CVE-2025-21648

netfilter: conntrack: clamp maximum hashtable size to INT_MAX

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

netfilter: conntrack: clamp maximum hashtable size to INT_MAX

Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See:

0708a0afe291 ("mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls")

Note: hashtable resize is only possible from init_netns.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.22%Up 0.2 points since Jan 20, 2025

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

netfilter: conntrack: clamp maximum hashtable size to INT_MAX

Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See:

0708a0afe291 ("mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls")

Note: hashtable resize is only possible from init_netns.

Record: CVE-2025-21648
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

CVE List No score

netfilter: conntrack: clamp maximum hashtable size to INT_MAX

In the Linux kernel, the following vulnerability has been resolved:

netfilter: conntrack: clamp maximum hashtable size to INT_MAX

Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See:

0708a0afe291 ("mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls")

Note: hashtable resize is only possible from init_netns.

Record: CVE-2025-21648
Updated: 2026-11-02

EUVDEUVD-2025-2597 No score

In the Linux kernel, the following vulnerability has been resolved:

netfilter: conntrack: clamp maximum hashtable size to INT_MAX

Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See:

0708a0afe291 ("mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls")

Note: hashtable resize is only possible from init_netns.

Record: EUVD-2025-2597
Updated: 2026-11-02

GitHub AdvisoriesGHSA-w9f5-vpqq-grqj 5.5

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: clamp...

In the Linux kernel, the following vulnerability has been resolved:

netfilter: conntrack: clamp maximum hashtable size to INT_MAX

Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See:

0708a0afe291 ("mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls")

Note: hashtable resize is only possible from init_netns.

Record: GHSA-w9f5-vpqq-grqj
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVBELL-CVE-2025-21648 5.5

Record: BELL-CVE-2025-21648
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2025-21648 5.5

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: clamp maximum hashtable size to INT_MAX Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See: 0708a0afe291 ("mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls") Note: hashtable resize is only possible from init_netns.

Record: DEBIAN-CVE-2025-21648
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 45 moreShow less

OSVOESA-2025-1158 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ila: call nf_unregister_net_hooks() sooner

syzbot found an use-after-free Read in ila_nf_input [1]

Issue here is that ila_xlat_exit_net() frees the rhashtable, then call nf_unregister_net_hooks().

It should be done in the reverse way, with a synchronize_rcu().

This is a good match for a pre_exit() method.

[1] BUG: KASAN: use-after-free in rht_key_hashfn include/linux/rhashtable.h:159 [inline] BUG: KASAN: use-after-free in __rhashtable_lookup include/linux/rhashtable.h:604 [inline] BUG: KASAN: use-after-free in rhashtable_lookup include/linux/rhashtable.h:646 [inline] BUG: KASAN: use-after-free in rhashtable_lookup_fast+0x77a/0x9b0 include/linux/rhashtable.h:672 Read of size 4 at addr ffff888064620008 by task ksoftirqd/0/16

CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-rc4-syzkaller-00238-g2ad6d23f465a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 rht_key_hashfn include/linux/rhashtable.h:159 [inline] __rhashtable_lookup include/linux/rhashtable.h:604 [inline] rhashtable_lookup include/linux/rhashtable.h:646 [inline] rhashtable_lookup_fast+0x77a/0x9b0 include/linux/rhashtable.h:672 ila_lookup_wildcards net/ipv6/ila/ila_xlat.c:132 [inline] ila_xlat_addr net/ipv6/ila/ila_xlat.c:652 [inline] ila_nf_input+0x1fe/0x3c0 net/ipv6/ila/ila_xlat.c:190 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK+0x29e/0x450 include/linux/netfilter.h:312 __netif_receive_skb_one_core net/core/dev.c:5661 [inline] __netif_receive_skb+0x1ea/0x650 net/core/dev.c:5775 process_backlog+0x662/0x15b0 net/core/dev.c:6108 __napi_poll+0xcb/0x490 net/core/dev.c:6772 napi_poll net/core/dev.c:6841 [inline] net_rx_action+0x89b/0x1240 net/core/dev.c:6963 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 run_ksoftirqd+0xca/0x130 kernel/softirq.c:928 smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK>

The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x64620 flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) page_type: 0xbfffffff(buddy) raw: 00fff00000000000 ffffea0000959608 ffffea00019d9408 0000000000000000 raw: 0000000000000000 0000000000000003 00000000bfffffff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as freed page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52dc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_ZERO), pid 5242, tgid 5242 (syz-executor), ts 73611328570, free_ts 618981657187 set_page_owner include/linux/page_owner.h:32 [inline] post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1493 prep_new_page mm/page_alloc.c:1501 [inline] get_page_from_freelist+0x2e4c/0x2f10 mm/page_alloc.c:3439 __alloc_pages_noprof+0x256/0x6c0 mm/page_alloc.c:4695 __alloc_pages_node_noprof include/linux/gfp.h:269 [inline] alloc_pages_node_noprof include/linux/gfp.h:296 [inline] ___kmalloc_large_node+0x8b/0x1d0 mm/slub.c:4103 __kmalloc_large_node_noprof+0x1a/0x80 mm/slub.c:4130 __do_kmalloc_node mm/slub.c:4146 [inline] __kmalloc_node_noprof+0x2d2/0x440 mm/slub.c:4164 __kvmalloc_node_noprof+0x72/0x190 mm/util.c:650 bucket_table_alloc lib/rhashtable.c:186 [inline] rhashtable_init_noprof+0x534/0xa60 lib/rhashtable.c:1071…

Record: OESA-2025-1158
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1159 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: wwan: t7xx: Fix FSM command timeout issue

When driver processes the internal state change command, it use an asynchronous thread to process the command operation. If the main thread detects that the task has timed out, the asynchronous thread will panic when executing the completion notification because the main thread completion object has been released.

BUG: unable to handle page fault for address: fffffffffffffff8 PGD 1f283a067 P4D 1f283a067 PUD 1f283c067 PMD 0 Oops: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:complete_all+0x3e/0xa0 [...] Call Trace: <TASK> ? __die_body+0x68/0xb0 ? page_fault_oops+0x379/0x3e0 ? exc_page_fault+0x69/0xa0 ? asm_exc_page_fault+0x22/0x30 ? complete_all+0x3e/0xa0 fsm_main_thread+0xa3/0x9c0 [mtk_t7xx (HASH:1400 5)] ? __pfx_autoremove_wake_function+0x10/0x10 kthread+0xd8/0x110 ? __pfx_fsm_main_thread+0x10/0x10 [mtk_t7xx (HASH:1400 5)] ? __pfx_kthread+0x10/0x10 ret_from_fork+0x38/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 </TASK> [...] CR2: fffffffffffffff8 ---[ end trace 0000000000000000 ]---

Use the reference counter to ensure safe release as Sergey suggests: https://lore.kernel.org/all/[email protected]/(CVE-2024-39282)

In the Linux kernel, the following vulnerability has been resolved:

i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request

Bus cleanup path in DMA mode may trigger a RING_OP_STAT interrupt when the ring is being stopped. Depending on timing between ring stop request completion, interrupt handler removal and code execution this may lead to a NULL pointer dereference in hci_dma_irq_handler() if it gets to run after the io_data pointer is set to NULL in hci_dma_cleanup().

Prevent this my masking the ring interrupts before ring stop request.(CVE-2024-45828)

In the Linux kernel, the following vulnerability has been resolved:

ethtool: fail closed if we can't get max channel used in indirection tables

Commit 0d1b7d6c9274 ("bnxt: fix crashes when reducing ring count with active RSS contexts") proves that allowing indirection table to contain channels with out of bounds IDs may lead to crashes. Currently the max channel check in the core gets skipped if driver can't fetch the indirection table or when we can't allocate memory.

Both of those conditions should be extremely rare but if they do happen we should try to be safe and fail the channel change.(CVE-2024-46834)

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change

When disabling wifi mt7921_ipv6_addr_change() is called as a notifier. At this point mvif->phy is already NULL so we cannot use it here.(CVE-2024-46860)

In the Linux kernel, the following vulnerability has been resolved:

usbnet: ipheth: do not stop RX on failing RX callback

RX callbacks can fail for multiple reasons:

Payload too short
Payload formatted incorrecly (e.g. bad NCM framing)
Lack of memory

None of these should cause the driver to seize up.

Make such failures non-critical and continue processing further incoming URBs.(CVE-2024-46861)

In the Linux kernel, the following vulnerability has been resolved:

nvme-rdma: unquiesce admin_q before destroy it

Kernel will hang on destroy admin_q while we create ctrl failed, such as following calltrace:

Record: OESA-2025-1159
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1160 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: wwan: t7xx: Fix FSM command timeout issue

Use the reference counter to ensure safe release as Sergey suggests: https://lore.kernel.org/all/[email protected]/(CVE-2024-39282)

In the Linux kernel, the following vulnerability has been resolved:

i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request

Prevent this my masking the ring interrupts before ring stop request.(CVE-2024-45828)

In the Linux kernel, the following vulnerability has been resolved:

ethtool: fail closed if we can't get max channel used in indirection tables

Both of those conditions should be extremely rare but if they do happen we should try to be safe and fail the channel change.(CVE-2024-46834)

In the Linux kernel, the following vulnerability has been resolved:

nvme-rdma: unquiesce admin_q before destroy it

Kernel will hang on destroy admin_q while we create ctrl failed, such as following calltrace:

PID: 23644 TASK: ff2d52b40f439fc0 CPU: 2 COMMAND: "nvme" #0 [ff61d23de260fb78] __schedule at ffffffff8323bc15 #1 [ff61d23de260fc08] schedule at ffffffff8323c014 #2 [ff61d23de260fc28] blk_mq_freeze_queue_wait at ffffffff82a3dba1 #3 [ff61d23de260fc78] blk_freeze_queue at ffffffff82a4113a #4 [ff61d23de260fc90] blk_cleanup_queue at ffffffff82a33006 #5 [ff61d23de260fcb0] nvme_rdma_destroy_admin_queue at ffffffffc12686ce #6 [ff61d23de260fcc8] nvme_rdma_setup_ctrl at ffffffffc1268ced #7 [ff61d23de260fd28] nvme_rdma_create_ctrl at ffffffffc126919b #8 [ff61d23de260fd68] nvmf_dev_write at ffffffffc024f362 #9 [ff61d23de260fe38] vfs_write at ffffffff827d5f25 RIP: 00007fda7891d574 RSP: 00007ffe2ef06958 RFLAGS: 00000202 RAX: ffffffffffffffda RBX: 000055e8122a4d90 RCX: 00007fda7891d574 RDX: 000000000000012b RSI: 000055e8122a4d90 RDI: 0000000000000004 RBP: 00007ffe2ef079c0 R8: 000000000000012b R9: 000055e8122a4d90 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 R13: 000055e8122923c0 R14: 000000000000012b R15: 00007fda78a54500 ORIG_RAX: 0000000000000001 CS: 0033 SS: 002b

This due to we have…

Record: OESA-2025-1160
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1161 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ceph: prevent use-after-free in encode_cap_msg()

In fs/ceph/caps.c, in encode_cap_msg(), "use after free" error was caught by KASAN at this line - 'ceph_buffer_get(arg->xattr_buf);'. This implies before the refcount could be increment here, it was freed.

