Every CVE Search/ Get API key

CVE-2025-21681

openvswitch: fix lockup on tx to unregistering netdev with carrier

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

openvswitch: fix lockup on tx to unregistering netdev with carrier

Commit in a fixes tag attempted to fix the issue in the following sequence of calls:

do_output
-> ovs_vport_send
   -> dev_queue_xmit
      -> __dev_queue_xmit
         -> netdev_core_pick_tx
            -> skb_tx_hash

When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever.

But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK.

One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot.

Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway.

While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.22%Up 0.2 points since Feb 1, 2025
90%50%10%1%

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

openvswitch: fix lockup on tx to unregistering netdev with carrier

Commit in a fixes tag attempted to fix the issue in the following sequence of calls:

do_output
-> ovs_vport_send
   -> dev_queue_xmit
      -> __dev_queue_xmit
         -> netdev_core_pick_tx
            -> skb_tx_hash

When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever.

But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK.

One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot.

Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway.

While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.

Record
CVE-2025-21681
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-835
Updated
2026-11-05
CVE List No score

openvswitch: fix lockup on tx to unregistering netdev with carrier

In the Linux kernel, the following vulnerability has been resolved:

openvswitch: fix lockup on tx to unregistering netdev with carrier

Commit in a fixes tag attempted to fix the issue in the following sequence of calls:

do_output
-> ovs_vport_send
   -> dev_queue_xmit
      -> __dev_queue_xmit
         -> netdev_core_pick_tx
            -> skb_tx_hash

When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever.

But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK.

One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot.

Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway.

While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.

Record
CVE-2025-21681
Updated
2026-11-05
EUVDEUVD-2025-2630 No score

In the Linux kernel, the following vulnerability has been resolved:

openvswitch: fix lockup on tx to unregistering netdev with carrier

Commit in a fixes tag attempted to fix the issue in the following sequence of calls:

do_output
-> ovs_vport_send
   -> dev_queue_xmit
      -> __dev_queue_xmit
         -> netdev_core_pick_tx
            -> skb_tx_hash

When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever.

But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK.

One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot.

Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway.

While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.

Record
EUVD-2025-2630
Updated
2026-11-05
GitHub AdvisoriesGHSA-2x4f-r6q9-v77h 5.5

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on...

In the Linux kernel, the following vulnerability has been resolved:

openvswitch: fix lockup on tx to unregistering netdev with carrier

Commit in a fixes tag attempted to fix the issue in the following sequence of calls:

do_output
-> ovs_vport_send
   -> dev_queue_xmit
      -> __dev_queue_xmit
         -> netdev_core_pick_tx
            -> skb_tx_hash

When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever.

But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK.

One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot.

Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway.

While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.

Record
GHSA-2x4f-r6q9-v77h
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-835
Updated
2026-11-02
OSVAZL-57055 5.5

CVE-2025-21681 affecting package kernel for versions less than 6.6.76.1-1

In the Linux kernel, the following vulnerability has been resolved:

openvswitch: fix lockup on tx to unregistering netdev with carrier

Commit in a fixes tag attempted to fix the issue in the following sequence of calls:

do_output
-> ovs_vport_send
   -> dev_queue_xmit
      -> __dev_queue_xmit
         -> netdev_core_pick_tx
            -> skb_tx_hash

When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever.

But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK.

One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot.

Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway.

While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.

Record
AZL-57055
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2025-21681 5.5
Record
BELL-CVE-2025-21681
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 27 moreShow less
OSVDEBIAN-CVE-2025-21681 5.5

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to unregistering netdev with carrier Commit in a fixes tag attempted to fix the issue in the following sequence of calls: do_output -> ovs_vport_send -> dev_queue_xmit -> __dev_queue_xmit -> netdev_core_pick_tx -> skb_tx_hash When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever. But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK. One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot. Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway. While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.

Record
DEBIAN-CVE-2025-21681
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1371 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

fs: relax assertions on failure to encode file handles

Encoding file handles is usually performed by a filesystem >encode_fh() method that may fail for various reasons.

The legacy users of exportfs_encode_fh(), namely, nfsd and name_to_handle_at(2) syscall are ready to cope with the possibility of failure to encode a file handle.

There are a few other users of exportfs_encode_{fh,fid}() that currently have a WARN_ON() assertion when ->encode_fh() fails. Relax those assertions because they are wrong.

The second linked bug report states commit 16aac5ad1fa9 ("ovl: support encoding non-decodable file handles") in v6.6 as the regressing commit, but this is not accurate.

The aforementioned commit only increases the chances of the assertion and allows triggering the assertion with the reproducer using overlayfs, inotify and drop_caches.

Triggering this assertion was always possible with other filesystems and other reasons of ->encode_fh() failures and more particularly, it was also possible with the exact same reproducer using overlayfs that is mounted with options index=on,nfs_export=on also on kernels < v6.6. Therefore, I am not listing the aforementioned commit as a Fixes commit.

Backport hint: this patch will have a trivial conflict applying to v6.6.y, and other trivial conflicts applying to stable kernels < v6.6.(CVE-2024-57924)

In the Linux kernel, the following vulnerability has been resolved:

hrtimers: Handle CPU state correctly on hotplug

Consider a scenario where a CPU transitions from CPUHP_ONLINE to halfway through a CPU hotunplug down to CPUHP_HRTIMERS_PREPARE, and then back to CPUHP_ONLINE:

Since hrtimers_prepare_cpu() does not run, cpu_base.hres_active remains set to 1 throughout. However, during a CPU unplug operation, the tick and the clockevents are shut down at CPUHP_AP_TICK_DYING. On return to the online state, for instance CFS incorrectly assumes that the hrtick is already active, and the chance of the clockevent device to transition to oneshot mode is also lost forever for the CPU, unless it goes back to a lower state than CPUHP_HRTIMERS_PREPARE once.

This round-trip reveals another issue; cpu_base.online is not set to 1 after the transition, which appears as a WARN_ON_ONCE in enqueue_hrtimer().

Aside of that, the bulk of the per CPU state is not reset either, which means there are dangling pointers in the worst case.

Address this by adding a corresponding startup() callback, which resets the stale per CPU state and sets the online flag.

tglx: Make the new callback unconditionally available, remove the online modification in the prepare() callback and clear the remaining state in the starting callback instead of the prepare callback

In the Linux kernel, the following vulnerability has been resolved:

media: uvcvideo: Fix double free in error path

If the uvc_status_init() function fails to allocate the int_urb, it will free the dev->status pointer but doesn't reset the pointer to NULL. This results in the kfree() call in uvc_status_cleanup() trying to double-free the memory. Fix it by resetting the dev->status pointer to NULL after freeing it.

Reviewed by: Ricardo Ribalda <[email protected]>(CVE-2024-57980)

In the Linux kernel, the following vulnerability has been resolved:

tpm: Change to kvalloc() in eventlog/acpi.c

The following failure was reported on HPE ProLiant D320:

[ 10.693310][ T1] tpm_tis STM0925:00: 2.0 TPM (device-id 0x3, rev-id 0) [ 10.848132][ T1] ------------[ cut here ]------------ [ 10.853559][ T1] WARNING: CPU: 59 PID: 1 at mm/page_alloc.c:4727 __alloc_pages_noprof+0x2ca/0x330 [ 10.862827][ T1] Modules linked in: [ 10.866671][ T1] CPU: 59 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.12.0-lp155.2.g52785e2-default #1 openSUSE Tumbleweed…

Record
OESA-2025-1371
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1372 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

SUNRPC: make sure cache entry active before cache_show

The function c_show was called with protection from RCU. This only ensures that cp will not be freed. Therefore, the reference count for cp can drop to zero, which will trigger a refcount use-after-free warning when cache_get is called. To resolve this issue, use cache_get_rcu to ensure that cp remains active.

------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120

Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e(CVE-2024-53174)

In the Linux kernel, the following vulnerability has been resolved:

ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()

Under certain kernel configurations when building with Clang/LLVM, the compiler does not generate a return or jump as the terminator instruction for ip_vs_protocol_init(), triggering the following objtool warning during build time:

vmlinux.o: warning: objtool: ip_vs_protocol_init() falls through to next function __initstub__kmod_ip_vs_rr__935_123_ip_vs_rr_init6()

At runtime, this either causes an oops when trying to load the ipvs module or a boot-time panic if ipvs is built-in. This same issue has been reported by the Intel kernel test robot previously.

Digging deeper into both LLVM and the kernel code reveals this to be a undefined behavior problem. ip_vs_protocol_init() uses a on-stack buffer of 64 chars to store the registered protocol names and leaves it uninitialized after definition. The function calls strnlen() when concatenating protocol names into the buffer. With CONFIG_FORTIFY_SOURCE strnlen() performs an extra step to check whether the last byte of the input char buffer is a null character (commit 3009f891bb9f ("fortify: Allow strlen() and strnlen() to pass compile-time known lengths")). This, together with possibly other configurations, cause the following IR to be generated:

define hidden i32 @ip_vs_protocol_init() local_unnamed_addr #5 section ".init.text" align 16 !kcfi_type !29 { %1 = alloca [64 x i8], align 16 ...

