CVE-2025-21681
openvswitch: fix lockup on tx to unregistering netdev with carrier
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: fix lockup on tx to unregistering netdev with carrier
Commit in a fixes tag attempted to fix the issue in the following sequence of calls:
do_output
-> ovs_vport_send
-> dev_queue_xmit
-> __dev_queue_xmit
-> netdev_core_pick_tx
-> skb_tx_hash
When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever.
But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK.
One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot.
Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway.
While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
5.5
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: fix lockup on tx to unregistering netdev with carrier
Commit in a fixes tag attempted to fix the issue in the following sequence of calls:
do_output
-> ovs_vport_send
-> dev_queue_xmit
-> __dev_queue_xmit
-> netdev_core_pick_tx
-> skb_tx_hash
When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever.
But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK.
One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot.
Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway.
While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.
- Record
CVE-2025-21681- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-05
CVE List No score
openvswitch: fix lockup on tx to unregistering netdev with carrier
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: fix lockup on tx to unregistering netdev with carrier
Commit in a fixes tag attempted to fix the issue in the following sequence of calls:
do_output
-> ovs_vport_send
-> dev_queue_xmit
-> __dev_queue_xmit
-> netdev_core_pick_tx
-> skb_tx_hash
When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever.
But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK.
One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot.
Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway.
While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.
- Record
CVE-2025-21681- Updated
- 2026-11-05
EUVDEUVD-2025-2630 No score
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: fix lockup on tx to unregistering netdev with carrier
Commit in a fixes tag attempted to fix the issue in the following sequence of calls:
do_output
-> ovs_vport_send
-> dev_queue_xmit
-> __dev_queue_xmit
-> netdev_core_pick_tx
-> skb_tx_hash
When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever.
But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK.
One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot.
Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway.
While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.
- Record
EUVD-2025-2630- Updated
- 2026-11-05
GitHub AdvisoriesGHSA-2x4f-r6q9-v77h
5.5
In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on...
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: fix lockup on tx to unregistering netdev with carrier
Commit in a fixes tag attempted to fix the issue in the following sequence of calls:
do_output
-> ovs_vport_send
-> dev_queue_xmit
-> __dev_queue_xmit
-> netdev_core_pick_tx
-> skb_tx_hash
When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever.
But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK.
One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot.
Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway.
While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.
- Record
GHSA-2x4f-r6q9-v77h- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-02
OSVAZL-57055
5.5
CVE-2025-21681 affecting package kernel for versions less than 6.6.76.1-1
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: fix lockup on tx to unregistering netdev with carrier
Commit in a fixes tag attempted to fix the issue in the following sequence of calls:
do_output
-> ovs_vport_send
-> dev_queue_xmit
-> __dev_queue_xmit
-> netdev_core_pick_tx
-> skb_tx_hash
When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever.
But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK.
One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot.
Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway.
While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.
- Record
AZL-57055- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2025-21681
5.5
- Record
BELL-CVE-2025-21681- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 27 moreShow less
OSVDEBIAN-CVE-2025-21681
5.5
In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to unregistering netdev with carrier Commit in a fixes tag attempted to fix the issue in the following sequence of calls: do_output -> ovs_vport_send -> dev_queue_xmit -> __dev_queue_xmit -> netdev_core_pick_tx -> skb_tx_hash When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever. But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK. One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot. Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway. While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.
- Record
DEBIAN-CVE-2025-21681- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2025-1371
7.8
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
fs: relax assertions on failure to encode file handles
Encoding file handles is usually performed by a filesystem >encode_fh() method that may fail for various reasons.
The legacy users of exportfs_encode_fh(), namely, nfsd and name_to_handle_at(2) syscall are ready to cope with the possibility of failure to encode a file handle.
There are a few other users of exportfs_encode_{fh,fid}() that currently have a WARN_ON() assertion when ->encode_fh() fails. Relax those assertions because they are wrong.
The second linked bug report states commit 16aac5ad1fa9 ("ovl: support encoding non-decodable file handles") in v6.6 as the regressing commit, but this is not accurate.
The aforementioned commit only increases the chances of the assertion and allows triggering the assertion with the reproducer using overlayfs, inotify and drop_caches.
Triggering this assertion was always possible with other filesystems and other reasons of ->encode_fh() failures and more particularly, it was also possible with the exact same reproducer using overlayfs that is mounted with options index=on,nfs_export=on also on kernels < v6.6. Therefore, I am not listing the aforementioned commit as a Fixes commit.