In same file, in "handle_cap_grant()" refcount is decremented by this line - 'ceph_buffer_put(ci->i_xattrs.blob);'. It appears that a race occurred and resource was freed by the latter line before the former line could increment it.

encode_cap_msg() is called by __send_cap() and __send_cap() is called by ceph_check_caps() after calling __prep_cap(). __prep_cap() is where arg->xattr_buf is assigned to ci->i_xattrs.blob. This is the spot where the refcount must be increased to prevent "use after free" error.(CVE-2024-26689)

In the Linux kernel, the following vulnerability has been resolved:

xsk: fix OOB map writes when deleting elements

Jordy says:

" In the xsk_map_delete_elem function an unsigned integer (map->max_entries) is compared with a user-controlled signed integer (k). Due to implicit type conversion, a large unsigned value for map->max_entries can bypass the intended bounds check:

if (k &gt;= map-&gt;max_entries)
	return -EINVAL;

This allows k to hold a negative value (between -2147483648 and -2), which is then used as an array index in m->xsk_map[k], which results in an out-of-bounds access.

spin_lock_bh(&amp;m-&gt;lock);
map_entry = &amp;m-&gt;xsk_map[k]; // Out-of-bounds map_entry
old_xs = unrcu_pointer(xchg(map_entry, NULL));  // Oob write
if (old_xs)
	xsk_map_sock_delete(old_xs, map_entry);
spin_unlock_bh(&amp;m-&gt;lock);

The xchg operation can then be used to cause an out-of-bounds write. Moreover, the invalid map_entry passed to xsk_map_sock_delete can lead to further memory corruption. "

It indeed results in following splat:

[76612.897343] BUG: unable to handle page fault for address: ffffc8fc2e461108 [76612.904330] #PF: supervisor write access in kernel mode [76612.909639] #PF: error_code(0x0002) - not-present page [76612.914855] PGD 0 P4D 0 [76612.917431] Oops: Oops: 0002 [#1] PREEMPT SMP [76612.921859] CPU: 11 UID: 0 PID: 10318 Comm: a.out Not tainted 6.12.0-rc1+ #470 [76612.929189] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019 [76612.939781] RIP: 0010:xsk_map_delete_elem+0x2d/0x60 [76612.944738] Code: 00 00 41 54 55 53 48 63 2e 3b 6f 24 73 38 4c 8d a7 f8 00 00 00 48 89 fb 4c 89 e7 e8 2d bf 05 00 48 8d b4 eb 00 01 00 00 31 ff <48> 87 3e 48 85 ff 74 05 e8 16 ff ff ff 4c 89 e7 e8 3e bc 05 00 31 [76612.963774] RSP: 0018:ffffc9002e407df8 EFLAGS: 00010246 [76612.969079] RAX: 0000000000000000 RBX: ffffc9002e461000 RCX: 0000000000000000 [76612.976323] RDX: 0000000000000001 RSI: ffffc8fc2e461108 RDI: 0000000000000000 [76612.983569] RBP: ffffffff80000001 R08: 0000000000000000 R09: 0000000000000007 [76612.990812] R10: ffffc9002e407e18 R11: ffff888108a38858 R12: ffffc9002e4610f8 [76612.998060] R13: ffff888108a38858 R14: 00007ffd1ae0ac78 R15: ffffc9002e4610c0 [76613.005303] FS: 00007f80b6f59740(0000) GS:ffff8897e0ec0000(0000) knlGS:0000000000000000 [76613.013517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [76613.019349] CR2: ffffc8fc2e461108 CR3: 000000011e3ef001 CR4: 00000000007726f0 [76613.026595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [76613.033841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [76613.041086] PKRU: 55555554 [76613.043842] Call Trace: [76613.046331] <TASK> [76613.048468] ? __die+0x20/0x60 [76613.051581] ? page_fault_oops+0x15a/0x450 [76613.055747] ? search_extable+0x22/0x30 [76613.059649] ? search_bpf_extables+0x5f/0x80 [76613.063988] ? exc_page_fault+0xa9/0x140 [76613.067975] ?…

Record: OESA-2025-1161
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1162 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ila: call nf_unregister_net_hooks() sooner

syzbot found an use-after-free Read in ila_nf_input [1]

Issue here is that ila_xlat_exit_net() frees the rhashtable, then call nf_unregister_net_hooks().

It should be done in the reverse way, with a synchronize_rcu().

This is a good match for a pre_exit() method.

Record: OESA-2025-1162
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:20518 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:20518
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:34094 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2026:34094
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2025:20518 7.8

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830)
kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689)
kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744)
kernel: vfs: fix race between evice_inodes() and find_inode()&iput() (CVE-2024-47679)
kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727)
kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864)
kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060)
kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024)
kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195)
kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294)
kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052)
kernel: afs: Fix lock recursion (CVE-2024-53090)
kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)
kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)
kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229)
kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170)
kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)
kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)
kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709)
kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)
kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786)
kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)
kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)
kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)
kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672)
kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
kernel: usbnet: fix memory leak in error case (CVE-2022-49657)
kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432)
kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672)
kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353)
kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437)
kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627)
kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670)
kernel: can: isotp: sanitize CAN ID checks in isotp_bind() (CVE-2022-49269)
kernel:…

Record: RLSA-2025:20518
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-21648 5.5

Record: UBUNTU-CVE-2025-21648
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVALSA-2025:20518 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830)
kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689)
kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744)
kernel: vfs: fix race between evice_inodes() and find_inode()&iput() (CVE-2024-47679)
kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727)
kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864)
kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060)
kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024)
kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195)
kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294)
kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052)
kernel: afs: Fix lock recursion (CVE-2024-53090)
kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)
kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)
kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229)
kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170)
kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)
kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)
kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709)
kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)
kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786)
kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)
kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)
kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)
kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672)
kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
kernel: usbnet: fix memory leak in error case (CVE-2022-49657)
kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432)
kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672)
kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353)
kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437)
kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627)
kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670)
kernel: can: isotp: sanitize CAN ID…

Record: ALSA-2025:20518
Updated: 2026-11-02

OSVCLSA-2026-1778787063 No score

kernel: Fix of 123 CVEs

net: skbuff: propagate shared-frag marker through pskb_copy()
mptcp: always handle address removal under msk socket lock {CVE-2025-21875}
uprobes: Reject the shared zeropage in uprobe_write_opcode() {CVE-2025-21881}
net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error {CVE-2025-21924}
wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() {CVE-2025-21744}
mptcp: fix NULL pointer in can_accept_new_subflow {CVE-2025-23145}
bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock {CVE-2025-21951}
blk-cgroup: Fix class @block_class's subsystem refcount leakage {CVE-2025-21745}
net/mlx5: handle errors in mlx5_chains_create_table() {CVE-2025-21975}
USB: hub: Ignore non-compliant devices with too many configs or interfaces {CVE-2025-21776}
wifi: iwlwifi: don't warn when if there is a FW error {CVE-2025-38096}
ice: fix memory leak in aRFS after reset {CVE-2025-21981}
KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel {CVE-2025-21779}
Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken {CVE-2025-38099}
regulator: check that dummy regulator has been probed before using it {CVE-2025-22008}
acpi: nfit: fix narrowing conversion in acpi_nfit_ctl {CVE-2025-22044}
drm/scheduler: signal scheduled fence when kill job {CVE-2025-38436}
nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request {CVE-2025-38430}
net: decrease cached dst counters in dst_release {CVE-2025-22057}
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT {CVE-2025-38439}
net: fix NULL pointer dereference in l3mdev_l3_rcv {CVE-2025-22103}
dlm: prevent NPD when writing a positive value to event_done {CVE-2025-23131}
drm/amd/display: fix a Null pointer dereference vulnerability {CVE-2025-39705}
net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree {CVE-2025-38468}
drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params {CVE-2025-21941}
drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities {CVE-2025-39707}
HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948}
usb: net: sierra: check for no status endpoint {CVE-2025-38474}
drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() {CVE-2025-21996}
wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() {CVE-2025-38643}
netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets {CVE-2025-22063}
vxlan: Fix NPD when refreshing an FDB entry with a nexthop object {CVE-2025-39851}
thermal: int340x: Add NULL check for adev {CVE-2025-23136}
Bluetooth: l2cap: Check encryption key size on incoming connection {CVE-2025-39889}
dm thin: make get_first_thin use rcu-safe list first function {CVE-2025-21664}
tracing: Add down_write(trace_event_sem) when adding trace event {CVE-2025-38539}
usbnet: Fix using smp_processor_id() in preemptible code warnings {CVE-2025-40164}
bpf: Send signals asynchronously if !preemptible {CVE-2025-21728}
ima: Fix a potential integer overflow in ima_appraise_measurement {CVE-2022-49643}
dm-stripe: fix a possible integer overflow {CVE-2025-39940}
usbnet: gl620a: fix endpoint checking in genelink_bind() {CVE-2025-21877}
fs: dlm: fix use after free in midcomms commit {CVE-2023-53629}
usbnet: fix memory leak in error case {CVE-2022-49657}
wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
can: j1939: j1939_send_one(): fix missing CAN header initialization {CVE-2022-49845}
ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
posix-clock: Fix missing timespec64 check in pc_clock_settime() {CVE-2024-50195}
net_sched: Prevent creation of classes with TC_H_ROOT {CVE-2025-21971}
mm/slub: avoid accessing metadata when pointer is invalid in object_err() {CVE-2025-39902}
RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow…

Record: CLSA-2026-1778787063
Updated: 2026-11-02

OSV No score

netfilter: conntrack: clamp maximum hashtable size to INT_MAX

In the Linux kernel, the following vulnerability has been resolved:

netfilter: conntrack: clamp maximum hashtable size to INT_MAX

Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See:

0708a0afe291 ("mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls")

Note: hashtable resize is only possible from init_netns.