14: ; preds = %11 %15 = getelementptr inbounds i8, ptr %1, i64 63 %16 = load i8, ptr %15, align 1 %17 = tail call i1 @llvm.is.constant.i8(i8 %16) %18 = icmp eq i8 %16, 0 %19 = select i1 %17, i1 %18, i1 false br i1 %19, label %20, label %23

20: ; preds = %14 %21 = call i64 @strlen(ptr noundef nonnull dereferenceable(1) %1) #23 ...

23: ; preds = %14, %11, %20 %24 = call i64 @strnlen(ptr noundef nonnull dereferenceable(1) %1, i64 noundef 64) #24 ... }

The above code calculates the address of the last char in the buffer (value %15) and then loads from it (value %16). Because the buffer is never initialized, the LLVM GVN pass marks value %16 as undefined:

%13 = getelementptr inbounds i8, ptr %1, i64 63 br i1 undef, label %14, label %17

This gives later passes (SCCP, in particular) more DCE opportunities by propagating the undef value further, and eventually removes everything after the load on the uninitialized stack location:

define hidden i32 @ip_vs_protocol_init() local_unnamed_addr #0 section ".init.text" align 16 !kcfi_type !11 { %1 = alloca [64 x i8], align 16 ...

12: …

Record
OESA-2025-1372
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-21681 5.7

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to unregistering netdev with carrier Commit in a fixes tag attempted to fix the issue in the following sequence of calls: do_output -> ovs_vport_send -> dev_queue_xmit -> __dev_queue_xmit -> netdev_core_pick_tx -> skb_tx_hash When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever. But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK. One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot. Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway. While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.

Record
UBUNTU-CVE-2025-21681
CVSS 4.0
5.7 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2025-1757963029 No score

kernel-uek: Fix of 195 CVEs

  • rds: tcp: block BH in TCP callbacks
  • kexec: Improve & fix crash_exclude_mem_range() to handle overlapping ranges
  • module: correctly exit module_kallsyms_on_each_symbol when fn() != 0
  • module: potential uninitialized return in module_kallsyms_on_each_symbol()
  • module: use RCU to synchronize find_module
  • kallsyms: refactor {,module_}kallsyms_on_each_symbol
  • LTS tag: v5.4.295
  • scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
  • arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() {CVE-2025-38320}
  • perf: Fix sample vs do_exit() {CVE-2025-38424}
  • s390/pci: Fix __pcilg_mio_inuser() inline assembly
  • rtc: test: Fix invalid format specifier.
  • jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() {CVE-2025-38337}
  • mm/huge_memory: fix dereferencing invalid pmd migration entry {CVE-2025-37958}
  • rtc: Make rtc_time64_to_tm() support dates before 1970
  • rtc: Improve performance of rtc_time64_to_tm(). Add tests.
  • xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create {CVE-2022-48773}
  • posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
  • ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
  • ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
  • ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board
  • net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
  • net: atm: add lec_mutex {CVE-2025-38323}
  • calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). {CVE-2025-38181}
  • tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184}
  • tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
  • atm: atmtcp: Free invalid length skb in atmtcp_c_send(). {CVE-2025-38185}
  • mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). {CVE-2025-38324}
  • wifi: carl9170: do not ping device which has failed to load firmware {CVE-2025-38420}
  • aoe: clean device rq_list in aoedev_downdev() {CVE-2025-38326}
  • hwmon: (occ) fix unaligned accesses
  • drm/nouveau/bl: increase buffer size to avoid truncate warning
  • erofs: remove unused trace event erofs_destroy_inode
  • ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
  • ALSA: hda/intel: Add Thinkpad E15 to PM deny list
  • Input: sparcspkr - avoid unannotated fall-through
  • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • atm: Revert atm_account_tx() if copy_from_iter_full() fails. {CVE-2025-38190}
  • selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
  • scsi: s390: zfcp: Ensure synchronous unit_add
  • scsi: storvsc: Increase the timeouts to storvsc_timeout
  • jffs2: check jffs2_prealloc_raw_node_refs() result in few other places {CVE-2025-38328}
  • jffs2: check that raw node were preallocated before writing summary {CVE-2025-38194}
  • drivers/rapidio/rio_cm.c: prevent possible heap overwrite {CVE-2025-38090}
  • powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
  • platform/x86: dell_rbu: Stop overwriting data buffer
  • platform: Add Surface platform directory
  • Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
  • tee: Prevent size calculation wraparound on 32-bit kernels
  • ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
  • bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
  • watchdog: da9052_wdt: respect TWDMIN
  • i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
  • sock: Correct error checking condition for (assign|release)_proto_idx()
  • scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
  • vxlan: Do not treat dst cache initialization errors as fatal
  • clk: rockchip: rk3036: mark ddrphy as critical
  • wifi: mac80211: do not offer a mesh path if forwarding is disabled
  • net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
  • pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
  • pinctrl: armada-37xx:…
Record
CLSA-2025-1757963029
Updated
2026-11-02
OSVCLSA-2026-1782155469 No score

kernel: Fix of 143 CVEs

  • ice: Fix PTP NULL pointer dereference during VSI rebuild {CVE-2026-23210}
  • tracing: Add recursion protection in kernel stack trace recording {CVE-2026-23138}
  • mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() {CVE-2025-38681}
  • cpuset: fix warning when disabling remote partition {CVE-2025-71142}
  • virtio: break and reset virtio devices on device_shutdown() {CVE-2025-38064}
  • netdevsim: fix a race issue related to the operation on bpf_bound_progs list {CVE-2026-23126}
  • atm: clip: Fix potential null-ptr-deref in to_atmarpd(). {CVE-2025-38460}
  • idpf: fix error handling in the init_task on load {CVE-2026-23017}
  • rxrpc: Fix recvmsg() unconditional requeue {CVE-2026-23066}
  • block: zero non-PI portion of auto integrity buffer {CVE-2026-23007}
  • can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode {CVE-2025-38665}
  • virtio_net: Fix napi_skb_cache_put warning {CVE-2024-43835}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() {CVE-2026-23169}
  • net: fix segmentation of forwarding fraglist GRO {CVE-2026-23154}
  • gfs2: Validate i_depth for exhash directories {CVE-2025-38710}
  • KVM: Don't clobber irqfd routing type when deassigning irqfd {CVE-2026-23198}
  • ipvlan: Make the addrs_lock be per port {CVE-2026-23103}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • can: mcp251xfd: fix infinite loop when xmit fails {CVE-2024-41088}
  • RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly {CVE-2025-71096}
  • RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction {CVE-2025-38161}
  • scsi: qla2xxx: Validate sp before freeing associated memory {CVE-2025-71236}
  • net/sched: netem: account for backlog updates from child qdisc {CVE-2024-56770}
  • drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat {CVE-2026-31656}
  • iavf: fix off-by-one issues in iavf_config_rss_reg() {CVE-2025-71087}
  • net/sched: ets: fix divide by zero in the offload path {CVE-2026-23379}
  • can: j1939: implement NETDEV_UNREGISTER notification handler {CVE-2025-39925}
  • ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() {CVE-2026-31531}
  • Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb {CVE-2026-31510}
  • ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() {CVE-2026-23003}
  • drm/i915/gt: Check set_default_submission() before deferencing {CVE-2026-31540}
  • mac802154: check local interfaces before deleting sdata list {CVE-2024-57948}
  • lib/buildid: use __kernel_read() for sleepable context {CVE-2026-23002}
  • scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs {CVE-2023-52808}
  • net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
  • irqchip/imx-irqsteer: Handle runtime power management correctly {CVE-2024-42290}
  • io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop {CVE-2026-23113}
  • net/sched: ets: Remove drr class from the active list if it changes to strict {CVE-2025-68815}
  • net: bonding: fix NULL deref in bond_debug_rlb_hash_show {CVE-2026-31546}
  • ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
  • openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
  • net: USB: Fix wrong-direction WARNING in plusb.c {CVE-2023-52742}
  • module: Fix kernel panic when a symbol st_shndx is out of bounds {CVE-2026-31521}
  • udf: Fix preallocation discarding at indirect extent boundary {CVE-2022-48946}
  • net/mlx5: qos: Restrict RTNL area to avoid a lock cycle {CVE-2025-39947}
  • scsi: core: Wake up the error handler when final completions race against each other {CVE-2026-23110}
  • nbd: don't allow reconnect after disconnect {CVE-2025-21731}
  • nfsd: check that server is running in unlock_filesystem {CVE-2026-22989}
  • af_key: validate families in pfkey_send_migrate() {CVE-2026-31515}
  • netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() {CVE-2024-36286} -…
Record
CLSA-2026-1782155469
Updated
2026-11-02
OSVCLSA-2026-1783791447 No score

