
6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.156.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1022.226.8.0-1023.236.8.0-1024.246.8.0-1025.256.8.0-1026.266.8.0-1027.276.8.0-1028.286.8.0-1029.296.8.0-1030.306.8.0-1033.336.8.0-1036.366.8.0-1037.376.8.0-1038.38
6.8.0-1039.39
linux-oracle
Ubuntu:Pro:24.04:LTS
From an advisory covering 11 CVEs
 before 6.8.0-1038.39, plus listed versions
6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.5
Show 27 moreShow less
6.8.0-1006.66.8.0-1008.86.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.196.8.0-1019.206.8.0-1020.216.8.0-1021.226.8.0-1022.236.8.0-1023.246.8.0-1024.256.8.0-1025.266.8.0-1026.276.8.0-1027.286.8.0-1028.296.8.0-1029.306.8.0-1030.316.8.0-1032.336.8.0-1033.346.8.0-1035.366.8.0-1037.38
6.8.0-1038.39
kernel
Mageia:9
From an advisory covering 202 CVEs
 before 6.6.74-1.mga9
6.6.74-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 202 CVEs
 before 7.0.24-64.mga9
7.0.24-64.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 202 CVEs
 before 3.24-70.mga9
3.24-70.mga9
dwarves
Mageia:9
From an advisory covering 202 CVEs
 before 1.29-1.mga9
1.29-1.mga9
kernel-linus
Mageia:9
From an advisory covering 202 CVEs
 before 6.6.74-1.mga9
6.6.74-1.mga9
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 18 CVEs
 before 5.10.0-250.0.0.154.oe2203sp4
5.10.0-250.0.0.154.oe2203sp4
kernel
openEuler:24.03-LTS
From an advisory covering 27 CVEs
 before 6.6.0-78.0.0.71.oe2403
6.6.0-78.0.0.71.oe2403
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 25 CVEs
 before 6.6.0-78.0.0.83.oe2403sp1
6.6.0-78.0.0.83.oe2403sp1
kernel
openEuler:22.03-LTS-SP3
From an advisory covering 18 CVEs
 before 5.10.0-250.0.0.153.oe2203sp3
5.10.0-250.0.0.153.oe2203sp3
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-doc
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-tools-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
libperf-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
perf
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
perf-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
python3-perf
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
python3-perf-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
rtla
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
rv
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-abi-stablelists
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-uki-virt
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel
Rocky Linux:10
From an advisory covering 88 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel
Rocky Linux:9
From an advisory covering 111 CVEs
 before 0:5.14.0-611.5.1.el9_7
0:5.14.0-611.5.1.el9_7
kernel-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 44 CVEs
 before 6.4.0-15061.18.coco15sp6.1
6.4.0-15061.18.coco15sp6.1
kernel-coco_debug
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 44 CVEs
 before 6.4.0-15061.18.coco15sp6.1
6.4.0-15061.18.coco15sp6.1
kernel-source-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 44 CVEs
 before 6.4.0-15061.18.coco15sp6.1
6.4.0-15061.18.coco15sp6.1
kernel-syms-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 44 CVEs
 before 6.4.0-15061.18.coco15sp6.1
6.4.0-15061.18.coco15sp6.1
kernel-default
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1.150500.6.45.1
5.14.21-150500.55.97.1.150500.6.45.1
kernel-source
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-livepatch-SLE15-SP5_Update_24
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 16 CVEs
 before 1-150500.11.3.1
1-150500.11.3.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1.150500.6.45.1
5.14.21-150500.55.97.1.150500.6.45.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1.150500.6.45.1
5.14.21-150500.55.97.1.150500.6.45.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-default
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1.150500.6.45.1
5.14.21-150500.55.97.1.150500.6.45.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-source
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1.150500.6.45.1
5.14.21-150500.55.97.1.150500.6.45.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 16 CVEs
 before 5.14.21-150500.55.97.1
5.14.21-150500.55.97.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 83 CVEs
 before 6.4.0-150600.8.31.1
6.4.0-150600.8.31.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 83 CVEs
 before 6.4.0-150600.8.31.1
6.4.0-150600.8.31.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 83 CVEs
 before 6.4.0-150600.8.31.1
6.4.0-150600.8.31.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 83 CVEs
 before 6.4.0-150600.8.31.1
6.4.0-150600.8.31.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 83 CVEs
 before 6.4.0-150600.8.31.1
6.4.0-150600.8.31.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 83 CVEs
 before 6.4.0-150600.8.31.1
6.4.0-150600.8.31.1
kernel-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 16 CVEs
 before 5.14.21-150500.13.88.1
5.14.21-150500.13.88.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 16 CVEs
 before 5.14.21-150500.13.88.1
5.14.21-150500.13.88.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2.150600.12.18.4
6.4.0-150600.23.42.2.150600.12.18.4
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-default
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2.150600.12.18.4
6.4.0-150600.23.42.2.150600.12.18.4
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
 before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 71 CVEs
 before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 71 CVEs
 before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 71 CVEs
 before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 71 CVEs
 before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1146.156~18.04.1, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
5.4.0-1146.156~18.04.1
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1151.158~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
5.4.0-1151.158~18.04.1
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1149.158~18.04.1, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
5.4.0-1149.158~18.04.1
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-216.236~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-216.236~18.04.1
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1092.97~18.04.1, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
5.4.0-1092.97~18.04.1
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1144.154~18.04.1, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
5.4.0-1144.154~18.04.1
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1129.142~18.04.1, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
5.4.0-1129.142~18.04.1
linux
Ubuntu:20.04:LTS
 before 5.4.0-216.236, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-216.236
linux-aws
Ubuntu:20.04:LTS
 before 5.4.0-1146.156, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
5.4.0-1146.156
linux-aws-5.15
Ubuntu:20.04:LTS
 before 5.15.0-1084.91~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1084.91~20.04.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-21647 is a high vulnerability (CVSS 7.3) in Linux, published January 19, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 21st percentile. Fixed in linux-lts 6.1.127-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 807 package rows, 1,180 versions, 3,390 references and the rest of 24 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 29 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open