Record: CVE-2025-21648
Updated: 2026-11-02

OSVMGASA-2025-0030 No score

Updated kernel, kmod-virtualbox, kmod-xtables-addons & dwarves packages fix security vulnerabilities

Upstream kernel version 6.6.74 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record: MGASA-2025-0030
Updated: 2026-11-02

OSVMGASA-2025-0032 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.74 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2025-0032
Updated: 2026-11-02

OSVSUSE-SU-2025:01919-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-43869: perf: Fix hang while freeing sigtrap event (bsc#1229491).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086). -…

Record: SUSE-SU-2025:01919-1
Updated: 2026-11-02

OSVSUSE-SU-2025:01951-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). -…

Record: SUSE-SU-2025:01951-1
Updated: 2026-11-02

OSVSUSE-SU-2025:01964-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
CVE-2025-21894: net: enetc: VFs do not…

Record: SUSE-SU-2025:01964-1
Updated: 2026-11-02

OSVSUSE-SU-2025:01965-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593).
CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376).
CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
CVE-2025-22057: net: decrease cached dst counters in dst_release (bsc#1241533).
CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305).
CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448).
CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (bsc#1242763).
CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (bsc#1242507).
CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523).
CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung (bsc#1242859).
CVE-2025-37750: smb: client: fix UAF in decryption with multichannel (bsc#1242510).
CVE-2025-37755: net: libwx: handle page_pool_dev_alloc_pages error (bsc#1242506).
CVE-2025-37773: virtiofs: add filesystem context source name check (bsc#1242502).
CVE-2025-37780: isofs: Prevent the use of too small fid (bsc#1242786).
CVE-2025-37787: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered (bsc#1242585).
CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762).
CVE-2025-37790: net: mctp: Set SOCK_RCU_FREE (bsc#1242509).
CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
CVE-2025-37803: udmabuf: fix a buf size overflow issue during udmabuf creation (bsc#1242852).
CVE-2025-37804: io_uring: always do atomic put from iowq (bsc#1242854).
CVE-2025-37809: usb: typec: class: Unlocked on error in typec_register_partner() (bsc#1242856).
CVE-2025-37820: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (bsc#1242866).
CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
CVE-2025-37824: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (bsc#1242867).
CVE-2025-37829: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (bsc#1242875).
CVE-2025-37830: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (bsc#1242860).
CVE-2025-37831: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (bsc#1242861).
CVE-2025-37833: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (bsc#1242868).
CVE-2025-37842: spi: fsl-qspi: Fix double cleanup in probe error path (bsc#1242951).
CVE-2025-37870: drm/amd/display: prevent hang on link training fail…

Record: SUSE-SU-2025:01965-1
Updated: 2026-11-02

OSVSUSE-SU-2025:01967-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). -…

Record: SUSE-SU-2025:01967-1
Updated: 2026-11-02

OSVSUSE-SU-2025:01972-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593).
CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376).
CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
CVE-2025-22057: net: decrease cached dst counters in dst_release (bsc#1241533).
CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305).
CVE-2025-22094: powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu' (bsc#1241512).
CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456).
CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448).
CVE-2025-22104: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550).
CVE-2025-22107: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() (bsc#1241575).
CVE-2025-22109: ax25: Remove broken autobind (bsc#1241573).
CVE-2025-23138: watch_queue: fix pipe accounting mismatch (bsc#1241648).
CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (bsc#1242763).
CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242596).
CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
CVE-2025-23154: io_uring/net: fix io_req_post_cqe abuse by send bundle (bsc#1242533).
CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (bsc#1242507).
CVE-2025-37747: kABI workaround for perf-Fix-hang-while-freeing-sigtrap-event (References: bsc#1242520).
CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523).
CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung…

Record: SUSE-SU-2025:01972-1
Updated: 2026-11-02

OSVSUSE-SU-2025:01983-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47670: can: peak_usb: fix use after free bugs (bsc#1241407).
CVE-2022-49139: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (bsc#1238032).
CVE-2022-49145: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data (bsc#1238162).
CVE-2022-49168: btrfs: do not clean up repair bio if submit fails (bsc#1238109).
CVE-2022-49190: kernel/resource: fix kfree() of bootmem memory again (bsc#1238130).
CVE-2022-49212: mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init (bsc#1238331).
CVE-2022-49216: drm/tegra: Fix reference leak in tegra_dsi_ganged_probe (bsc#1238338).
CVE-2022-49235: ath9k_htc: fix uninit value bugs (bsc#1238333).
CVE-2022-49248: ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction (bsc#1238284).
CVE-2022-49253: media: usb: go7007: s2250-board: fix leak in probe() (bsc#1238420).
CVE-2022-49320: dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type (bsc#1238394).
CVE-2022-49326: rtl818x: Prevent using not initialized queues (bsc#1238646).
CVE-2022-49371: driver core: fix deadlock in __device_attach (bsc#1238546).
CVE-2022-49382: soc: rockchip: Fix refcount leak in rockchip_grf_init (bsc#1238306).
CVE-2022-49396: phy: qcom-qmp: fix reset-controller leak on probe errors (bsc#1238289).
CVE-2022-49420: net: annotate races around sk->sk_bound_dev_if (bsc#1238887).
CVE-2022-49441: tty: fix deadlock caused by calling printk() under tty_port->lock (bsc#1238263).
CVE-2022-49445: pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() (bsc#1238019).
CVE-2022-49460: PM / devfreq: rk3399_dmc: Disable edev on remove() (bsc#1238892).
CVE-2022-49467: drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() (bsc#1238815).
CVE-2022-49474: Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout (bsc#1238071).
CVE-2022-49491: drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() (bsc#1238539).
CVE-2022-49503: ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix (bsc#1238868).
CVE-2022-49592: net: stmmac: fix dma queue left shift overflow issue (bsc#1238311).
CVE-2022-49625: sfc: fix kernel panic when creating VF (bsc#1238411).
CVE-2022-49635: drm/i915/selftests: fix subtraction overflow bug (bsc#1238806).
CVE-2022-49652: dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate (bsc#1238871).
CVE-2022-49715: irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions (bsc#1238818).
CVE-2022-49728: kABI workaround for changeing the variable length type to size_t (bsc#1239111).
CVE-2022-49729: nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred (bsc#1239060).
CVE-2022-49751: w1: fix WARNING after calling w1_process() (bsc#1240254).
CVE-2022-49761: btrfs: always report error in run_one_delayed_ref() (bsc#1240261).
CVE-2022-49772: ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (bsc#1242147).
CVE-2022-49775: tcp: cdg: allow tcp_cdg_release() to be called multiple times (bsc#1242245).
CVE-2022-49776: macvlan: enforce a consistent minimal mtu (bsc#1242248).
CVE-2022-49787: mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (bsc#1242352).
CVE-2022-49788: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (bsc#1242353).
CVE-2022-49813: net: ena: Fix error handling in ena_init() (bsc#1242497).
CVE-2022-49821: mISDN: fix possible memory leak in mISDN_dsp_element_register() (bsc#1242542).
CVE-2022-49826: ata: libata-transport: fix double ata_host_put() in ata_tport_add() (bsc#1242549).
CVE-2022-49829: drm/scheduler: fix fence ref counting (bsc#1242691).
CVE-2022-49832: pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (bsc#1242154).
CVE-2022-49835: ALSA: hda: fix potential memleak in…

Record: SUSE-SU-2025:01983-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02000-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593).
CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376).
CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
CVE-2025-22057: net: decrease cached dst counters in dst_release (bsc#1241533).
CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305).
CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448).
CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (bsc#1242763).
CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (bsc#1242507).
CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523).
CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung (bsc#1242859).
CVE-2025-37750: smb: client: fix UAF in decryption with multichannel (bsc#1242510).
CVE-2025-37755: net: libwx: handle page_pool_dev_alloc_pages error (bsc#1242506).
CVE-2025-37773: virtiofs: add filesystem context source name check (bsc#1242502).
CVE-2025-37780: isofs: Prevent the use of too small fid (bsc#1242786).
CVE-2025-37787: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered (bsc#1242585).
CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762).
CVE-2025-37790: net: mctp: Set SOCK_RCU_FREE (bsc#1242509).
CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
CVE-2025-37803: udmabuf: fix a buf size overflow issue during udmabuf creation (bsc#1242852).
CVE-2025-37804: io_uring: always do atomic put from iowq (bsc#1242854).
CVE-2025-37809: usb: typec: class: Unlocked on error in typec_register_partner() (bsc#1242856).
CVE-2025-37820: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (bsc#1242866).
CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
CVE-2025-37824: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (bsc#1242867).
CVE-2025-37829: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (bsc#1242875).
CVE-2025-37830: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (bsc#1242860).
CVE-2025-37831: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (bsc#1242861).
CVE-2025-37833: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (bsc#1242868).
CVE-2025-37842: spi: fsl-qspi: Fix double cleanup in probe error path (bsc#1242951).
CVE-2025-37870: drm/amd/display: prevent hang on link training fail…

Record: SUSE-SU-2025:02000-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20408-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593).
CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376).
CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
CVE-2025-22057: net: decrease cached dst counters in dst_release (bsc#1241533).
CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305).
CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448).
CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (bsc#1242763).
CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (bsc#1242507).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523).
CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung (bsc#1242859).
CVE-2025-37750: smb: client: fix UAF in decryption with multichannel (bsc#1242510).
CVE-2025-37755: net: libwx: handle page_pool_dev_alloc_pages error (bsc#1242506).
CVE-2025-37773: virtiofs: add filesystem context source name check (bsc#1242502).
CVE-2025-37780: isofs: Prevent the use of too small fid (bsc#1242786).
CVE-2025-37787: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered (bsc#1242585).
CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762).
CVE-2025-37790: net: mctp: Set SOCK_RCU_FREE (bsc#1242509).
CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37803: udmabuf: fix a buf size overflow issue during udmabuf creation (bsc#1242852).
CVE-2025-37804: io_uring: always do atomic put from iowq (bsc#1242854).
CVE-2025-37809: usb: typec: class: Unlocked on error in typec_register_partner() (bsc#1242856).
CVE-2025-37820: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (bsc#1242866).
CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
CVE-2025-37824: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (bsc#1242867).
CVE-2025-37829: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (bsc#1242875).
CVE-2025-37830: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (bsc#1242860).
CVE-2025-37831: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (bsc#1242861).
CVE-2025-37833: net/niu: Niu requires MSIX ENTRY_DATA…

Record: SUSE-SU-2025:20408-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20413-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376).
CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
CVE-2025-22057: net: decrease cached dst counters in dst_release (bsc#1241533).
CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305).
CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (bsc#1242763).
CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (bsc#1242507).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523).
CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung (bsc#1242859).
CVE-2025-37750: smb: client: fix UAF in decryption with multichannel (bsc#1242510).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37755: net: libwx: handle page_pool_dev_alloc_pages error (bsc#1242506).
CVE-2025-37773: virtiofs: add filesystem context source name check (bsc#1242502).
CVE-2025-37780: isofs: Prevent the use of too small fid (bsc#1242786).
CVE-2025-37787: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered (bsc#1242585).
CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762).
CVE-2025-37790: net: mctp: Set SOCK_RCU_FREE (bsc#1242509).
CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
CVE-2025-37803: udmabuf: fix a buf size overflow issue during udmabuf creation (bsc#1242852).
CVE-2025-37804: io_uring: always do…