kernel: Fix of 307 CVEs

  • gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully {CVE-2022-48660}
  • ipv4: check for NULL idev in ip_route_use_hint() {CVE-2024-36008}
  • KEYS: trusted: Do not use WARN when encode fails {CVE-2024-36975}
  • Fix userfaultfd_api to return EINVAL as expected {CVE-2024-41027}
  • xhci: Fix null pointer dereference when host dies {CVE-2023-52898}
  • sctp: sysctl: auth_enable: avoid using current->nsproxy {CVE-2025-21638}
  • blk-mq: fix IO hang from sbitmap wakeup race {CVE-2024-26671}
  • net: openvswitch: fix flow memory leak in ovs_flow_cmd_new {CVE-2023-52977}
  • gpiolib: fix memory leak in gpiochip_setup_dev() {CVE-2022-48975}
  • HID: betop: check shape of output reports {CVE-2023-53015}
  • mm/swapfile: add cond_resched() in get_swap_pages() {CVE-2023-52932}
  • HV: hv_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-52937}
  • drm/i915: Fix a memory leak with reused mmap_offset {CVE-2023-53002}
  • ptdma: pt_core_execute_cmd() should use spinlock {CVE-2023-53013}
  • RDMA/core: Fix ib block iterator counter overflow {CVE-2023-53026}
  • Bluetooth: hci_conn: Fix memory leaks {CVE-2023-53018}
  • scsi: target: pscsi: Fix bio_put() for error case {CVE-2024-26760}
  • sctp: Prevent TOCTOU out-of-bounds write {CVE-2025-40331}
  • pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() {CVE-2026-23038}
  • cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() {CVE-2025-40194}
  • ALSA: hda/cs8409: Fix possible NULL dereference {CVE-2024-50160}
  • nbd: don't allow reconnect after disconnect {CVE-2025-21731}
  • openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
  • ext4: detect invalid INLINE_DATA + EXTENTS flag combination {CVE-2025-40167}
  • ext4: xattr: fix null pointer deref in ext4_raw_inode() {CVE-2025-68820}
  • net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
  • wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode {CVE-2025-40321}
  • ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
  • ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping {CVE-2025-40121}
  • i40e: Fix macvlan leak by synchronizing access to mac_filter_hash {CVE-2024-50041}
  • net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() {CVE-2024-50000}
  • bpf: Fix reference count leak in bpf_prog_test_run_xdp() {CVE-2026-22994}
  • xsk: check IFF_UP earlier in Tx path {CVE-2023-53240}
  • firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038}
  • virtgpu: don't reset on shutdown {CVE-2025-38064}
  • xen/netfront: fix crash when removing device {CVE-2022-48969}
  • mptcp: do not fallback when OoO is present {CVE-2024-50185}
  • can: j1939: add missing calls in NETDEV_UNREGISTER notification handler {CVE-2025-39925}
  • netfilter: nf_tables: remove redundant chain validation on register store {CVE-2025-71160}
  • xfs: fix use-after-free in xattr node block inactivation {CVE-2026-43053}
  • ext4: fix racy may inline data check in dio write {CVE-2023-52786}
  • drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini {CVE-2023-52738}
  • macsec: fix UAF bug for real_dev {CVE-2022-49390}
  • drm/i915/gem: Fix Virtual Memory mapping boundaries calculation {CVE-2024-42259}
  • mm/shmem: disable PMD-sized page cache if needed {CVE-2024-42241}
  • driver: iio: add missing checks on iio_info's callback access {CVE-2024-46715}
  • udmabuf: fix memory leak on last export_udmabuf() error path {CVE-2024-56712}
  • ALSA: control: Avoid WARN() for symlink errors {CVE-2024-56657}
  • mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM {CVE-2024-56611}
  • eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682}
  • net: annotate data-races around sk->sk_{data_ready,write_space} {CVE-2026-23302}
  • udmabuf: change folios array from kmalloc to kvmalloc {CVE-2024-56544}
  • RDMA/mlx5: Move events notifier registration to be after device registration {CVE-2024-53224}
  • dlm: fix possible lkb_resource…
Record
CLSA-2026-1783791447
Updated
2026-11-02
OSV No score

openvswitch: fix lockup on tx to unregistering netdev with carrier

In the Linux kernel, the following vulnerability has been resolved:

openvswitch: fix lockup on tx to unregistering netdev with carrier

Commit in a fixes tag attempted to fix the issue in the following sequence of calls:

do_output
-> ovs_vport_send
   -> dev_queue_xmit
      -> __dev_queue_xmit
         -> netdev_core_pick_tx
            -> skb_tx_hash

When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever.

But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK.

One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot.

Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway.

While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.