Backport hint: this patch will have a trivial conflict applying to v6.6.y, and other trivial conflicts applying to stable kernels < v6.6.(CVE-2024-57924)
In the Linux kernel, the following vulnerability has been resolved:
hrtimers: Handle CPU state correctly on hotplug
Consider a scenario where a CPU transitions from CPUHP_ONLINE to halfway through a CPU hotunplug down to CPUHP_HRTIMERS_PREPARE, and then back to CPUHP_ONLINE:
Since hrtimers_prepare_cpu() does not run, cpu_base.hres_active remains set to 1 throughout. However, during a CPU unplug operation, the tick and the clockevents are shut down at CPUHP_AP_TICK_DYING. On return to the online state, for instance CFS incorrectly assumes that the hrtick is already active, and the chance of the clockevent device to transition to oneshot mode is also lost forever for the CPU, unless it goes back to a lower state than CPUHP_HRTIMERS_PREPARE once.
This round-trip reveals another issue; cpu_base.online is not set to 1 after the transition, which appears as a WARN_ON_ONCE in enqueue_hrtimer().
Aside of that, the bulk of the per CPU state is not reset either, which means there are dangling pointers in the worst case.
Address this by adding a corresponding startup() callback, which resets the stale per CPU state and sets the online flag.
In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Fix double free in error path
If the uvc_status_init() function fails to allocate the int_urb, it will free the dev->status pointer but doesn't reset the pointer to NULL. This results in the kfree() call in uvc_status_cleanup() trying to double-free the memory. Fix it by resetting the dev->status pointer to NULL after freeing it.
Reviewed by: Ricardo Ribalda <[email protected]>(CVE-2024-57980)
In the Linux kernel, the following vulnerability has been resolved:
tpm: Change to kvalloc() in eventlog/acpi.c
The following failure was reported on HPE ProLiant D320:
[ 10.693310][ T1] tpm_tis STM0925:00: 2.0 TPM (device-id 0x3, rev-id 0) [ 10.848132][ T1] ------------[ cut here ]------------ [ 10.853559][ T1] WARNING: CPU: 59 PID: 1 at mm/page_alloc.c:4727 __alloc_pages_noprof+0x2ca/0x330 [ 10.862827][ T1] Modules linked in: [ 10.866671][ T1] CPU: 59 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.12.0-lp155.2.g52785e2-default #1 openSUSE Tumbleweed…
- Record
OESA-2025-1371- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1372
7.8
kernel security update
The Linux Kernel, the operating system core itself.
Security Fix(es):
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: make sure cache entry active before cache_show
The function c_show was called with protection from RCU. This only
ensures that cp will not be freed. Therefore, the reference count for
cp can drop to zero, which will trigger a refcount use-after-free
warning when cache_get is called. To resolve this issue, use
cache_get_rcu to ensure that cp remains active.
------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120
Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e(CVE-2024-53174)
In the Linux kernel, the following vulnerability has been resolved:
ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
Under certain kernel configurations when building with Clang/LLVM, the compiler does not generate a return or jump as the terminator instruction for ip_vs_protocol_init(), triggering the following objtool warning during build time:
vmlinux.o: warning: objtool: ip_vs_protocol_init() falls through to next function __initstub__kmod_ip_vs_rr__935_123_ip_vs_rr_init6()
At runtime, this either causes an oops when trying to load the ipvs module or a boot-time panic if ipvs is built-in. This same issue has been reported by the Intel kernel test robot previously.
Digging deeper into both LLVM and the kernel code reveals this to be a undefined behavior problem. ip_vs_protocol_init() uses a on-stack buffer of 64 chars to store the registered protocol names and leaves it uninitialized after definition. The function calls strnlen() when concatenating protocol names into the buffer. With CONFIG_FORTIFY_SOURCE strnlen() performs an extra step to check whether the last byte of the input char buffer is a null character (commit 3009f891bb9f ("fortify: Allow strlen() and strnlen() to pass compile-time known lengths")). This, together with possibly other configurations, cause the following IR to be generated:
define hidden i32 @ip_vs_protocol_init() local_unnamed_addr #5 section ".init.text" align 16 !kcfi_type !29 { %1 = alloca [64 x i8], align 16 ...