Record: SUSE-SU-2025:20413-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20419-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593).
CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376).
CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
CVE-2025-22057: net: decrease cached dst counters in dst_release (bsc#1241533).
CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305).
CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448).
CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (bsc#1242763).
CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (bsc#1242507).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523).
CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung (bsc#1242859).
CVE-2025-37750: smb: client: fix UAF in decryption with multichannel (bsc#1242510).
CVE-2025-37755: net: libwx: handle page_pool_dev_alloc_pages error (bsc#1242506).
CVE-2025-37773: virtiofs: add filesystem context source name check (bsc#1242502).
CVE-2025-37780: isofs: Prevent the use of too small fid (bsc#1242786).
CVE-2025-37787: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered (bsc#1242585).
CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762).
CVE-2025-37790: net: mctp: Set SOCK_RCU_FREE (bsc#1242509).
CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37803: udmabuf: fix a buf size overflow issue during udmabuf creation (bsc#1242852).
CVE-2025-37804: io_uring: always do atomic put from iowq (bsc#1242854).
CVE-2025-37809: usb: typec: class: Unlocked on error in typec_register_partner() (bsc#1242856).
CVE-2025-37820: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (bsc#1242866).
CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
CVE-2025-37824: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (bsc#1242867).
CVE-2025-37829: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (bsc#1242875).
CVE-2025-37830: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (bsc#1242860).
CVE-2025-37831: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (bsc#1242861).
CVE-2025-37833: net/niu: Niu requires MSIX ENTRY_DATA…

Record: SUSE-SU-2025:20419-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20421-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376).
CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
CVE-2025-22057: net: decrease cached dst counters in dst_release (bsc#1241533).
CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305).
CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (bsc#1242763).
CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (bsc#1242507).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523).
CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung (bsc#1242859).
CVE-2025-37750: smb: client: fix UAF in decryption with multichannel (bsc#1242510).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37755: net: libwx: handle page_pool_dev_alloc_pages error (bsc#1242506).
CVE-2025-37773: virtiofs: add filesystem context source name check (bsc#1242502).
CVE-2025-37780: isofs: Prevent the use of too small fid (bsc#1242786).
CVE-2025-37787: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered (bsc#1242585).
CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762).
CVE-2025-37790: net: mctp: Set SOCK_RCU_FREE (bsc#1242509).
CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
CVE-2025-37803: udmabuf: fix a buf size overflow issue during udmabuf creation (bsc#1242852).
CVE-2025-37804: io_uring: always do…

Record: SUSE-SU-2025:20421-1
Updated: 2026-11-02

OSVUSN-7379-1 No score

linux, linux-aws, linux-azure, linux-gcp, linux-hwe-6.11, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Ublk userspace block driver;
Virtio block driver;
Bluetooth drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Microchip PCI driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
i.MX SoC drivers;
SPI subsystem;
UFS subsystem;
USB Gadget drivers;
TDX Guest driver;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
Overlay file system;
Diskquota system;
SMB network file system;
DRM display driver;
BPF subsystem;
VLANs driver;
KASAN memory debugging framework;
Memory management;
StackDepot library;
Bluetooth subsystem;
LAPB network protocol;
Netfilter;
io_uring subsystem;
Control group (cgroup);
DMA mapping infrastructure;
KCSAN framework;
Scheduler infrastructure;
Seccomp subsystem;
Tracing infrastructure;
Workqueue subsystem;
KUnit library;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
NET/ROM layer;
Packet sockets;
RDS protocol;
Network traffic control;
SCTP protocol;
SMC sockets;
TIPC protocol;
Wireless networking;
eXpress Data Path;
SELinux security module;
ALSA framework;
Intel ASoC drivers;
SOF drivers; (CVE-2024-57921, CVE-2024-56614, CVE-2024-56558, CVE-2024-56589, CVE-2024-56662, CVE-2024-56610, CVE-2024-56717, CVE-2024-57890, CVE-2024-55639, CVE-2024-56562, CVE-2025-21633, CVE-2024-56598, CVE-2024-47794, CVE-2024-41935, CVE-2024-57901, CVE-2024-56587, CVE-2024-56581, CVE-2024-56783, CVE-2024-57888, CVE-2024-57809, CVE-2024-57926, CVE-2025-21650, CVE-2024-56634, CVE-2025-21639, CVE-2025-21656, CVE-2024-56578, CVE-2025-21632, CVE-2024-56784, CVE-2025-21644, CVE-2024-56776, CVE-2024-56764, CVE-2024-56652, CVE-2024-56550, CVE-2024-56569, CVE-2024-57904, CVE-2024-49569, CVE-2024-56770, CVE-2024-56606, CVE-2024-57806, CVE-2024-56646, CVE-2024-57895, CVE-2024-57880, CVE-2024-56650, CVE-2024-56591, CVE-2024-56590, CVE-2024-56642, CVE-2024-56713, CVE-2025-21663, CVE-2024-57938, CVE-2024-56760, CVE-2024-56583, CVE-2025-21662, CVE-2024-56629, CVE-2024-47408, CVE-2024-57850, CVE-2024-56777, CVE-2024-56626, CVE-2024-56773, CVE-2024-56647, CVE-2025-21664, CVE-2024-56564, CVE-2024-56597, CVE-2024-56623, CVE-2024-57897, CVE-2024-56670, CVE-2024-56567, CVE-2024-57931, CVE-2024-56761, CVE-2024-57935, CVE-2024-53690, CVE-2025-21640, CVE-2024-56608, CVE-2024-57878, CVE-2025-21648, CVE-2024-57898, CVE-2024-57889, CVE-2024-56644, CVE-2024-56763, CVE-2024-57900,…

Record: USN-7379-1
Updated: 2026-11-02

OSVUSN-7381-1 No score

linux-lowlatency-hwe-6.11 vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Ublk userspace block driver;
Virtio block driver;
Bluetooth drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Microchip PCI driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
i.MX SoC drivers;
SPI subsystem;
UFS subsystem;
USB Gadget drivers;
TDX Guest driver;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
Overlay file system;
Diskquota system;
SMB network file system;
DRM display driver;
BPF subsystem;
VLANs driver;
KASAN memory debugging framework;
Memory management;
StackDepot library;
Bluetooth subsystem;
LAPB network protocol;
Network namespace;
Netfilter;
io_uring subsystem;
Control group (cgroup);
DMA mapping infrastructure;
KCSAN framework;
Scheduler infrastructure;
Seccomp subsystem;
Tracing infrastructure;
Workqueue subsystem;
KUnit library;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
NET/ROM layer;
Packet sockets;
RDS protocol;
Network traffic control;
SCTP protocol;
SMC sockets;
TIPC protocol;
Wireless networking;
eXpress Data Path;
SELinux security module;
ALSA framework;
Intel ASoC drivers;
SOF drivers; (CVE-2024-56712, CVE-2024-56761, CVE-2025-21661, CVE-2024-56565, CVE-2024-57804, CVE-2024-57887, CVE-2025-21642, CVE-2024-56779, CVE-2025-21656, CVE-2024-57890, CVE-2024-36476, CVE-2024-57843, CVE-2024-56594, CVE-2024-41932, CVE-2025-21653, CVE-2024-56567, CVE-2024-56665, CVE-2024-54191, CVE-2024-57893, CVE-2024-57932, CVE-2024-56656, CVE-2024-57945, CVE-2024-57931, CVE-2024-56599, CVE-2024-57897, CVE-2024-57903, CVE-2024-57918, CVE-2024-57795, CVE-2024-56662, CVE-2025-21639, CVE-2024-55881, CVE-2024-57889, CVE-2024-57884, CVE-2024-57934, CVE-2024-39282, CVE-2024-56718, CVE-2024-56644, CVE-2024-56760, CVE-2024-43098, CVE-2024-47143, CVE-2024-55642, CVE-2024-56634, CVE-2024-56564, CVE-2024-56768, CVE-2024-56649, CVE-2024-57919, CVE-2024-56620, CVE-2024-56625, CVE-2024-56655, CVE-2024-56772, CVE-2025-21637, CVE-2024-56617, CVE-2024-57879, CVE-2024-56715, CVE-2024-56550, CVE-2024-50051, CVE-2024-56673, CVE-2024-51729, CVE-2025-21664,…

Record: USN-7381-1
Updated: 2026-11-02

OSVUSN-7382-1 No score

linux-oem-6.11 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Ublk userspace block driver;
Virtio block driver;
Bluetooth drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Microchip PCI driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVME drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
i.MX SoC drivers;
SPI subsystem;
UFS subsystem;
USB Gadget drivers;
TDX Guest driver;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
JFFS2 file system;
JFS file system;
Network file systems library;
Network file system (NFS) server daemon;
NILFS2 file system;
File system notification infrastructure;
Overlay file system;
Diskquota system;
SMB network file system;
DRM display driver;
BPF subsystem;
VLANs driver;
KASAN memory debugging framework;
Memory management;
StackDepot library;
Bluetooth subsystem;
LAPB network protocol;
Netfilter;
io_uring subsystem;
Control group (cgroup);
DMA mapping infrastructure;
KCSAN framework;
Scheduler infrastructure;
Seccomp subsystem;
Tracing infrastructure;
Workqueue subsystem;
KUnit library;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
NET/ROM layer;
Packet sockets;
RDS protocol;
Network traffic control;
SCTP protocol;
SMC sockets;
TIPC protocol;
Wireless networking;
eXpress Data Path;
SELinux security module;
ALSA framework;
Intel ASoC drivers;
SOF drivers; (CVE-2024-47794, CVE-2025-21653, CVE-2024-55642, CVE-2024-56580, CVE-2024-36476, CVE-2024-56623, CVE-2024-56773, CVE-2024-48873, CVE-2024-47141, CVE-2024-57910, CVE-2024-56759, CVE-2024-54460, CVE-2024-57839, CVE-2024-56625, CVE-2024-55916, CVE-2025-21664, CVE-2025-21652, CVE-2024-56624, CVE-2024-56574, CVE-2024-50051, CVE-2025-21655, CVE-2024-56578, CVE-2024-56782, CVE-2024-57939, CVE-2024-57935, CVE-2024-56647, CVE-2024-57905, CVE-2024-57921, CVE-2024-56660, CVE-2025-21650, CVE-2025-21631, CVE-2024-56642, CVE-2024-56552, CVE-2024-57934, CVE-2024-56621, CVE-2024-57881, CVE-2024-41932, CVE-2024-56770, CVE-2024-57897, CVE-2024-56785, CVE-2024-56664, CVE-2024-57945, CVE-2024-57938, CVE-2024-56636, CVE-2024-56572, CVE-2024-43098, CVE-2024-56760, CVE-2024-57916, CVE-2024-56714, CVE-2025-21660, CVE-2024-57906, CVE-2025-21638, CVE-2024-53687, CVE-2024-56652, CVE-2024-51729, CVE-2024-49571, CVE-2024-57883, CVE-2024-54191, CVE-2024-56712, CVE-2024-49568, CVE-2024-57932, CVE-2024-57893, CVE-2024-56645, CVE-2024-56719, CVE-2024-56641, CVE-2024-57802, CVE-2024-56775, CVE-2024-56627, CVE-2024-56638, CVE-2024-57929, CVE-2024-56615, CVE-2024-56566, CVE-2024-56620, CVE-2024-56577, CVE-2025-21656, CVE-2024-57887, CVE-2024-52319, CVE-2024-56657, CVE-2024-57872,…