Record
CVE-2025-21681
Updated
2026-11-07
OSVSUSE-SU-2025:0564-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
  • CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
  • CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
  • CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
  • CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
  • CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
  • CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487).
  • CVE-2024-56610: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390).
  • CVE-2024-56633: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (bsc#1235485).
  • CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56665: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (bsc#1235489).
  • CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498).
  • CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418).
  • CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545).
  • CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (bsc#1235612).
  • CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (bsc#1235578).
  • CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (bsc#1235582).
  • CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583).
  • CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656).
  • CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).
  • CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).
  • CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).
  • CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).
  • CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).
  • CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
  • CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
  • CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).
  • CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).
  • CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
  • CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).
  • CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).
  • CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
  • CVE-2025-21665: filemap: avoid…
Record
SUSE-SU-2025:0564-1
Updated
2026-11-02
OSVSUSE-SU-2025:0847-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
  • CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).
  • CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).
  • CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
  • CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
  • CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
  • CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
  • CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
  • CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
  • CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
  • CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (bsc#1236680).
  • CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
  • CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
  • CVE-2025-21669: vsock/virtio: discard packets if the transport changes (bsc#1236683).
  • CVE-2025-21670: vsock/bpf: return early if transport is not assigned (bsc#1236685).
  • CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
  • CVE-2025-21675: net/mlx5: Clear port select structure when fail to create (bsc#1236694).
  • CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
  • CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
  • CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
  • CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
  • CVE-2025-21700: net: sched:…
Record
SUSE-SU-2025:0847-1
Updated
2026-11-02
OSVSUSE-SU-2025:0856-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
  • CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
  • CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).
  • CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
  • CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
  • CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
  • CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
  • CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
  • CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
  • CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
  • CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
  • CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
  • CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
  • CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
  • CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
  • CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
  • CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21728: bpf: Send signals asynchronously if !preemptible (bsc#1237879).
  • CVE-2025-21705: mptcp: handle fastopen disconnect correctly (bsc#1238525).
  • CVE-2025-21715: net: davicom: fix UAF in dm9000_drv_remove (bsc#1237889).
  • CVE-2025-21716: vxlan: Fix uninit-value in vxlan_vnifilter_dump() (bsc#1237891).
  • CVE-2025-21719: ipmr: do not call mr_mfc_uses_dev() for unres entries (bsc#1238860).
  • CVE-2025-21724: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (bsc#1238863).
  • CVE-2025-21725: smb: client: fix oops due to unset link speed (bsc#1238877). -…
Record
SUSE-SU-2025:0856-1
Updated
2026-11-02
OSVSUSE-SU-2025:0955-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
  • CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
  • CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).
  • CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
  • CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
  • CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
  • CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
  • CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
  • CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
  • CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
  • CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
  • CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
  • CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
  • CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
  • CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
  • CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
  • CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21705: mptcp: handle fastopen disconnect correctly (bsc#1238525).
  • CVE-2025-21715: net: davicom: fix UAF in dm9000_drv_remove (bsc#1237889).
  • CVE-2025-21716: vxlan: Fix uninit-value in vxlan_vnifilter_dump() (bsc#1237891).
  • CVE-2025-21719: ipmr: do not call mr_mfc_uses_dev() for unres entries (bsc#1238860).
  • CVE-2025-21724: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (bsc#1238863).
  • CVE-2025-21725: smb: client: fix oops due to unset link speed (bsc#1238877).
  • CVE-2025-21728: bpf: Send signals asynchronously if !preemptible (bsc#1237879).
  • CVE-2025-21767: clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic…
Record
SUSE-SU-2025:0955-1
Updated
2026-11-02
OSVSUSE-SU-2025:20190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
  • CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
  • CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
  • CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…
Record
SUSE-SU-2025:20190-1
Updated
2026-11-02
OSVSUSE-SU-2025:20192-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
  • CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
  • CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free…
Record
SUSE-SU-2025:20192-1
Updated
2026-11-02
OSVSUSE-SU-2025:20260-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
  • CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
  • CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
  • CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
  • CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
  • CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…
Record
SUSE-SU-2025:20260-1
Updated
2026-11-02
OSVSUSE-SU-2025:20270-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
  • CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
  • CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
  • CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
  • CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
  • CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
  • CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
  • CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
  • CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
  • CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free…
Record
SUSE-SU-2025:20270-1
Updated
2026-11-02
OSVSUSE-SU-2026:0473-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50347: mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (bsc#1249928).
  • CVE-2022-50580: blk-throttle: prevent overflow while calculating wait time (bsc#1252542).
  • CVE-2022-50676: net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() (bsc#1254689).
  • CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
  • CVE-2022-50709: wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (bsc#1255565).
  • CVE-2022-50716: wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (bsc#1255839).
  • CVE-2022-50717: nvmet-tcp: add bounds check on Transfer Tag (bsc#1255844).
  • CVE-2022-50719: ALSA: line6: fix stack overflow in line6_midi_transmit (bsc#1255939).
  • CVE-2022-50740: wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (bsc#1256155).
  • CVE-2022-50744: scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs (bsc#1256165).
  • CVE-2022-50749: acct: fix potential integer overflow in encode_comp_t() (bsc#1256191).
  • CVE-2022-50751: configfs: fix possible memory leak in configfs_create_dir() (bsc#1256184).
  • CVE-2022-50760: drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (bsc#1255983).
  • CVE-2022-50770: ocfs2: fix memory leak in ocfs2_mount_volume() (bsc#1256221).
  • CVE-2022-50777: net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (bsc#1256320).
  • CVE-2022-50780: net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (bsc#1256305).
  • CVE-2022-50782: ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1256282).
  • CVE-2022-50786: media: s5p-mfc: Clear workbit to handle error condition (bsc#1256258).
  • CVE-2022-50816: ipv6: ensure sane device mtu in tunnels (bsc#1256038).
  • CVE-2022-50834: nfc: Fix potential resource leaks (bsc#1256219).
  • CVE-2022-50865: tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (bsc#1256168).
  • CVE-2022-50868: hwrng: amd - Fix PCI device refcount leak (bsc#1256386).
  • CVE-2022-50880: wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (bsc#1256132).
  • CVE-2022-50881: ath9k: Fix typo in function name (bsc#1256130).
  • CVE-2022-50884: drm: Prevent drm_copy_field() to attempt copying a NULL pointer (bsc#1256127).
  • CVE-2022-50885: RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (bsc#1256122).
  • CVE-2022-50887: regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (bsc#1256125).
  • CVE-2023-50756: nvme-pci: fix mempool alloc size (bsc#1256216).
  • CVE-2023-53685: tun: Fix memory leak for detached NAPI queue (bsc#1251770).
  • CVE-2023-53747: vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (bsc#1254572).
  • CVE-2023-53751: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1254986).
  • CVE-2023-53825: kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg() (bsc#1254707).
  • CVE-2023-53853: netlink: annotate accesses to nlk->cb_running (bsc#1254673).
  • CVE-2023-53863: netlink: do not hard code device address lenth in fdb dumps (bsc#1254657).
  • CVE-2023-53992: wifi: cfg80211: ocb: don't leave if not joined (bsc#1256058).
  • CVE-2023-54012: net: fix stack overflow when LRO is disabled for virtual interfaces (bsc#1255571).
  • CVE-2023-54047: drm/rockchip: dw_hdmi: cleanup drm encoder during unbind (bsc#1256398).
  • CVE-2023-54048: RDMA/bnxt_re: Prevent handling any completions after qp destroy (bsc#1256395).
  • CVE-2023-54067: btrfs: fix race when deleting free space root from the dirty cow roots list (bsc#1256369).
  • CVE-2023-54111: pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (bsc#1256149).
  • CVE-2023-54112: kcm: Fix memory leak in error path of kcm_sendmsg() (bsc#1256354).
  • CVE-2023-54118: serial: sc16is7xx: setup GPIO controller later in probe…
Record
SUSE-SU-2026:0473-1
Updated
2026-11-02
OSVUSN-7445-1 No score

linux, linux-aws, linux-gcp, linux-hwe-6.11, linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oem-6.11, linux-oracle, linux-raspi, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • GPIO subsystem;
  • GPU drivers;
  • IRQ chip drivers;
  • Network drivers;
  • Mellanox network drivers;
  • x86 platform drivers;
  • i.MX PM domains;
  • SCSI subsystem;
  • USB Serial drivers;
  • AFS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • Proc file system;
  • SMB network file system;
  • Timer subsystem;
  • Kernel CPU control infrastructure;
  • Memory management;
  • Networking core;
  • Ethtool driver;
  • IEEE 802.15.4 subsystem;
  • Open vSwitch;
  • Network traffic control;
  • VMware vSockets driver; (CVE-2025-21685, CVE-2025-21684, CVE-2025-21756, CVE-2025-21670, CVE-2024-57949, CVE-2025-21677, CVE-2025-21680, CVE-2025-21703, CVE-2024-57952, CVE-2025-21674, CVE-2025-21701, CVE-2025-21691, CVE-2025-21689, CVE-2025-21668, CVE-2025-21665, CVE-2025-21683, CVE-2025-21675, CVE-2025-21672, CVE-2024-57948, CVE-2025-21669, CVE-2025-21673, CVE-2025-21692, CVE-2025-21699, CVE-2025-21702, CVE-2025-21682, CVE-2025-21690, CVE-2025-21681, CVE-2025-21695, CVE-2025-21696, CVE-2025-21700, CVE-2025-21678, CVE-2025-21676, CVE-2024-57950, CVE-2025-21666, CVE-2025-21694, CVE-2025-21693, CVE-2025-21993, CVE-2024-57951, CVE-2025-21697, CVE-2025-21667)
Record
USN-7445-1
Updated
2026-11-02
OSVUSN-7448-1 No score

linux-azure, linux-azure-6.11 vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • GPIO subsystem;
  • GPU drivers;
  • IRQ chip drivers;
  • Network drivers;
  • Mellanox network drivers;
  • x86 platform drivers;
  • i.MX PM domains;
  • SCSI subsystem;
  • USB Serial drivers;
  • AFS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • Proc file system;
  • SMB network file system;
  • Timer subsystem;
  • Kernel CPU control infrastructure;
  • Memory management;
  • Networking core;
  • Ethtool driver;
  • IEEE 802.15.4 subsystem;
  • Open vSwitch;
  • Network traffic control;
  • VMware vSockets driver; (CVE-2025-21694, CVE-2025-21993, CVE-2025-21684, CVE-2025-21681, CVE-2025-21675, CVE-2025-21672, CVE-2025-21696, CVE-2025-21691, CVE-2025-21683, CVE-2025-21666, CVE-2025-21682, CVE-2025-21697, CVE-2025-21668, CVE-2025-21701, CVE-2025-21670, CVE-2025-21676, CVE-2025-21695, CVE-2025-21692, CVE-2025-21674, CVE-2025-21699, CVE-2024-57948, CVE-2025-21677, CVE-2024-57951, CVE-2025-21702, CVE-2025-21700, CVE-2024-57949, CVE-2025-21669, CVE-2025-21703, CVE-2025-21756, CVE-2025-21667, CVE-2024-57952, CVE-2024-57950, CVE-2025-21685, CVE-2025-21693, CVE-2025-21678, CVE-2025-21665, CVE-2025-21680, CVE-2025-21689, CVE-2025-21690, CVE-2025-21673)
Record
USN-7448-1
Updated
2026-11-02
OSVUSN-7595-1 No score

linux, linux-aws, linux-aws-6.8, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8 vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • GPIO subsystem;
  • GPU drivers;
  • InfiniBand drivers;
  • IRQ chip drivers;
  • Network drivers;
  • Mellanox network drivers;
  • i.MX PM domains;
  • SCSI subsystem;
  • USB Serial drivers;
  • AFS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • File system notification infrastructure;
  • Overlay file system;
  • Proc file system;
  • SMB network file system;
  • Timer subsystem;
  • Kernel CPU control infrastructure;
  • Memory management;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Open vSwitch;
  • Network traffic control;
  • VMware vSockets driver; (CVE-2025-21943, CVE-2025-21672, CVE-2024-57952, CVE-2024-57949, CVE-2025-21683, CVE-2025-21690, CVE-2025-21699, CVE-2025-21676, CVE-2024-57924, CVE-2025-21694, CVE-2024-57948, CVE-2025-21675, CVE-2024-57951, CVE-2025-21692, CVE-2025-21684, CVE-2025-21668, CVE-2025-21665, CVE-2025-21667, CVE-2025-21670, CVE-2025-21674, CVE-2025-21697, CVE-2024-53124, CVE-2025-21666, CVE-2025-21682, CVE-2025-21680, CVE-2025-21681, CVE-2025-21691, CVE-2025-21669, CVE-2025-21673, CVE-2024-50157, CVE-2025-21689, CVE-2025-21678)
Record
USN-7595-1
Updated
2026-11-02
OSVUSN-7595-2 No score