14: ; preds = %11 %15 = getelementptr inbounds i8, ptr %1, i64 63 %16 = load i8, ptr %15, align 1 %17 = tail call i1 @llvm.is.constant.i8(i8 %16) %18 = icmp eq i8 %16, 0 %19 = select i1 %17, i1 %18, i1 false br i1 %19, label %20, label %23
20: ; preds = %14 %21 = call i64 @strlen(ptr noundef nonnull dereferenceable(1) %1) #23 ...
23: ; preds = %14, %11, %20 %24 = call i64 @strnlen(ptr noundef nonnull dereferenceable(1) %1, i64 noundef 64) #24 ... }
The above code calculates the address of the last char in the buffer (value %15) and then loads from it (value %16). Because the buffer is never initialized, the LLVM GVN pass marks value %16 as undefined:
%13 = getelementptr inbounds i8, ptr %1, i64 63 br i1 undef, label %14, label %17
This gives later passes (SCCP, in particular) more DCE opportunities by propagating the undef value further, and eventually removes everything after the load on the uninitialized stack location:
define hidden i32 @ip_vs_protocol_init() local_unnamed_addr #0 section ".init.text" align 16 !kcfi_type !11 { %1 = alloca [64 x i8], align 16 ...
12: …
- Record
OESA-2025-1372- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-21681
5.7
In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to unregistering netdev with carrier Commit in a fixes tag attempted to fix the issue in the following sequence of calls: do_output -> ovs_vport_send -> dev_queue_xmit -> __dev_queue_xmit -> netdev_core_pick_tx -> skb_tx_hash When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever. But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK. One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot. Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway. While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.
- Record
UBUNTU-CVE-2025-21681- CVSS 4.0
- 5.7 Medium
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2025-1757963029 No score
kernel-uek: Fix of 195 CVEs
- rds: tcp: block BH in TCP callbacks
- kexec: Improve & fix crash_exclude_mem_range() to handle overlapping ranges
- module: correctly exit module_kallsyms_on_each_symbol when fn() != 0
- module: potential uninitialized return in module_kallsyms_on_each_symbol()
- module: use RCU to synchronize find_module
- kallsyms: refactor {,module_}kallsyms_on_each_symbol
- LTS tag: v5.4.295
- scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() {CVE-2025-38320}
- perf: Fix sample vs do_exit() {CVE-2025-38424}
- s390/pci: Fix __pcilg_mio_inuser() inline assembly
- rtc: test: Fix invalid format specifier.
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() {CVE-2025-38337}
- mm/huge_memory: fix dereferencing invalid pmd migration entry {CVE-2025-37958}
- rtc: Make rtc_time64_to_tm() support dates before 1970
- rtc: Improve performance of rtc_time64_to_tm(). Add tests.
- xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create {CVE-2022-48773}
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
- ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
- ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
- ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board
- net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
- net: atm: add lec_mutex {CVE-2025-38323}
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). {CVE-2025-38181}
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184}
- tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
- atm: atmtcp: Free invalid length skb in atmtcp_c_send(). {CVE-2025-38185}
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). {CVE-2025-38324}
- wifi: carl9170: do not ping device which has failed to load firmware {CVE-2025-38420}
- aoe: clean device rq_list in aoedev_downdev() {CVE-2025-38326}
- hwmon: (occ) fix unaligned accesses
- drm/nouveau/bl: increase buffer size to avoid truncate warning
- erofs: remove unused trace event erofs_destroy_inode
- ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
- ALSA: hda/intel: Add Thinkpad E15 to PM deny list
- Input: sparcspkr - avoid unannotated fall-through
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
- atm: Revert atm_account_tx() if copy_from_iter_full() fails. {CVE-2025-38190}
- selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
- scsi: s390: zfcp: Ensure synchronous unit_add
- scsi: storvsc: Increase the timeouts to storvsc_timeout
- jffs2: check jffs2_prealloc_raw_node_refs() result in few other places {CVE-2025-38328}
- jffs2: check that raw node were preallocated before writing summary {CVE-2025-38194}
- drivers/rapidio/rio_cm.c: prevent possible heap overwrite {CVE-2025-38090}
- powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
- platform/x86: dell_rbu: Stop overwriting data buffer
- platform: Add Surface platform directory
- Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
- tee: Prevent size calculation wraparound on 32-bit kernels
- ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
- bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
- watchdog: da9052_wdt: respect TWDMIN
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
- sock: Correct error checking condition for (assign|release)_proto_idx()
- scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
- vxlan: Do not treat dst cache initialization errors as fatal
- clk: rockchip: rk3036: mark ddrphy as critical