Record: USN-7382-1
Updated: 2026-11-02

OSVUSN-7387-1 No score

linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-intel-iotg, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Media staging drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
Kernel init infrastructure;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Memory management;
9P file system network protocol;
Bluetooth subsystem;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
SELinux security module;
ALSA framework;
USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142, CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237, CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574, CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688, CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226, CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690, CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901, CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998, CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315, CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569, CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571,…

Record: USN-7387-1
Updated: 2026-11-02

OSVUSN-7387-2 No score

linux-fips, linux-aws-fips, linux-azure-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Media staging drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
Kernel init infrastructure;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Memory management;
9P file system network protocol;
Bluetooth subsystem;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
SELinux security module;
ALSA framework;
USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142, CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237, CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574, CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688, CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226, CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690, CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901, CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998, CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315, CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569, CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571,…

Record: USN-7387-2
Updated: 2026-11-02

OSVUSN-7387-3 No score

linux-realtime, linux-intel-iot-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Media staging drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
Kernel init infrastructure;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Memory management;
9P file system network protocol;
Bluetooth subsystem;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
SELinux security module;
ALSA framework;
USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142, CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237, CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574, CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688, CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226, CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690, CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901, CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998, CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315, CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569, CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571,…

Record: USN-7387-3
Updated: 2026-11-02

OSVUSN-7388-1 No score

linux-aws-5.15, linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
TTY drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Closures library;
Memory management;
9P file system network protocol;
Amateur Radio drivers;
Bluetooth subsystem;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
XFRM subsystem;
Key management;
SELinux security module;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
QCOM ASoC drivers;
STMicroelectronics SoC drivers;
USB sound devices;
KVM core; (CVE-2024-56622, CVE-2024-42252, CVE-2024-53101, CVE-2025-21664, CVE-2024-50168, CVE-2024-53214, CVE-2024-56670,…

Record: USN-7388-1
Updated: 2026-11-02

OSVUSN-7389-1 No score

linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
TTY drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Closures library;
Memory management;
9P file system network protocol;
Amateur Radio drivers;
Bluetooth subsystem;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
XFRM subsystem;
Key management;
SELinux security module;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
QCOM ASoC drivers;
STMicroelectronics SoC drivers;
USB sound devices;
KVM core; (CVE-2025-21640, CVE-2024-56625, CVE-2024-53104, CVE-2024-53055, CVE-2024-26718, CVE-2024-53180, CVE-2024-50257,…

Record: USN-7389-1
Updated: 2026-11-02

OSVUSN-7390-1 No score

linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
TTY drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Closures library;
Memory management;
9P file system network protocol;
Amateur Radio drivers;
Bluetooth subsystem;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
XFRM subsystem;
Key management;
SELinux security module;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
QCOM ASoC drivers;
STMicroelectronics SoC drivers;
USB sound devices;
KVM core; (CVE-2024-50299, CVE-2024-50304, CVE-2024-50196, CVE-2024-56548, CVE-2024-56531, CVE-2024-56720, CVE-2024-58087,…

Record: USN-7390-1
Updated: 2026-11-02

OSVUSN-7407-1 No score

linux-hwe-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Media staging drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
Network namespace;
Kernel init infrastructure;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Memory management;
9P file system network protocol;
Bluetooth subsystem;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
SELinux security module;
ALSA framework;
USB sound devices; (CVE-2024-50242, CVE-2024-53165, CVE-2024-56569, CVE-2024-57938, CVE-2024-57889, CVE-2024-53226, CVE-2024-57882, CVE-2024-57913, CVE-2024-53096, CVE-2024-56575, CVE-2024-56630, CVE-2024-50055, CVE-2024-53129, CVE-2025-21646, CVE-2024-50121, CVE-2024-56594, CVE-2024-57802, CVE-2024-53183, CVE-2024-57904, CVE-2025-21653, CVE-2024-56633, CVE-2024-56595, CVE-2024-56659, CVE-2024-47730, CVE-2024-57948, CVE-2024-56614, CVE-2024-56601, CVE-2024-36476, CVE-2024-49998, CVE-2024-53122, CVE-2024-56701, CVE-2024-56781, CVE-2024-56785, CVE-2024-47707, CVE-2025-21694, CVE-2024-56715, CVE-2024-56693, CVE-2024-56587, CVE-2024-56726, CVE-2024-56688, CVE-2024-53124, CVE-2024-46871, CVE-2025-21648, CVE-2024-56603, CVE-2024-56779, CVE-2025-21637, CVE-2025-21664, CVE-2024-57951, CVE-2024-53136, CVE-2025-21687, CVE-2024-57798, CVE-2024-53680, CVE-2024-56606, CVE-2024-56643, CVE-2024-56634, CVE-2024-56716, CVE-2024-57908, CVE-2024-56774, CVE-2024-56562, CVE-2025-21669, CVE-2024-57849, CVE-2024-56623,…

Record: USN-7407-1
Updated: 2026-11-02

OSVUSN-7421-1 No score

linux-azure-5.15, linux-azure-fde-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Media staging drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
Network namespace;
Kernel init infrastructure;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Memory management;
9P file system network protocol;
Bluetooth subsystem;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
SELinux security module;
ALSA framework;
USB sound devices; (CVE-2024-53680, CVE-2024-53148, CVE-2024-47408, CVE-2024-53122, CVE-2024-56691, CVE-2024-56763, CVE-2024-53227, CVE-2024-56369, CVE-2024-50275, CVE-2024-57892, CVE-2024-53142, CVE-2024-56693, CVE-2024-56658, CVE-2024-57882, CVE-2024-56606, CVE-2024-46871, CVE-2024-57907, CVE-2024-56642, CVE-2025-21631, CVE-2024-57908, CVE-2024-57890, CVE-2024-53194, CVE-2024-57913, CVE-2024-56659, CVE-2024-56643, CVE-2024-56590, CVE-2024-56754, CVE-2025-21678, CVE-2024-56678, CVE-2024-49974, CVE-2024-56614, CVE-2024-53124, CVE-2022-49034, CVE-2024-49996, CVE-2024-47143, CVE-2024-50055, CVE-2024-53184, CVE-2024-56681, CVE-2025-21683, CVE-2024-57922, CVE-2024-56532, CVE-2024-53161, CVE-2024-57791, CVE-2025-21664, CVE-2024-53206, CVE-2024-56589, CVE-2024-57902, CVE-2024-56633, CVE-2024-53140, CVE-2024-56627, CVE-2024-57912, CVE-2024-55916, CVE-2024-56594, CVE-2025-21690, CVE-2024-56602, CVE-2024-49998, CVE-2024-53171, CVE-2024-53174, CVE-2024-53172, CVE-2024-56701, CVE-2024-52332, CVE-2024-57948,…

Record: USN-7421-1
Updated: 2026-11-02

OSVUSN-7458-1 No score

linux-ibm-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I2C subsystem;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Direct Digital Synthesis drivers;
Media staging drivers;
TCM subsystem;
TTY drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
BTRFS file system;
Ceph distributed file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
IP tunnels definitions;
LAPB network protocol;
Network namespace;
User-space API (UAPI);
Kernel init infrastructure;
io_uring subsystem;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Closures library;
Memory management;
9P file system network protocol;
Amateur Radio drivers;
Bluetooth subsystem;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
XFRM subsystem;
Key management;
SELinux security module;
ALSA framework;
FireWire sound drivers;
HD-audio driver;
QCOM ASoC drivers;
STMicroelectronics SoC drivers;
USB sound devices;
KVM core; (CVE-2024-56747, CVE-2024-56575, CVE-2024-56781, CVE-2024-53173,…

Record: USN-7458-1
Updated: 2026-11-02

OSVUSN-7459-1 No score

linux-intel-iotg-5.15 vulnerabilities

Jann Horn discovered that the watch_queue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or escalate their privileges. (CVE-2022-0995)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Media staging drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
Network namespace;
Kernel init infrastructure;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Memory management;
9P file system network protocol;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
SELinux security module;
ALSA framework;
USB sound devices; (CVE-2024-57913, CVE-2024-56748, CVE-2024-46871, CVE-2024-57900, CVE-2025-21637, CVE-2025-21756, CVE-2024-53680, CVE-2024-56728, CVE-2024-46826, CVE-2024-57910, CVE-2024-56679, CVE-2024-53215, CVE-2024-56640, CVE-2024-56634, CVE-2024-56594, CVE-2024-56619, CVE-2024-50242, CVE-2024-53150, CVE-2024-49925, CVE-2024-56648, CVE-2024-53121, CVE-2024-36476, CVE-2025-21631, CVE-2024-49996, CVE-2024-56723, CVE-2025-21690, CVE-2024-56769, CVE-2024-56767, CVE-2025-21664, CVE-2024-53155, CVE-2024-48881, CVE-2024-57925, CVE-2024-53197, CVE-2024-53156, CVE-2024-35864, CVE-2024-53122, CVE-2024-50121, CVE-2025-21700, CVE-2022-49034, CVE-2025-21648, CVE-2024-57903, CVE-2024-57902, CVE-2024-53184,…