linux-realtime vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • GPIO subsystem;
  • GPU drivers;
  • InfiniBand drivers;
  • IRQ chip drivers;
  • Network drivers;
  • Mellanox network drivers;
  • i.MX PM domains;
  • SCSI subsystem;
  • USB Serial drivers;
  • AFS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • File system notification infrastructure;
  • Overlay file system;
  • Proc file system;
  • SMB network file system;
  • Timer subsystem;
  • Kernel CPU control infrastructure;
  • Memory management;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Open vSwitch;
  • Network traffic control;
  • VMware vSockets driver; (CVE-2025-21943, CVE-2025-21672, CVE-2024-57952, CVE-2024-57949, CVE-2025-21683, CVE-2025-21690, CVE-2025-21699, CVE-2025-21676, CVE-2024-57924, CVE-2025-21694, CVE-2024-57948, CVE-2025-21675, CVE-2024-57951, CVE-2025-21692, CVE-2025-21684, CVE-2025-21668, CVE-2025-21665, CVE-2025-21667, CVE-2025-21670, CVE-2025-21674, CVE-2025-21697, CVE-2024-53124, CVE-2025-21666, CVE-2025-21682, CVE-2025-21680, CVE-2025-21681, CVE-2025-21691, CVE-2025-21669, CVE-2025-21673, CVE-2024-50157, CVE-2025-21689, CVE-2025-21678)
Record
USN-7595-2
Updated
2026-11-02
OSVUSN-7595-3 No score

linux-raspi-realtime vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • GPIO subsystem;
  • GPU drivers;
  • InfiniBand drivers;
  • IRQ chip drivers;
  • Network drivers;
  • Mellanox network drivers;
  • i.MX PM domains;
  • SCSI subsystem;
  • USB Serial drivers;
  • AFS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • File system notification infrastructure;
  • Overlay file system;
  • Proc file system;
  • SMB network file system;
  • Timer subsystem;
  • Kernel CPU control infrastructure;
  • Memory management;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Open vSwitch;
  • Network traffic control;
  • VMware vSockets driver; (CVE-2025-21943, CVE-2025-21672, CVE-2024-57952, CVE-2024-57949, CVE-2025-21683, CVE-2025-21690, CVE-2025-21699, CVE-2025-21676, CVE-2024-57924, CVE-2025-21694, CVE-2024-57948, CVE-2025-21675, CVE-2024-57951, CVE-2025-21692, CVE-2025-21684, CVE-2025-21668, CVE-2025-21665, CVE-2025-21667, CVE-2025-21670, CVE-2025-21674, CVE-2025-21697, CVE-2024-53124, CVE-2025-21666, CVE-2025-21682, CVE-2025-21680, CVE-2025-21681, CVE-2025-21691, CVE-2025-21669, CVE-2025-21673, CVE-2024-50157, CVE-2025-21689, CVE-2025-21678)
Record
USN-7595-3
Updated
2026-11-02
OSVUSN-7595-4 No score

linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • GPIO subsystem;
  • GPU drivers;
  • InfiniBand drivers;
  • IRQ chip drivers;
  • Network drivers;
  • Mellanox network drivers;
  • i.MX PM domains;
  • SCSI subsystem;
  • USB Serial drivers;
  • AFS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • File system notification infrastructure;
  • Overlay file system;
  • Proc file system;
  • SMB network file system;
  • Timer subsystem;
  • Kernel CPU control infrastructure;
  • Memory management;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Open vSwitch;
  • Network traffic control;
  • VMware vSockets driver; (CVE-2025-21943, CVE-2025-21672, CVE-2024-57952, CVE-2024-57949, CVE-2025-21683, CVE-2025-21690, CVE-2025-21699, CVE-2025-21676, CVE-2024-57924, CVE-2025-21694, CVE-2024-57948, CVE-2025-21675, CVE-2024-57951, CVE-2025-21692, CVE-2025-21684, CVE-2025-21668, CVE-2025-21665, CVE-2025-21667, CVE-2025-21670, CVE-2025-21674, CVE-2025-21697, CVE-2024-53124, CVE-2025-21666, CVE-2025-21682, CVE-2025-21680, CVE-2025-21681, CVE-2025-21691, CVE-2025-21669, CVE-2025-21673, CVE-2024-50157, CVE-2025-21689, CVE-2025-21678)
Record
USN-7595-4
Updated
2026-11-02
OSVUSN-7595-5 No score

linux-gcp, linux-gcp-6.8 vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • GPIO subsystem;
  • GPU drivers;
  • InfiniBand drivers;
  • IRQ chip drivers;
  • Network drivers;
  • Mellanox network drivers;
  • i.MX PM domains;
  • SCSI subsystem;
  • USB Serial drivers;
  • AFS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • File system notification infrastructure;
  • Overlay file system;
  • Proc file system;
  • SMB network file system;
  • Timer subsystem;
  • Kernel CPU control infrastructure;
  • Memory management;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Open vSwitch;
  • Network traffic control;
  • VMware vSockets driver; (CVE-2025-21943, CVE-2025-21672, CVE-2024-57952, CVE-2024-57949, CVE-2025-21683, CVE-2025-21690, CVE-2025-21699, CVE-2025-21676, CVE-2024-57924, CVE-2025-21694, CVE-2024-57948, CVE-2025-21675, CVE-2024-57951, CVE-2025-21692, CVE-2025-21684, CVE-2025-21668, CVE-2025-21665, CVE-2025-21667, CVE-2025-21670, CVE-2025-21674, CVE-2025-21697, CVE-2024-53124, CVE-2025-21666, CVE-2025-21682, CVE-2025-21680, CVE-2025-21681, CVE-2025-21691, CVE-2025-21669, CVE-2025-21673, CVE-2024-50157, CVE-2025-21689, CVE-2025-21678)
Record
USN-7595-5
Updated
2026-11-02
OSVUSN-7596-1 No score

linux-azure, linux-azure-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • GPIO subsystem;
  • GPU drivers;
  • InfiniBand drivers;
  • IRQ chip drivers;
  • Network drivers;
  • Mellanox network drivers;
  • i.MX PM domains;
  • SCSI subsystem;
  • USB Serial drivers;
  • AFS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • File system notification infrastructure;
  • Overlay file system;
  • Proc file system;
  • SMB network file system;
  • Timer subsystem;
  • Kernel CPU control infrastructure;
  • Memory management;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Open vSwitch;
  • Network traffic control;
  • VMware vSockets driver; (CVE-2025-21675, CVE-2025-21697, CVE-2025-21668, CVE-2024-57951, CVE-2025-21680, CVE-2024-50157, CVE-2025-21699, CVE-2025-21669, CVE-2025-21678, CVE-2025-21665, CVE-2024-57924, CVE-2024-57949, CVE-2024-53124, CVE-2025-21684, CVE-2025-21676, CVE-2025-21672, CVE-2025-21682, CVE-2025-21670, CVE-2025-21690, CVE-2025-21673, CVE-2025-21691, CVE-2024-57952, CVE-2025-21674, CVE-2025-21689, CVE-2025-21943, CVE-2025-21692, CVE-2025-21667, CVE-2025-21666, CVE-2024-57948, CVE-2025-21694, CVE-2025-21683, CVE-2025-21681)
Record
USN-7596-1
Updated
2026-11-02
OSVUSN-7596-2 No score

linux-azure-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • GPIO subsystem;
  • GPU drivers;
  • InfiniBand drivers;
  • IRQ chip drivers;
  • Network drivers;
  • Mellanox network drivers;
  • i.MX PM domains;
  • SCSI subsystem;
  • USB Serial drivers;
  • AFS file system;
  • GFS2 file system;
  • File systems infrastructure;
  • File system notification infrastructure;
  • Overlay file system;
  • Proc file system;
  • SMB network file system;
  • Timer subsystem;
  • Kernel CPU control infrastructure;
  • Memory management;
  • Networking core;
  • DCCP (Datagram Congestion Control Protocol);
  • IPv6 networking;
  • IEEE 802.15.4 subsystem;
  • Open vSwitch;
  • Network traffic control;
  • VMware vSockets driver; (CVE-2025-21675, CVE-2025-21697, CVE-2025-21668, CVE-2024-57951, CVE-2025-21680, CVE-2024-50157, CVE-2025-21699, CVE-2025-21669, CVE-2025-21678, CVE-2025-21665, CVE-2024-57924, CVE-2024-57949, CVE-2024-53124, CVE-2025-21684, CVE-2025-21676, CVE-2025-21672, CVE-2025-21682, CVE-2025-21670, CVE-2025-21690, CVE-2025-21673, CVE-2025-21691, CVE-2024-57952, CVE-2025-21674, CVE-2025-21689, CVE-2025-21943, CVE-2025-21692, CVE-2025-21667, CVE-2025-21666, CVE-2024-57948, CVE-2025-21694, CVE-2025-21683, CVE-2025-21681)
Record
USN-7596-2
Updated
2026-11-02
OSVUSN-7653-1 No score