- wifi: mac80211: do not offer a mesh path if forwarding is disabled
- net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
- pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
- pinctrl: armada-37xx:…
- Record
CLSA-2025-1757963029- Updated
- 2026-11-02
OSVCLSA-2026-1782155469 No score
kernel: Fix of 143 CVEs
- ice: Fix PTP NULL pointer dereference during VSI rebuild {CVE-2026-23210}
- tracing: Add recursion protection in kernel stack trace recording {CVE-2026-23138}
- mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() {CVE-2025-38681}
- cpuset: fix warning when disabling remote partition {CVE-2025-71142}
- virtio: break and reset virtio devices on device_shutdown() {CVE-2025-38064}
- netdevsim: fix a race issue related to the operation on bpf_bound_progs list {CVE-2026-23126}
- atm: clip: Fix potential null-ptr-deref in to_atmarpd(). {CVE-2025-38460}
- idpf: fix error handling in the init_task on load {CVE-2026-23017}
- rxrpc: Fix recvmsg() unconditional requeue {CVE-2026-23066}
- block: zero non-PI portion of auto integrity buffer {CVE-2026-23007}
- can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode {CVE-2025-38665}
- virtio_net: Fix napi_skb_cache_put warning {CVE-2024-43835}
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
- mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() {CVE-2026-23169}
- net: fix segmentation of forwarding fraglist GRO {CVE-2026-23154}
- gfs2: Validate i_depth for exhash directories {CVE-2025-38710}
- KVM: Don't clobber irqfd routing type when deassigning irqfd {CVE-2026-23198}
- ipvlan: Make the addrs_lock be per port {CVE-2026-23103}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
- can: mcp251xfd: fix infinite loop when xmit fails {CVE-2024-41088}
- RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly {CVE-2025-71096}
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction {CVE-2025-38161}
- scsi: qla2xxx: Validate sp before freeing associated memory {CVE-2025-71236}
- net/sched: netem: account for backlog updates from child qdisc {CVE-2024-56770}
- drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat {CVE-2026-31656}
- iavf: fix off-by-one issues in iavf_config_rss_reg() {CVE-2025-71087}
- net/sched: ets: fix divide by zero in the offload path {CVE-2026-23379}
- can: j1939: implement NETDEV_UNREGISTER notification handler {CVE-2025-39925}
- ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() {CVE-2026-31531}
- Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb {CVE-2026-31510}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() {CVE-2026-23003}
- drm/i915/gt: Check set_default_submission() before deferencing {CVE-2026-31540}
- mac802154: check local interfaces before deleting sdata list {CVE-2024-57948}
- lib/buildid: use __kernel_read() for sleepable context {CVE-2026-23002}
- scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs {CVE-2023-52808}
- net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
- irqchip/imx-irqsteer: Handle runtime power management correctly {CVE-2024-42290}
- io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop {CVE-2026-23113}
- net/sched: ets: Remove drr class from the active list if it changes to strict {CVE-2025-68815}
- net: bonding: fix NULL deref in bond_debug_rlb_hash_show {CVE-2026-31546}
- ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
- openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
- net: USB: Fix wrong-direction WARNING in plusb.c {CVE-2023-52742}
- module: Fix kernel panic when a symbol st_shndx is out of bounds {CVE-2026-31521}
- udf: Fix preallocation discarding at indirect extent boundary {CVE-2022-48946}
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle {CVE-2025-39947}
- scsi: core: Wake up the error handler when final completions race against each other {CVE-2026-23110}
- nbd: don't allow reconnect after disconnect {CVE-2025-21731}
- nfsd: check that server is running in unlock_filesystem {CVE-2026-22989}
- af_key: validate families in pfkey_send_migrate() {CVE-2026-31515}
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() {CVE-2024-36286} -…
- Record
CLSA-2026-1782155469- Updated
- 2026-11-02
OSVCLSA-2026-1783791447 No score
kernel: Fix of 307 CVEs
- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully {CVE-2022-48660}
- ipv4: check for NULL idev in ip_route_use_hint() {CVE-2024-36008}
- KEYS: trusted: Do not use WARN when encode fails {CVE-2024-36975}
- Fix userfaultfd_api to return EINVAL as expected {CVE-2024-41027}
- xhci: Fix null pointer dereference when host dies {CVE-2023-52898}
- sctp: sysctl: auth_enable: avoid using current->nsproxy {CVE-2025-21638}
- blk-mq: fix IO hang from sbitmap wakeup race {CVE-2024-26671}
- net: openvswitch: fix flow memory leak in ovs_flow_cmd_new {CVE-2023-52977}
- gpiolib: fix memory leak in gpiochip_setup_dev() {CVE-2022-48975}
- HID: betop: check shape of output reports {CVE-2023-53015}
- mm/swapfile: add cond_resched() in get_swap_pages() {CVE-2023-52932}
- HV: hv_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-52937}
- drm/i915: Fix a memory leak with reused mmap_offset {CVE-2023-53002}
- ptdma: pt_core_execute_cmd() should use spinlock {CVE-2023-53013}
- RDMA/core: Fix ib block iterator counter overflow {CVE-2023-53026}