Record: USN-7459-1
Updated: 2026-11-02

OSVUSN-7459-2 No score

linux-gcp-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
SuperH RISC architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Drivers core;
RAM backed block device driver;
Virtio block driver;
Data acquisition framework and drivers;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
ARM SCPI message protocol;
iSCSI Boot Firmware Table Attributes driver;
GPIO subsystem;
GPU drivers;
HID subsystem;
Microsoft Hyper-V drivers;
I3C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
LED subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
NVME drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Real Time Clock drivers;
SCSI subsystem;
SuperH / SH-Mobile drivers;
i.MX SoC drivers;
QCOM SoC drivers;
SPI subsystem;
Media staging drivers;
UFS subsystem;
DesignWare USB3 driver;
USB Gadget drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;
Proc file system;
Diskquota system;
SMB network file system;
UBI file system;
Timer subsystem;
VLANs driver;
LAPB network protocol;
Network namespace;
Kernel init infrastructure;
BPF subsystem;
Kernel CPU control infrastructure;
DMA mapping infrastructure;
KCSAN framework;
Tracing infrastructure;
Memory management;
9P file system network protocol;
Bluetooth subsystem;
Ethernet bridge;
CAN network layer;
Networking core;
DCCP (Datagram Congestion Control Protocol);
Distributed Switch Architecture;
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IPv4 networking;
IPv6 networking;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
Netlink;
NET/ROM layer;
Packet sockets;
Network traffic control;
SCTP protocol;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
VMware vSockets driver;
eXpress Data Path;
SELinux security module;
ALSA framework;
USB sound devices; (CVE-2024-53690, CVE-2024-56642, CVE-2024-56777, CVE-2024-49998, CVE-2024-53181, CVE-2024-53184, CVE-2024-53180, CVE-2024-56615, CVE-2024-56679, CVE-2024-53099, CVE-2025-21993, CVE-2024-53112, CVE-2024-56594, CVE-2024-56606, CVE-2024-56533, CVE-2024-56616, CVE-2024-56631, CVE-2024-46784, CVE-2024-53124, CVE-2024-56623, CVE-2024-57939, CVE-2025-21694, CVE-2025-21653, CVE-2024-56548, CVE-2024-56600, CVE-2024-56578, CVE-2024-53198, CVE-2024-56619, CVE-2024-44938, CVE-2024-56688, CVE-2024-56651, CVE-2024-53215, CVE-2024-53150, CVE-2025-21687, CVE-2025-21646, CVE-2024-49571, CVE-2024-57884, CVE-2025-21700, CVE-2024-57907, CVE-2024-56569,…

Record: USN-7459-2
Updated: 2026-11-02

OSVUSN-7513-1 No score

linux, linux-aws, linux-aws-6.8, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

RISC-V architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Ublk userspace block driver;
Virtio block driver;
DMA engine subsystem;
GPU drivers;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Multiple devices driver;
Media drivers;
Microchip PCI driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
SCSI subsystem;
USB Gadget drivers;
TDX Guest driver;
AFS file system;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
File systems infrastructure;
Network file systems library;
NILFS2 file system;
Overlay file system;
SMB network file system;
VLANs driver;
Memory management;
LAPB network protocol;
io_uring subsystem;
BPF subsystem;
Control group (cgroup);
Tracing infrastructure;
Workqueue subsystem;
Bluetooth subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NET/ROM layer;
Packet sockets;
RDS protocol;
Network traffic control;
SCTP protocol;
SMC sockets;
Wireless networking;
SELinux security module;
ALSA framework;
SOF drivers; (CVE-2024-56372, CVE-2025-21639, CVE-2024-57897, CVE-2024-56770, CVE-2024-57898, CVE-2025-21655, CVE-2024-56667, CVE-2024-41013, CVE-2024-57888, CVE-2025-21658, CVE-2024-57911, CVE-2024-56654, CVE-2024-57904, CVE-2024-56664, CVE-2024-57806, CVE-2024-56758, CVE-2024-57912, CVE-2025-21649, CVE-2024-56369, CVE-2025-21656, CVE-2025-21643, CVE-2024-57884, CVE-2025-21640, CVE-2024-56769, CVE-2024-57939, CVE-2025-21635, CVE-2024-57902, CVE-2024-36476, CVE-2025-21646, CVE-2024-57887, CVE-2024-57882, CVE-2024-57792, CVE-2024-56759, CVE-2024-57901, CVE-2024-56764, CVE-2025-21654, CVE-2024-57899, CVE-2025-21664, CVE-2024-56715, CVE-2024-56760, CVE-2024-57926, CVE-2024-57938, CVE-2025-21637, CVE-2024-55881, CVE-2024-57916, CVE-2024-57908, CVE-2024-57910, CVE-2024-57892, CVE-2024-57890, CVE-2024-56662, CVE-2024-57793, CVE-2024-47408, CVE-2024-49568, CVE-2024-57946, CVE-2024-53690, CVE-2024-56716, CVE-2024-57801, CVE-2024-56670, CVE-2024-56709, CVE-2024-57885, CVE-2024-57791, CVE-2024-38608, CVE-2024-56763, CVE-2024-57906, CVE-2024-47736, CVE-2024-56761, CVE-2024-56659, CVE-2025-21636, CVE-2024-57913, CVE-2024-56710, CVE-2025-21660, CVE-2024-57945, CVE-2024-39282, CVE-2024-53687, CVE-2024-57907, CVE-2024-53179, CVE-2025-21659, CVE-2024-57805, CVE-2024-57889, CVE-2024-57940, CVE-2025-21645, CVE-2024-56660, CVE-2024-56718, CVE-2024-57802, CVE-2024-56767, CVE-2024-56717, CVE-2024-58087, CVE-2025-21647, CVE-2025-21650, CVE-2024-57895, CVE-2025-21632, CVE-2024-54193, CVE-2024-57893, CVE-2025-21652, CVE-2025-21634, CVE-2024-56652, CVE-2024-57929, CVE-2024-57804, CVE-2024-57925, CVE-2024-57932, CVE-2024-54683, CVE-2025-21663, CVE-2024-56665, CVE-2024-54455, CVE-2025-21642, CVE-2024-57931, CVE-2025-21971, CVE-2024-56656, CVE-2025-21651, CVE-2024-49571, CVE-2025-21631, CVE-2024-56675, CVE-2024-53125, CVE-2025-21938, CVE-2024-57879, CVE-2024-56657, CVE-2024-57807, CVE-2024-57841, CVE-2024-57903, CVE-2024-53685, CVE-2024-57896, CVE-2024-57900, CVE-2024-57883, CVE-2024-58237, CVE-2025-21638, CVE-2024-55639, CVE-2025-21653, CVE-2025-21648, CVE-2024-54460, CVE-2024-57933, CVE-2024-55916, CVE-2024-57917, CVE-2025-21662)

Record: USN-7513-1
Updated: 2026-11-02

OSVUSN-7513-2 No score

linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

RISC-V architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Ublk userspace block driver;
Virtio block driver;
DMA engine subsystem;
GPU drivers;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Multiple devices driver;
Media drivers;
Microchip PCI driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
SCSI subsystem;
USB Gadget drivers;
TDX Guest driver;
AFS file system;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
File systems infrastructure;
Network file systems library;
NILFS2 file system;
Overlay file system;
SMB network file system;
VLANs driver;
Memory management;
LAPB network protocol;
io_uring subsystem;
BPF subsystem;
Control group (cgroup);
Tracing infrastructure;
Workqueue subsystem;
Bluetooth subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NET/ROM layer;
Packet sockets;
RDS protocol;
Network traffic control;
SCTP protocol;
SMC sockets;
Wireless networking;
SELinux security module;
ALSA framework;
SOF drivers; (CVE-2024-56372, CVE-2025-21639, CVE-2024-57897, CVE-2024-56770, CVE-2024-57898, CVE-2025-21655, CVE-2024-56667, CVE-2024-41013, CVE-2024-57888, CVE-2025-21658, CVE-2024-57911, CVE-2024-56654, CVE-2024-57904, CVE-2024-56664, CVE-2024-57806, CVE-2024-56758, CVE-2024-57912, CVE-2025-21649, CVE-2024-56369, CVE-2025-21656, CVE-2025-21643, CVE-2024-57884, CVE-2025-21640, CVE-2024-56769, CVE-2024-57939, CVE-2025-21635, CVE-2024-57902, CVE-2024-36476, CVE-2025-21646, CVE-2024-57887, CVE-2024-57882, CVE-2024-57792, CVE-2024-56759, CVE-2024-57901, CVE-2024-56764, CVE-2025-21654, CVE-2024-57899, CVE-2025-21664, CVE-2024-56715, CVE-2024-56760, CVE-2024-57926, CVE-2024-57938, CVE-2025-21637, CVE-2024-55881, CVE-2024-57916, CVE-2024-57908, CVE-2024-57910, CVE-2024-57892, CVE-2024-57890, CVE-2024-56662, CVE-2024-57793, CVE-2024-47408, CVE-2024-49568, CVE-2024-57946, CVE-2024-53690, CVE-2024-56716, CVE-2024-57801, CVE-2024-56670, CVE-2024-56709, CVE-2024-57885, CVE-2024-57791, CVE-2024-38608, CVE-2024-56763, CVE-2024-57906, CVE-2024-47736, CVE-2024-56761, CVE-2024-56659, CVE-2025-21636, CVE-2024-57913, CVE-2024-56710, CVE-2025-21660, CVE-2024-57945, CVE-2024-39282, CVE-2024-53687, CVE-2024-57907, CVE-2024-53179, CVE-2025-21659, CVE-2024-57805, CVE-2024-57889, CVE-2024-57940, CVE-2025-21645, CVE-2024-56660, CVE-2024-56718, CVE-2024-57802, CVE-2024-56767, CVE-2024-56717, CVE-2024-58087, CVE-2025-21647, CVE-2025-21650, CVE-2024-57895, CVE-2025-21632, CVE-2024-54193, CVE-2024-57893, CVE-2025-21652, CVE-2025-21634, CVE-2024-56652, CVE-2024-57929, CVE-2024-57804, CVE-2024-57925, CVE-2024-57932, CVE-2024-54683, CVE-2025-21663, CVE-2024-56665, CVE-2024-54455, CVE-2025-21642, CVE-2024-57931, CVE-2025-21971, CVE-2024-56656, CVE-2025-21651, CVE-2024-49571, CVE-2025-21631, CVE-2024-56675, CVE-2024-53125, CVE-2025-21938, CVE-2024-57879, CVE-2024-56657, CVE-2024-57807, CVE-2024-57841, CVE-2024-57903, CVE-2024-53685, CVE-2024-57896, CVE-2024-57900, CVE-2024-57883, CVE-2024-58237, CVE-2025-21638, CVE-2024-55639, CVE-2025-21653, CVE-2025-21648, CVE-2024-54460, CVE-2024-57933, CVE-2024-55916, CVE-2024-57917, CVE-2025-21662)

Record: USN-7513-2
Updated: 2026-11-02

OSVUSN-7513-3 No score

linux-azure, linux-azure-6.8, linux-oem-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