linux-hwe-6.8 vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • S390 architecture;
  • Block layer subsystem;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Network block device driver;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • FireWire subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • Network drivers;
  • Mellanox network drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • x86 platform drivers;
  • i.MX PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • Remote Processor subsystem;
  • Real Time Clock drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • Media staging drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • USB Serial drivers;
  • AFS file system;
  • File systems infrastructure;
  • BTRFS file system;
  • F2FS file system;
  • GFS2 file system;
  • NILFS2 file system;
  • File system notification infrastructure;
  • Overlay file system;
  • Proc file system;
  • SMB network file system;
  • UBI file system;
  • Timer subsystem;
  • KVM subsystem;
  • Networking core;
  • ptr_ring data structure definitions;
  • Networking subsytem;
  • Amateur Radio drivers;
  • XFRM subsystem;
  • Tracing infrastructure;
  • BPF subsystem;
  • Kernel CPU control infrastructure;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Memory management;
  • Bluetooth subsystem;
  • DCCP (Datagram Congestion Control Protocol);
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • IEEE 802.15.4 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • RxRPC session sockets;
  • Network traffic control;
  • VMware vSockets driver;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module;
  • SoC audio core drivers; (CVE-2025-21830, CVE-2025-21678, CVE-2025-21815, CVE-2024-57974, CVE-2025-21725, CVE-2025-21718, CVE-2025-21748, CVE-2025-21732, CVE-2024-57953, CVE-2025-21727, CVE-2025-21816, CVE-2025-21719, CVE-2024-53124, CVE-2024-58019, CVE-2025-38001, CVE-2025-21720, CVE-2025-21734, CVE-2025-21672, CVE-2025-21692, CVE-2024-58076, CVE-2025-21694, CVE-2024-58061, CVE-2025-21714, CVE-2025-21689, CVE-2024-49887, CVE-2024-57949, CVE-2025-38177, CVE-2025-21683, CVE-2025-21669, CVE-2025-21722, CVE-2024-57980, CVE-2025-38000, CVE-2025-37932, CVE-2024-58034, CVE-2024-58081, CVE-2025-21733, CVE-2025-21682, CVE-2024-57924, CVE-2025-21743, CVE-2024-57975, CVE-2025-37798, CVE-2024-58058, CVE-2025-21809, CVE-2025-21676, CVE-2024-57993, CVE-2025-21699, CVE-2024-58016, CVE-2025-21832, CVE-2025-21804, CVE-2024-58011, CVE-2024-58007, CVE-2025-21826, CVE-2024-58055, CVE-2025-21668, CVE-2025-21715, CVE-2024-58078, CVE-2025-21829, CVE-2025-21811, CVE-2025-21814, CVE-2024-58053, CVE-2025-21726, CVE-2025-21943, CVE-2025-37750, CVE-2025-21673, CVE-2024-57984, CVE-2025-37997, CVE-2025-21684, CVE-2025-21750, CVE-2024-58013, CVE-2025-21799, CVE-2024-58083, CVE-2025-21798, CVE-2025-21731, CVE-2025-21708, CVE-2024-57986, CVE-2025-21744, CVE-2024-58014, CVE-2025-21721, CVE-2024-58063, CVE-2024-57979, CVE-2024-58005, CVE-2025-21728, CVE-2025-21681, CVE-2025-21806, CVE-2024-57982, CVE-2024-58002, CVE-2024-58082, CVE-2025-21812, CVE-2025-21745, CVE-2024-58017, CVE-2025-21665, CVE-2025-21828, CVE-2025-37890,…
Record
USN-7653-1
Updated
2026-11-03

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Azure Linux:3
before 6.6.76.1-1
6.6.76.1-1
linux-lts
Alpaquita:23
6.1.124-r0 up to 6.1.127-r0
6.1.127-r0
linux-lts
Alpaquita:25
6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel-uek
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel-uek-container
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel-uek-container-debug
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel-uek-debug
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel-uek-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-uek-devel
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel-uek-headers
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel-uek-tools
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
perf
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
python-perf
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-abi-stablelists
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-cross-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-uki-virt-addons
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-doc
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-debug-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-debug-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-selftests-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-tools
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-tools-libs
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-uki-virt
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-uki-virt-addons
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
libperf
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
libperf-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
perf
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
python3-perf
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
rtla
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
rv
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 7.0.0-284.1101.el9_2.tuxcare.11.els8
7.0.0-284.1101.el9_2.tuxcare.11.els8
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 305 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.11.els8
5.14.0-284.1101.el9_2.tuxcare.11.els8
Kernel
Linux
before 6.1.127, 6.2.0 up to 6.6.74, 6.3.0 up to 6.12.11
6.1.1276.6.746.12.11
linux
Debian:12
before 6.1.128-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 29 moreShow less
6.1.119-16.1.123-16.1.124-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.128-1
linux
Debian:13
before 6.12.11-1
6.12.11-1
linux
Debian:14
before 6.12.11-1
6.12.11-1
linux-6.1
Debian:11
From an advisory covering 333 CVEs
before 6.1.128-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1
6.1.128-1~deb11u1
linux
Debian:12
From an advisory covering 60 CVEs
before 6.1.128-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 29 moreShow less
6.1.119-16.1.123-16.1.124-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.128-1
kernel
openEuler:24.03-LTS
From an advisory covering 33 CVEs
before 6.6.0-85.0.0.79.oe2403
6.6.0-85.0.0.79.oe2403
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 37 CVEs
before 6.6.0-85.0.0.90.oe2403sp1
6.6.0-85.0.0.90.oe2403sp1
kernel-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 54 CVEs
before 6.4.0-15061.15.coco15sp6.1
6.4.0-15061.15.coco15sp6.1
kernel-coco_debug
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 54 CVEs
before 6.4.0-15061.15.coco15sp6.1
6.4.0-15061.15.coco15sp6.1
kernel-source-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 54 CVEs
before 6.4.0-15061.15.coco15sp6.1
6.4.0-15061.15.coco15sp6.1
kernel-syms-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 54 CVEs
before 6.4.0-15061.15.coco15sp6.1
6.4.0-15061.15.coco15sp6.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 83 CVEs
before 6.4.0-150600.8.31.1
6.4.0-150600.8.31.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 83 CVEs
before 6.4.0-150600.8.31.1
6.4.0-150600.8.31.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 83 CVEs
before 6.4.0-150600.8.31.1
6.4.0-150600.8.31.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 83 CVEs
before 6.4.0-150600.8.31.1
6.4.0-150600.8.31.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 83 CVEs
before 6.4.0-150600.8.31.1
6.4.0-150600.8.31.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 83 CVEs
before 6.4.0-150600.8.31.1
6.4.0-150600.8.31.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2.150600.12.18.4
6.4.0-150600.23.42.2.150600.12.18.4
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-livepatch-SLE15-SP6_Update_9
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 72 CVEs
before 1-150600.13.3.4
1-150600.13.3.4
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-default
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2.150600.12.18.4
6.4.0-150600.23.42.2.150600.12.18.4
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.1
6.4.0-150600.23.42.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 72 CVEs
before 6.4.0-150600.23.42.2
6.4.0-150600.23.42.2
kernel-livepatch-SLE15-SP6-RT_Update_9
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 71 CVEs
before 1-150600.1.3.2
1-150600.1.3.2
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 71 CVEs
before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 71 CVEs
before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 71 CVEs
before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 71 CVEs
before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 71 CVEs
before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 71 CVEs
before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 71 CVEs
before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 71 CVEs
before 6.4.0-150600.10.29.1
6.4.0-150600.10.29.1
kernel-livepatch-MICRO-6-0-RT_Update_6
SUSE:Linux Micro 6.0
From an advisory covering 272 CVEs
before 1-3.1
1-3.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 272 CVEs
before 6.4.0-28.1
6.4.0-28.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 272 CVEs
before 6.4.0-28.1
6.4.0-28.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 347 CVEs
before 6.4.0-28.1
6.4.0-28.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 347 CVEs
before 6.4.0-28.1.21.6
6.4.0-28.1.21.6
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 347 CVEs
before 6.4.0-28.1
6.4.0-28.1
kernel-livepatch-MICRO-6-0_Update_6
SUSE:Linux Micro 6.0
From an advisory covering 347 CVEs
before 1-3.1
1-3.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 347 CVEs
before 6.4.0-28.1
6.4.0-28.1
kernel-livepatch-MICRO-6-0-RT_Update_6
SUSE:Linux Micro 6.1
From an advisory covering 272 CVEs
before 1-3.1
1-3.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 272 CVEs
before 6.4.0-28.1
6.4.0-28.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 272 CVEs
before 6.4.0-28.1
6.4.0-28.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 347 CVEs
before 6.4.0-28.1
6.4.0-28.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 347 CVEs
before 6.4.0-28.1.21.6
6.4.0-28.1.21.6
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 347 CVEs
before 6.4.0-28.1
6.4.0-28.1
kernel-livepatch-MICRO-6-0_Update_6
SUSE:Linux Micro 6.1
From an advisory covering 347 CVEs
before 1-3.1
1-3.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 347 CVEs
before 6.4.0-28.1
6.4.0-28.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 145 CVEs
before 4.12.14-122.293.1
4.12.14-122.293.1
kgraft-patch-SLE12-SP5_Update_77
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 145 CVEs
before 1-8.3.1
1-8.3.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 145 CVEs
before 4.12.14-122.293.1
4.12.14-122.293.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 145 CVEs
before 4.12.14-122.293.1
4.12.14-122.293.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 145 CVEs
before 4.12.14-122.293.1
4.12.14-122.293.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 145 CVEs
before 4.12.14-122.293.1
4.12.14-122.293.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 145 CVEs
before 4.12.14-122.293.1
4.12.14-122.293.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 145 CVEs
before 4.12.14-122.293.1
4.12.14-122.293.1
linux-hwe-edge
Ubuntu:16.04:LTS
All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
None known
linux-aws-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
None known
linux-aws-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
None known
linux-azure
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
None known
linux-azure-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
None known
linux-azure-edge
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
None known
linux-gcp
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
None known
linux-gcp-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
None known
linux-gke-4.15
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
None known
linux-gke-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
None known
linux-hwe
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
None known
linux-hwe-edge
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
None known
linux-oem
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
None known
linux-oracle-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
None known
linux-oracle-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
None known
linux-aws-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
None known
linux-aws-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
None known
linux-aws-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
None known
linux-azure-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
None known
linux-azure-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
None known
linux-azure-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
None known
linux-azure-fde
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
None known
linux-bluefield
Ubuntu:Pro:20.04:LTS
All versions, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 45 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92
None known
linux-gcp-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
None known
linux-gcp-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
None known
linux-gcp-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
None known
linux-gke
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
None known
linux-gke-5.15
Ubuntu:20.04:LTS
All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
None known
linux-gkeop
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
None known
linux-hwe-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
None known
linux-hwe-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
None known
linux-hwe-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
None known
linux-intel-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
None known
linux-oem-5.10
Ubuntu:20.04:LTS
All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
None known
linux-oem-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
None known
linux-oem-5.14
Ubuntu:20.04:LTS
All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
None known
linux-oem-5.6
Ubuntu:20.04:LTS
All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
None known
linux-oracle-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
None known
linux-oracle-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
None known
linux-oracle-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
None known
linux-raspi2
Ubuntu:20.04:LTS
All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
None known
linux-riscv
Ubuntu:20.04:LTS
All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
None known
linux-riscv-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
None known
linux-riscv-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
None known
linux-aws-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
None known
linux-aws-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
None known
linux-aws-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
None known
linux-aws-6.8
Ubuntu:22.04:LTS
before 6.8.0-1030.32~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 12 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.1
6.8.0-1030.32~22.04.1
linux-azure-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
None known
linux-azure-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
None known
linux-azure-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
None known
linux-azure-6.8
Ubuntu:22.04:LTS
before 6.8.0-1030.35~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1
Show 11 moreShow less