RISC-V architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Ublk userspace block driver;
Virtio block driver;
DMA engine subsystem;
GPU drivers;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Multiple devices driver;
Media drivers;
Microchip PCI driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
SCSI subsystem;
USB Gadget drivers;
TDX Guest driver;
AFS file system;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
File systems infrastructure;
Network file systems library;
NILFS2 file system;
Overlay file system;
SMB network file system;
VLANs driver;
Memory management;
LAPB network protocol;
io_uring subsystem;
BPF subsystem;
Control group (cgroup);
Tracing infrastructure;
Workqueue subsystem;
Bluetooth subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NET/ROM layer;
Packet sockets;
RDS protocol;
Network traffic control;
SCTP protocol;
SMC sockets;
Wireless networking;
SELinux security module;
ALSA framework;
SOF drivers; (CVE-2025-21648, CVE-2025-21645, CVE-2024-56767, CVE-2025-21664, CVE-2025-21636, CVE-2024-57898, CVE-2024-56667, CVE-2024-57912, CVE-2024-47408, CVE-2024-56761, CVE-2024-56665, CVE-2024-57887, CVE-2024-54683, CVE-2024-56662, CVE-2024-57910, CVE-2024-38608, CVE-2024-56710, CVE-2025-21656, CVE-2024-57885, CVE-2024-53125, CVE-2024-56675, CVE-2024-57895, CVE-2024-56660, CVE-2025-21638, CVE-2024-57932, CVE-2024-57807, CVE-2024-56759, CVE-2024-57883, CVE-2025-21643, CVE-2024-54193, CVE-2024-57879, CVE-2024-54460, CVE-2024-41013, CVE-2024-56654, CVE-2024-55916, CVE-2024-57897, CVE-2024-58087, CVE-2024-57904, CVE-2024-57893, CVE-2025-21652, CVE-2024-57925, CVE-2024-47736, CVE-2024-57802, CVE-2024-49571, CVE-2024-57916, CVE-2024-57801, CVE-2025-21647, CVE-2024-56763, CVE-2024-57903, CVE-2024-57899, CVE-2024-57908, CVE-2024-57900, CVE-2024-57911, CVE-2024-57902, CVE-2024-57938, CVE-2024-56760, CVE-2025-21642, CVE-2025-21971, CVE-2024-57933, CVE-2024-57917, CVE-2024-53179, CVE-2024-57896, CVE-2024-57906, CVE-2024-56716, CVE-2024-39282, CVE-2024-57806, CVE-2025-21938, CVE-2024-55881, CVE-2024-57931, CVE-2024-56717, CVE-2024-56369, CVE-2025-21640, CVE-2024-57888, CVE-2024-57804, CVE-2024-57907, CVE-2024-53687, CVE-2024-57940, CVE-2024-57929, CVE-2025-21637, CVE-2024-57805, CVE-2024-56372, CVE-2025-21646, CVE-2024-57913, CVE-2024-57901, CVE-2024-57889, CVE-2024-56770, CVE-2024-57945, CVE-2024-56659, CVE-2024-57946, CVE-2024-57890, CVE-2024-36476, CVE-2024-57882, CVE-2024-53685, CVE-2024-57791, CVE-2024-55639, CVE-2024-56718, CVE-2024-57792, CVE-2025-21662, CVE-2024-57793, CVE-2024-54455, CVE-2025-21632, CVE-2024-56715, CVE-2024-56652, CVE-2024-57939, CVE-2024-56657, CVE-2025-21658, CVE-2025-21655, CVE-2025-21635, CVE-2024-56656, CVE-2025-21660, CVE-2025-21634, CVE-2025-21631, CVE-2024-57892, CVE-2024-57884, CVE-2024-58237, CVE-2025-21659, CVE-2024-57926, CVE-2024-53690, CVE-2025-21654, CVE-2024-57841, CVE-2025-21639, CVE-2025-21663, CVE-2024-56670, CVE-2024-56758, CVE-2024-56764, CVE-2024-56709, CVE-2024-49568, CVE-2024-56769, CVE-2025-21653, CVE-2025-21651, CVE-2025-21650, CVE-2024-56664, CVE-2025-21649)

Record: USN-7513-3
Updated: 2026-11-02

OSVUSN-7513-4 No score

linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

RISC-V architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Ublk userspace block driver;
Virtio block driver;
DMA engine subsystem;
GPU drivers;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Multiple devices driver;
Media drivers;
Microchip PCI driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
SCSI subsystem;
USB Gadget drivers;
TDX Guest driver;
AFS file system;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
File systems infrastructure;
Network file systems library;
NILFS2 file system;
Overlay file system;
SMB network file system;
VLANs driver;
Memory management;
LAPB network protocol;
io_uring subsystem;
BPF subsystem;
Control group (cgroup);
Tracing infrastructure;
Workqueue subsystem;
Bluetooth subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NET/ROM layer;
Packet sockets;
RDS protocol;
Network traffic control;
SCTP protocol;
SMC sockets;
Wireless networking;
SELinux security module;
ALSA framework;
SOF drivers; (CVE-2024-57895, CVE-2024-57801, CVE-2025-21653, CVE-2025-21664, CVE-2024-57911, CVE-2024-57890, CVE-2024-56372, CVE-2024-57931, CVE-2024-57841, CVE-2024-56758, CVE-2024-57946, CVE-2024-54460, CVE-2024-55639, CVE-2025-21636, CVE-2025-21656, CVE-2024-57917, CVE-2024-53685, CVE-2024-55881, CVE-2024-57910, CVE-2024-56369, CVE-2024-57929, CVE-2024-57940, CVE-2024-54455, CVE-2025-21631, CVE-2024-56656, CVE-2025-21643, CVE-2024-57807, CVE-2024-47736, CVE-2024-56670, CVE-2025-21660, CVE-2024-56667, CVE-2024-41013, CVE-2024-56710, CVE-2025-21659, CVE-2024-57792, CVE-2024-57893, CVE-2024-57913, CVE-2024-57897, CVE-2024-57907, CVE-2024-57916, CVE-2025-21647, CVE-2024-56665, CVE-2025-21649, CVE-2024-57938, CVE-2024-56709, CVE-2024-57945, CVE-2025-21654, CVE-2024-56657, CVE-2024-49571, CVE-2024-54683, CVE-2024-56664, CVE-2024-58087, CVE-2024-54193, CVE-2024-57802, CVE-2025-21637, CVE-2024-56761, CVE-2024-57892, CVE-2024-56675, CVE-2025-21645, CVE-2024-57908, CVE-2024-58237, CVE-2024-57887, CVE-2024-53687, CVE-2025-21650, CVE-2024-57888, CVE-2024-57902, CVE-2024-57906, CVE-2024-56764, CVE-2024-57882, CVE-2024-56652, CVE-2025-21652, CVE-2025-21662, CVE-2024-57879, CVE-2024-56662, CVE-2024-56660, CVE-2025-21632, CVE-2024-47408, CVE-2025-21642, CVE-2025-21655, CVE-2025-21640, CVE-2025-21663, CVE-2024-57933, CVE-2024-57899, CVE-2024-57884, CVE-2024-56654, CVE-2024-57806, CVE-2024-57901, CVE-2024-57926, CVE-2024-39282, CVE-2024-56770, CVE-2024-57889, CVE-2024-56769, CVE-2024-53690, CVE-2024-57904, CVE-2025-21971, CVE-2024-57885, CVE-2024-56718, CVE-2024-56767, CVE-2024-38608, CVE-2024-56760, CVE-2024-56763, CVE-2024-57912, CVE-2024-36476, CVE-2024-57793, CVE-2025-21638, CVE-2024-56716, CVE-2024-57804, CVE-2024-57932, CVE-2024-57900, CVE-2025-21651, CVE-2024-57925, CVE-2024-53125, CVE-2024-56717, CVE-2025-21938, CVE-2025-21639, CVE-2024-57883, CVE-2024-56715, CVE-2024-57805, CVE-2024-55916, CVE-2024-53179, CVE-2024-56759, CVE-2024-57939, CVE-2025-21646, CVE-2024-57898, CVE-2024-57791, CVE-2025-21634, CVE-2025-21635, CVE-2024-56659, CVE-2024-57903, CVE-2025-21648, CVE-2024-57896, CVE-2024-49568, CVE-2025-21658)

Record: USN-7513-4
Updated: 2026-11-02

OSVUSN-7513-5 No score

linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

RISC-V architecture;
x86 architecture;
Block layer subsystem;
Compute Acceleration Framework;
ACPI drivers;
Drivers core;
Ublk userspace block driver;
Virtio block driver;
DMA engine subsystem;
GPU drivers;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Multiple devices driver;
Media drivers;
Microchip PCI driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
PCI subsystem;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
SCSI subsystem;
USB Gadget drivers;
TDX Guest driver;
AFS file system;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
File systems infrastructure;
Network file systems library;
NILFS2 file system;
Overlay file system;
SMB network file system;
VLANs driver;
Memory management;
LAPB network protocol;
io_uring subsystem;
BPF subsystem;
Control group (cgroup);
Tracing infrastructure;
Workqueue subsystem;
Bluetooth subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NET/ROM layer;
Packet sockets;
RDS protocol;
Network traffic control;
SCTP protocol;
SMC sockets;
Wireless networking;
SELinux security module;
ALSA framework;
SOF drivers; (CVE-2024-57913, CVE-2024-47408, CVE-2024-57884, CVE-2024-57801, CVE-2025-21664, CVE-2024-57912, CVE-2025-21634, CVE-2024-53125, CVE-2024-57900, CVE-2024-57911, CVE-2024-56716, CVE-2024-56715, CVE-2024-57892, CVE-2025-21640, CVE-2025-21646, CVE-2024-57889, CVE-2024-56758, CVE-2024-56767, CVE-2024-57926, CVE-2024-56670, CVE-2024-57940, CVE-2024-56717, CVE-2024-56759, CVE-2024-57887, CVE-2025-21654, CVE-2024-57938, CVE-2024-57841, CVE-2024-39282, CVE-2024-56761, CVE-2025-21649, CVE-2024-56652, CVE-2024-56665, CVE-2024-57896, CVE-2024-56667, CVE-2024-57902, CVE-2024-54455, CVE-2025-21656, CVE-2024-56709, CVE-2025-21635, CVE-2024-57792, CVE-2025-21642, CVE-2025-21660, CVE-2024-53690, CVE-2024-57904, CVE-2024-53685, CVE-2025-21938, CVE-2024-55881, CVE-2024-57793, CVE-2024-56659, CVE-2025-21632, CVE-2024-56656, CVE-2025-21636, CVE-2024-47736, CVE-2024-57899, CVE-2024-57916, CVE-2024-56664, CVE-2025-21971, CVE-2025-21659, CVE-2024-57910, CVE-2024-57802, CVE-2024-57806, CVE-2025-21655, CVE-2024-54193, CVE-2024-57885, CVE-2025-21658, CVE-2024-57945, CVE-2025-21650, CVE-2024-58237, CVE-2024-57804, CVE-2024-57888, CVE-2025-21637, CVE-2024-57882, CVE-2024-57883, CVE-2024-56675, CVE-2025-21663, CVE-2024-49568, CVE-2024-58087, CVE-2024-56764, CVE-2024-57903, CVE-2024-57917, CVE-2024-57893, CVE-2025-21648, CVE-2025-21631, CVE-2024-57890, CVE-2024-56718, CVE-2025-21638, CVE-2024-56372, CVE-2024-49571, CVE-2025-21662, CVE-2024-56770, CVE-2024-57807, CVE-2024-57925, CVE-2024-57898, CVE-2025-21653, CVE-2024-57895, CVE-2024-56657, CVE-2024-54683, CVE-2024-56769, CVE-2024-38608, CVE-2024-57931, CVE-2025-21652, CVE-2024-57908, CVE-2024-56760, CVE-2024-57929, CVE-2024-36476, CVE-2024-55639, CVE-2025-21645, CVE-2024-57907, CVE-2024-54460, CVE-2025-21643, CVE-2024-56660, CVE-2024-53687, CVE-2025-21639, CVE-2024-57932, CVE-2024-56654, CVE-2024-57805, CVE-2024-56662, CVE-2025-21647, CVE-2024-56710, CVE-2024-57901, CVE-2024-56369, CVE-2024-57897, CVE-2024-57939, CVE-2024-57791, CVE-2024-57879, CVE-2024-57946, CVE-2024-55916, CVE-2024-41013, CVE-2025-21651, CVE-2024-53179, CVE-2024-57933, CVE-2024-56763, CVE-2024-57906)