6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.1
6.8.0-1030.35~22.04.1
linux-azure-fde-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
None known
linux-gcp-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
None known
linux-gcp-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
None known
linux-gcp-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1
Show 8 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1
None known
linux-gcp-6.8
Ubuntu:22.04:LTS
before 6.8.0-1031.33~22.04.1, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1
Show 14 moreShow less
6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.1
6.8.0-1031.33~22.04.1
linux-hwe-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
None known
linux-hwe-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1
Show 5 moreShow less
6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1
None known
linux-hwe-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1
Show 8 moreShow less
6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1
None known
linux-hwe-6.8
Ubuntu:22.04:LTS
before 6.8.0-64.67~22.04.1, plus listed versions
6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1
Show 9 moreShow less
6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.1
6.8.0-64.67~22.04.1
linux-ibm-6.8
Ubuntu:22.04:LTS
before 6.8.0-1027.27~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1
Show 10 moreShow less
6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.1
6.8.0-1027.27~22.04.1
linux-intel-iot-realtime
Ubuntu:22.04:LTS
All versions, plus listed versions
5.15.0-1073.75
None known
linux-lowlatency-hwe-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1
Show 5 moreShow less
5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30
None known
linux-lowlatency-hwe-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1
Show 5 moreShow less
6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
None known
linux-lowlatency-hwe-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1
Show 8 moreShow less
6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1
None known
linux-lowlatency-hwe-6.8
Ubuntu:22.04:LTS
before 6.8.0-62.65.1~22.04.1, plus listed versions
6.8.0-38.38.1~22.04.26.8.0-40.40.1~22.04.16.8.0-44.44.1~22.04.16.8.0-45.45.1~22.04.16.8.0-47.47.1~22.04.1
Show 12 moreShow less
6.8.0-48.48.3~22.04.16.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-54.56.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.16.8.0-60.63.1~22.04.1
6.8.0-62.65.1~22.04.1
linux-nvidia-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15
None known
linux-nvidia-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15
Show 6 moreShow less
6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25
None known
linux-nvidia-6.8
Ubuntu:22.04:LTS
before 6.8.0-1029.32~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1
Show 15 moreShow less
6.8.0-1013.14~22.04.16.8.0-1014.15~22.04.16.8.0-1015.16~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1022.25~22.04.26.8.0-1023.26~22.04.16.8.0-1024.27~22.04.16.8.0-1025.28~22.04.16.8.0-1026.29~22.04.16.8.0-1027.30~22.04.16.8.0-1028.31~22.04.1
6.8.0-1029.32~22.04.1
linux-oem-5.17
Ubuntu:22.04:LTS
All versions, plus listed versions
5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13
Show 21 moreShow less
5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36
None known
linux-oem-6.0
Ubuntu:22.04:LTS
All versions, plus listed versions
6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10
Show 11 moreShow less
6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21
None known
linux-oem-6.1
Ubuntu:22.04:LTS
All versions, plus listed versions
6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9
Show 22 moreShow less
6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36
None known
linux-oem-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8
Show 14 moreShow less
6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28
None known
linux-oracle-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1
Show 8 moreShow less
6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1
None known
linux-oracle-6.8
Ubuntu:22.04:LTS
before 6.8.0-1027.28~22.04.1, plus listed versions
6.8.0-1006.6~22.04.36.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1
Show 14 moreShow less
6.8.0-1013.13~22.04.16.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.17~22.04.16.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.20~22.04.16.8.0-1020.21~22.04.16.8.0-1021.22~22.04.16.8.0-1022.23~22.04.16.8.0-1023.24~22.04.16.8.0-1024.25~22.04.16.8.0-1025.26~22.04.16.8.0-1026.27~22.04.1
6.8.0-1027.28~22.04.1
linux-realtime
Ubuntu:22.04:LTS
All versions, plus listed versions
5.15.0-1032.35
None known
linux-riscv
Ubuntu:22.04:LTS
All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
None known
linux-riscv-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1
None known
linux-riscv-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1
Show 5 moreShow less
6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1
None known
linux-riscv-6.8
Ubuntu:22.04:LTS
before 6.8.0-62.65~22.04.1, plus listed versions
6.8.0-38.38.1~22.04.16.8.0-39.39.1~22.04.16.8.0-40.40.1~22.04.16.8.0-41.41.1~22.04.16.8.0-44.44.1~22.04.1
Show 12 moreShow less
6.8.0-47.47.1~22.04.16.8.0-48.48.1~22.04.26.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-53.55.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.1
6.8.0-62.65~22.04.1
linux-starfive-5.19
Ubuntu:22.04:LTS
All versions, plus listed versions
5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1
None known
linux-starfive-6.2
Ubuntu:22.04:LTS
All versions, plus listed versions
6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1
None known
linux-starfive-6.5
Ubuntu:22.04:LTS
All versions, plus listed versions
6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1
Show 6 moreShow less
6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.16.5.0-1017.18~22.04.16.5.0-1018.19~22.04.1
None known
linux-bluefield
Ubuntu:Nvidia-BlueField:22.04:LTS
before 5.15.0-1072.74, plus listed versions
5.15.0-1011.135.15.0-1014.165.15.0-1015.175.15.0-1017.195.15.0-1019.21
Show 39 moreShow less
5.15.0-1021.235.15.0-1022.245.15.0-1023.255.15.0-1024.265.15.0-1027.295.15.0-1028.305.15.0-1031.335.15.0-1032.345.15.0-1033.355.15.0-1035.375.15.0-1036.385.15.0-1037.395.15.0-1038.405.15.0-1040.425.15.0-1042.445.15.0-1043.455.15.0-1044.465.15.0-1045.475.15.0-1047.495.15.0-1048.505.15.0-1050.525.15.0-1051.535.15.0-1052.545.15.0-1053.555.15.0-1054.565.15.0-1056.585.15.0-1057.595.15.0-1058.605.15.0-1059.615.15.0-1060.625.15.0-1061.635.15.0-1062.645.15.0-1063.655.15.0-1064.665.15.0-1065.675.15.0-1066.685.15.0-1067.695.15.0-1069.715.15.0-1070.72
5.15.0-1072.74
linux-realtime-6.8
Ubuntu:Pro:Realtime:22.04:LTS
before 6.8.1-1023.24~22.04.1, plus listed versions
6.8.1-1004.4~22.04.16.8.1-1005.5~22.04.26.8.1-1006.6~22.04.16.8.1-1007.7~22.04.16.8.1-1008.8~22.04.1
Show 14 moreShow less
6.8.1-1009.9~22.04.16.8.1-1010.10~22.04.16.8.1-1011.11~22.04.16.8.1-1012.12~22.04.16.8.1-1013.14~22.04.16.8.1-1014.15~22.04.16.8.1-1015.16~22.04.16.8.1-1016.17~22.04.16.8.1-1017.18~22.04.16.8.1-1018.19~22.04.16.8.1-1019.20~22.04.16.8.1-1020.21~22.04.16.8.1-1021.22~22.04.16.8.1-1022.23~22.04.1
6.8.1-1023.24~22.04.1
linux
Ubuntu:24.04:LTS
before 6.8.0-62.65, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 24 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.476.8.0-48.486.8.0-49.496.8.0-50.516.8.0-51.526.8.0-52.536.8.0-53.556.8.0-54.566.8.0-55.576.8.0-56.586.8.0-57.596.8.0-58.606.8.0-59.616.8.0-60.63
6.8.0-62.65
linux-aws
Ubuntu:24.04:LTS
before 6.8.0-1030.32, plus listed versions
6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8
Show 20 moreShow less
6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1023.256.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.31
6.8.0-1030.32
linux-azure
Ubuntu:24.04:LTS
before 6.8.0-1030.35, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6
Show 18 moreShow less
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.206.8.0-1018.216.8.0-1020.236.8.0-1021.256.8.0-1025.306.8.0-1026.316.8.0-1027.326.8.0-1028.336.8.0-1029.34
6.8.0-1030.35
linux-azure-6.11
Ubuntu:24.04:LTS
before 6.11.0-1013.13~24.04.1, plus listed versions
6.11.0-1008.8~24.04.16.11.0-1012.12~24.04.1
6.11.0-1013.13~24.04.1
linux-azure-nvidia
Ubuntu:24.04:LTS
before 6.8.0-1018.19, plus listed versions
6.8.0-1013.146.8.0-1014.156.8.0-1016.17
6.8.0-1018.19
linux-gcp
Ubuntu:24.04:LTS
before 6.8.0-1031.33, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6
Show 22 moreShow less
6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.32
6.8.0-1031.33
linux-gcp-6.11
Ubuntu:24.04:LTS
before 6.11.0-1013.13~24.04.1, plus listed versions
6.11.0-1006.6~24.04.26.11.0-1011.11~24.04.1
6.11.0-1013.13~24.04.1
linux-gke
Ubuntu:24.04:LTS
before 6.8.0-1026.30, plus listed versions
6.8.0-1003.56.8.0-1004.76.8.0-1005.86.8.0-1006.96.8.0-1007.10
Show 17 moreShow less
6.8.0-1008.116.8.0-1009.126.8.0-1010.136.8.0-1011.146.8.0-1012.156.8.0-1013.176.8.0-1014.186.8.0-1015.196.8.0-1016.206.8.0-1017.216.8.0-1019.236.8.0-1020.246.8.0-1021.256.8.0-1022.266.8.0-1023.276.8.0-1024.286.8.0-1025.29
6.8.0-1026.30
linux-gkeop
Ubuntu:24.04:LTS
before 6.8.0-1013.15, plus listed versions
6.8.0-1001.36.8.0-1002.46.8.0-1003.56.8.0-1004.66.8.0-1006.8
Show 6 moreShow less
6.8.0-1007.96.8.0-1008.106.8.0-1009.116.8.0-1010.126.8.0-1011.136.8.0-1012.14
6.8.0-1013.15
linux-hwe-6.11
Ubuntu:24.04:LTS
before 6.11.0-24.24~24.04.1, plus listed versions
6.11.0-17.17~24.04.26.11.0-19.19~24.04.16.11.0-21.21~24.04.1
6.11.0-24.24~24.04.1
linux-ibm
Ubuntu:24.04:LTS
before 6.8.0-1027.27, plus listed versions
6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5
Show 19 moreShow less
6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.156.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1022.226.8.0-1023.236.8.0-1024.246.8.0-1025.256.8.0-1026.26
6.8.0-1027.27
linux-lowlatency
Ubuntu:24.04:LTS
before 6.8.0-62.65.1, plus listed versions
6.5.0-9.9.16.6.0-14.14.16.8.0-7.7.16.8.0-25.25.36.8.0-28.28.1
Show 23 moreShow less
6.8.0-31.31.16.8.0-35.35.16.8.0-36.36.16.8.0-38.38.16.8.0-39.39.16.8.0-40.40.16.8.0-41.41.16.8.0-44.44.16.8.0-45.45.16.8.0-47.47.16.8.0-48.48.36.8.0-49.49.16.8.0-50.51.16.8.0-51.52.16.8.0-52.53.16.8.0-53.55.26.8.0-54.56.16.8.0-55.57.16.8.0-56.58.16.8.0-57.59.16.8.0-58.60.16.8.0-59.61.16.8.0-60.63.1
6.8.0-62.65.1
linux-lowlatency-hwe-6.11
Ubuntu:24.04:LTS
before 6.11.0-1012.13~24.04.1, plus listed versions
6.11.0-1009.10~24.04.16.11.0-1011.12~24.04.1
6.11.0-1012.13~24.04.1
linux-nvidia
Ubuntu:24.04:LTS
before 6.8.0-1029.32, plus listed versions
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.11
Show 16 moreShow less
6.8.0-1012.126.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1022.256.8.0-1023.266.8.0-1024.276.8.0-1025.286.8.0-1026.296.8.0-1027.306.8.0-1028.31
6.8.0-1029.32
linux-nvidia-6.11
Ubuntu:24.04:LTS
before 6.11.0-1007.7, plus listed versions
6.11.0-1002.26.11.0-1003.3
6.11.0-1007.7
linux-nvidia-lowlatency
Ubuntu:24.04:LTS
before 6.8.0-1029.32.1, plus listed versions
6.8.0-1009.9.16.8.0-1011.11.16.8.0-1012.12.16.8.0-1013.14.16.8.0-1014.15.1
Show 13 moreShow less
6.8.0-1015.16.16.8.0-1017.19.16.8.0-1018.20.16.8.0-1019.21.16.8.0-1020.22.16.8.0-1021.23.16.8.0-1022.25.26.8.0-1023.26.16.8.0-1024.27.16.8.0-1025.28.16.8.0-1026.29.16.8.0-1027.30.16.8.0-1028.31.1
6.8.0-1029.32.1
linux-nvidia-tegra
Ubuntu:24.04:LTS
before 6.8.0-1008.8, plus listed versions
6.8.0-1003.36.8.0-1004.4
6.8.0-1008.8
linux-oem-6.11
Ubuntu:24.04:LTS
before 6.11.0-1020.20, plus listed versions
6.11.0-1007.76.11.0-1008.86.11.0-1009.96.11.0-1010.106.11.0-1011.11
Show 6 moreShow less
6.11.0-1012.126.11.0-1013.136.11.0-1015.156.11.0-1016.166.11.0-1017.176.11.0-1018.18
6.11.0-1020.20
linux-oem-6.8
Ubuntu:24.04:LTS
before 6.8.0-1029.29, plus listed versions
6.8.0-1003.36.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.7
Show 17 moreShow less
6.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1020.206.8.0-1024.246.8.0-1025.256.8.0-1026.266.8.0-1027.276.8.0-1028.28
6.8.0-1029.29

History

History
RecordedChangedSources
affectedCVE List, EUVD, NVD
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-21681 is a medium vulnerability (CVSS 5.5) in Linux, published January 31, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. Fixed in kernel 6.6.76.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 86 package rows, 62 versions, 1,816 references and the rest of 15 source descriptions. The JSON record has them.

MoveEnter Open