Record: USN-7513-5
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-core` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-debug` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-debug-core` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-debug-devel` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-debug-devel-matched` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-debug-modules` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-devel-matched` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-modules` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-modules-core` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-modules-extra` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-abi-stablelists` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-core` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-cross-headers` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug-core` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug-devel` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug-devel-matched` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug-modules` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug-modules-core` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug-modules-extra` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug-uki-virt` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-devel` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-devel-matched` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-doc` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-headers` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-modules` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-modules-core` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-modules-extra` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-core` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-debug` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-debug-core` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-debug-devel` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-debug-modules` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-debug-modules-core` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-debug-modules-extra` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-devel` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-modules` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-modules-core` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-modules-extra` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-core` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-debug` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-debug-core` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-debug-devel` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-debug-modules` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-debug-modules-core` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-debug-modules-extra` AlmaLinux:9	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`linux-lts` Alpaquita:23	6.1.124-r0 up to 6.1.127-r0	6.1.127-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`kernel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-debug` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-modules` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-cross-headers` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-debug` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-debug-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-debug-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-debug-modules` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-debug-uki-virt-addons` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-doc` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-headers` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-modules` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-modules-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-modules-extra` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-modules-internal` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-modules-partner` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-rt` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-rt-64k` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-rt-64k-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-rt-64k-debug` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-rt-64k-debug-core` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-rt-64k-debug-devel` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-rt-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-rt-64k-debug-kvm` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`kernel-rt-64k-debug-modules` TuxCare:AlmaLinux:9.6	before 5.14.0-570.62.1.el9_6.tuxcare.1.els6	5.14.0-570.62.1.el9_6.tuxcare.1.els6
`Kernel` Linux	4.7.0 up to 5.10.234, 5.11.0 up to 5.15.177, 5.16.0 up to 6.1.125, 6.2.0 up to 6.6.72, 6.7.0 up to 6.12.10	5.10.2345.15.1776.1.1256.6.726.12.10
`linux` Debian:12	before 6.1.128-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 29 moreShow less 6.1.119-16.1.123-16.1.124-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.128-1
`linux` Debian:13	before 6.12.10-1	6.12.10-1
`linux` Debian:14	before 6.12.10-1	6.12.10-1
`linux` Debian:11	before 5.10.234-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 39 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.234-1
`linux-6.1` Debian:11	before 6.1.128-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1	6.1.128-1~deb11u1
`kernel` Mageia:9	before 6.6.74-1.mga9	6.6.74-1.mga9
`kmod-virtualbox` Mageia:9	before 7.0.24-64.mga9	7.0.24-64.mga9
`kmod-xtables-addons` Mageia:9	before 3.24-70.mga9	3.24-70.mga9
`dwarves` Mageia:9	before 1.29-1.mga9	1.29-1.mga9
`kernel-linus` Mageia:9	before 6.6.74-1.mga9	6.6.74-1.mga9
`kernel` openEuler:22.03-LTS-SP4	before 5.10.0-250.0.0.154.oe2203sp4	5.10.0-250.0.0.154.oe2203sp4
`kernel` openEuler:24.03-LTS	before 6.6.0-78.0.0.71.oe2403	6.6.0-78.0.0.71.oe2403
`kernel` openEuler:24.03-LTS-SP1	before 6.6.0-78.0.0.83.oe2403sp1	6.6.0-78.0.0.83.oe2403sp1
`kernel` openEuler:20.03-LTS-SP4	before 4.19.90-2502.3.0.0316.oe2003sp4	4.19.90-2502.3.0.0316.oe2003sp4
`kernel` openEuler:22.03-LTS-SP3	before 5.10.0-250.0.0.153.oe2203sp3	5.10.0-250.0.0.153.oe2203sp3
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-doc` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`perf` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`python3-perf` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`rtla` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`rv` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel` Rocky Linux:9	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.3.1.150700.17.2.1	6.4.0-150700.53.3.1.150700.17.2.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-livepatch-SLE15-SP7_Update_1` SUSE:Linux Enterprise Live Patching 15 SP7	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7	before 6.4.0-150700.53.3.1	6.4.0-150700.53.3.1
`kernel-livepatch-SLE15-SP6-RT_Update_11` SUSE:Linux Enterprise Live Patching 15 SP6	before 1-150600.1.3.2	1-150600.1.3.2
`kernel-rt` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-rt_debug` openSUSE:Leap 15.6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-source-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-syms-rt` openSUSE:Leap 15.6	before 6.4.0-150600.10.39.1	6.4.0-150600.10.39.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	before 6.4.0-150600.8.40.1	6.4.0-150600.8.40.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	before 6.4.0-150600.8.40.1	6.4.0-150600.8.40.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6	before 6.4.0-150600.8.40.1	6.4.0-150600.8.40.1
`kernel-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.40.1	6.4.0-150600.8.40.1
`kernel-source-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.40.1	6.4.0-150600.8.40.1
`kernel-syms-azure` openSUSE:Leap 15.6	before 6.4.0-150600.8.40.1	6.4.0-150600.8.40.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.3.1	6.4.0-150700.20.3.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.3.1	6.4.0-150700.20.3.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7	before 6.4.0-150700.20.3.1	6.4.0-150700.20.3.1
`kernel-livepatch-SLE15-SP7-RT_Update_1` SUSE:Linux Enterprise Live Patching 15 SP7	before 1-150700.1.3.1	1-150700.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.3.1	6.4.0-150700.7.3.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.3.1	6.4.0-150700.7.3.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.3.1	6.4.0-150700.7.3.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7	before 6.4.0-150700.7.3.1	6.4.0-150700.7.3.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5	before 4.12.14-122.261.1	4.12.14-122.261.1
`kgraft-patch-SLE12-SP5_Update_69` SUSE:Linux Enterprise Live Patching 12 SP5	before 1-8.3.1	1-8.3.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5-LTSS	before 4.12.14-122.261.1	4.12.14-122.261.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5-LTSS	before 4.12.14-122.261.1	4.12.14-122.261.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5-LTSS	before 4.12.14-122.261.1	4.12.14-122.261.1
`kernel-default` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 4.12.14-122.261.1	4.12.14-122.261.1
`kernel-source` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 4.12.14-122.261.1	4.12.14-122.261.1
`kernel-syms` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 4.12.14-122.261.1	4.12.14-122.261.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.53.1.150600.12.24.1	6.4.0-150600.23.53.1.150600.12.24.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`dtb-aarch64` openSUSE:Leap 15.6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-64kb` openSUSE:Leap 15.6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-debug` openSUSE:Leap 15.6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-default` openSUSE:Leap 15.6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-default-base` openSUSE:Leap 15.6	before 6.4.0-150600.23.53.1.150600.12.24.1	6.4.0-150600.23.53.1.150600.12.24.1
`kernel-docs` openSUSE:Leap 15.6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-kvmsmall` openSUSE:Leap 15.6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-obs-build` openSUSE:Leap 15.6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-obs-qa` openSUSE:Leap 15.6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-source` openSUSE:Leap 15.6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-syms` openSUSE:Leap 15.6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`kernel-zfcpdump` openSUSE:Leap 15.6	before 6.4.0-150600.23.53.1	6.4.0-150600.23.53.1
`linux-azure` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	None known
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	None known
`linux-azure` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	None known
`linux-gcp` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	None known
`linux-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	None known
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-oracle` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	None known
`linux` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	None known
`linux-aws` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	None known
`linux-kvm` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	None known
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	None known
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	None known
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83	None known
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux-aws-5.15` Ubuntu:20.04:LTS	before 5.15.0-1080.87~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	5.15.0-1080.87~20.04.1
`linux-azure-5.15` Ubuntu:20.04:LTS	before 5.15.0-1086.95~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	5.15.0-1086.95~20.04.1
`linux-gcp-5.15` Ubuntu:20.04:LTS	before 5.15.0-1081.90~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1	5.15.0-1081.90~20.04.1
`linux-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-136.147~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-136.147~20.04.1
`linux-ibm-5.15` Ubuntu:20.04:LTS	before 5.15.0-1074.77~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 28 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.1	5.15.0-1074.77~20.04.1
`linux-intel-iotg-5.15` Ubuntu:20.04:LTS	before 5.15.0-1077.83~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 38 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.1	5.15.0-1077.83~20.04.1
`linux-lowlatency-hwe-5.15` Ubuntu:20.04:LTS	before 5.15.0-135.146~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-135.146~20.04.1
`linux-oracle-5.15` Ubuntu:20.04:LTS	before 5.15.0-1077.83~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1	5.15.0-1077.83~20.04.1
`linux-riscv-5.15` Ubuntu:20.04:LTS	before 5.15.0-1075.79~20.04.1, plus listed versions 5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1 Show 45 moreShow less 5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.15.15.0-1060.64~20.04.15.15.0-1061.65~20.04.15.15.0-1062.66~20.04.15.15.0-1063.67~20.04.15.15.0-1064.68~20.04.15.15.0-1065.69~20.04.15.15.0-1066.70~20.04.15.15.0-1067.71~20.04.15.15.0-1068.72~20.04.15.15.0-1069.73~20.04.15.15.0-1070.74~20.04.15.15.0-1071.75~20.04.15.15.0-1072.76~20.04.1	5.15.0-1075.79~20.04.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-21648 is a medium vulnerability (CVSS 5.5) in Linux, published January 19, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. Fixed in kernel 5.14.0-611.5.1.el9_7.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 495 package rows, 1,534 versions, 3,507 references and the rest of 34 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 6 source records.