- Bluetooth: hci_conn: Fix memory leaks {CVE-2023-53018}
- scsi: target: pscsi: Fix bio_put() for error case {CVE-2024-26760}
- sctp: Prevent TOCTOU out-of-bounds write {CVE-2025-40331}
- pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() {CVE-2026-23038}
- cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() {CVE-2025-40194}
- ALSA: hda/cs8409: Fix possible NULL dereference {CVE-2024-50160}
- nbd: don't allow reconnect after disconnect {CVE-2025-21731}
- openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
- ext4: detect invalid INLINE_DATA + EXTENTS flag combination {CVE-2025-40167}
- ext4: xattr: fix null pointer deref in ext4_raw_inode() {CVE-2025-68820}
- net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
- wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode {CVE-2025-40321}
- ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
- ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping {CVE-2025-40121}
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash {CVE-2024-50041}
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() {CVE-2024-50000}
- bpf: Fix reference count leak in bpf_prog_test_run_xdp() {CVE-2026-22994}
- xsk: check IFF_UP earlier in Tx path {CVE-2023-53240}
- firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038}
- virtgpu: don't reset on shutdown {CVE-2025-38064}
- xen/netfront: fix crash when removing device {CVE-2022-48969}
- mptcp: do not fallback when OoO is present {CVE-2024-50185}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler {CVE-2025-39925}
- netfilter: nf_tables: remove redundant chain validation on register store {CVE-2025-71160}
- xfs: fix use-after-free in xattr node block inactivation {CVE-2026-43053}
- ext4: fix racy may inline data check in dio write {CVE-2023-52786}
- drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini {CVE-2023-52738}
- macsec: fix UAF bug for real_dev {CVE-2022-49390}
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation {CVE-2024-42259}
- mm/shmem: disable PMD-sized page cache if needed {CVE-2024-42241}
- driver: iio: add missing checks on iio_info's callback access {CVE-2024-46715}
- udmabuf: fix memory leak on last export_udmabuf() error path {CVE-2024-56712}
- ALSA: control: Avoid WARN() for symlink errors {CVE-2024-56657}
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM {CVE-2024-56611}
- eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682}
- net: annotate data-races around sk->sk_{data_ready,write_space} {CVE-2026-23302}
- udmabuf: change folios array from kmalloc to kvmalloc {CVE-2024-56544}
- RDMA/mlx5: Move events notifier registration to be after device registration {CVE-2024-53224}
- dlm: fix possible lkb_resource…
- Record
CLSA-2026-1783791447- Updated
- 2026-11-02
OSV No score
openvswitch: fix lockup on tx to unregistering netdev with carrier
In the Linux kernel, the following vulnerability has been resolved:
openvswitch: fix lockup on tx to unregistering netdev with carrier
Commit in a fixes tag attempted to fix the issue in the following sequence of calls:
do_output
-> ovs_vport_send
-> dev_queue_xmit
-> __dev_queue_xmit
-> netdev_core_pick_tx
-> skb_tx_hash
When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever.
But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK.
One example of such device is a net/dummy. It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath. There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments. And when the issue is hit, the only way to recover is to reboot.
Fix that by also checking if the device is running. The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway.
While only checking the running state might be enough, the carrier check is preserved. The running and the carrier states seem disjoined throughout the code and different drivers. And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet. So, it seems safer to check both flags in OVS as well.
- Record
CVE-2025-21681- Updated
- 2026-11-07
OSVSUSE-SU-2025:0564-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
- CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
- CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
- CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
- CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
- CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
- CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
- CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
- CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
- CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
- CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
- CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
- CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
- CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487).
- CVE-2024-56610: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390).
- CVE-2024-56633: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (bsc#1235485).
- CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
- CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
- CVE-2024-56665: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (bsc#1235489).
- CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498).
- CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418).
- CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545).
- CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (bsc#1235612).
- CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (bsc#1235578).
- CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (bsc#1235582).
- CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583).
- CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656).
- CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).
- CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).
- CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).
- CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).
- CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).
- CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
- CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
- CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).
- CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).
- CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
- CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).
- CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).
- CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
- CVE-2025-21665: filemap: avoid…
- Record
SUSE-SU-2025:0564-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:0847-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
- CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
- CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
- CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
- CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
- CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
- CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
- CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
- CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
- CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
- CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
- CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
- CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
- CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
- CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
- CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
- CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
- CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
- CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
- CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
- CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
- CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
- CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
- CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).
- CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).
- CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
- CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
- CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
- CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
- CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
- CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
- CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
- CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (bsc#1236680).
- CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
- CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
- CVE-2025-21669: vsock/virtio: discard packets if the transport changes (bsc#1236683).
- CVE-2025-21670: vsock/bpf: return early if transport is not assigned (bsc#1236685).
- CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
- CVE-2025-21675: net/mlx5: Clear port select structure when fail to create (bsc#1236694).
- CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
- CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
- CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
- CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
- CVE-2025-21700: net: sched:…
- Record
SUSE-SU-2025:0847-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:0856-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
- CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
- CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
- CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
- CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
- CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
- CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
- CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
- CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
- CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
- CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
- CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
- CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
- CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
- CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
- CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
- CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
- CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
- CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
- CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
- CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).
- CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
- CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
- CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
- CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
- CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
- CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
- CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
- CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
- CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
- CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
- CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
- CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
- CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
- CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
- CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
- CVE-2025-21728: bpf: Send signals asynchronously if !preemptible (bsc#1237879).
- CVE-2025-21705: mptcp: handle fastopen disconnect correctly (bsc#1238525).
- CVE-2025-21715: net: davicom: fix UAF in dm9000_drv_remove (bsc#1237889).
- CVE-2025-21716: vxlan: Fix uninit-value in vxlan_vnifilter_dump() (bsc#1237891).
- CVE-2025-21719: ipmr: do not call mr_mfc_uses_dev() for unres entries (bsc#1238860).
- CVE-2025-21724: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (bsc#1238863).
- CVE-2025-21725: smb: client: fix oops due to unset link speed (bsc#1238877). -…
- Record
SUSE-SU-2025:0856-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:0955-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
- CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
- CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
- CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
- CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
- CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
- CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
- CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
- CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
- CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
- CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
- CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
- CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
- CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
- CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
- CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
- CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
- CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
- CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
- CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).
- CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
- CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
- CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
- CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
- CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
- CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
- CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
- CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
- CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
- CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
- CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
- CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
- CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
- CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
- CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
- CVE-2025-21705: mptcp: handle fastopen disconnect correctly (bsc#1238525).
- CVE-2025-21715: net: davicom: fix UAF in dm9000_drv_remove (bsc#1237889).
- CVE-2025-21716: vxlan: Fix uninit-value in vxlan_vnifilter_dump() (bsc#1237891).
- CVE-2025-21719: ipmr: do not call mr_mfc_uses_dev() for unres entries (bsc#1238860).
- CVE-2025-21724: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (bsc#1238863).
- CVE-2025-21725: smb: client: fix oops due to unset link speed (bsc#1238877).
- CVE-2025-21728: bpf: Send signals asynchronously if !preemptible (bsc#1237879).
- CVE-2025-21767: clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic…
- Record
SUSE-SU-2025:0955-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20190-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
- CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
- CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
- CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
- CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
- CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
- CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
- CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
- CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
- CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
- CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
- CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
- CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
- CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
- CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
- CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
- CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
- CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
- CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
- CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
- CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
- CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
- CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
- CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
- CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
- CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
- CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
- CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
- CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
- CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
- CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
- CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
- CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
- CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
- CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
- CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
- CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
- CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
- CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
- CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
- CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…
- Record
SUSE-SU-2025:20190-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20192-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
- CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
- CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
- CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
- CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
- CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
- CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
- CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
- CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
- CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
- CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
- CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
- CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
- CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
- CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
- CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
- CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
- CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
- CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
- CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
- CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
- CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
- CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
- CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
- CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
- CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
- CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
- CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
- CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
- CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
- CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
- CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
- CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
- CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
- CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
- CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
- CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
- CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
- CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
- CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
- CVE-2024-56640: net/smc: fix LGR and link use-after-free…
- Record
SUSE-SU-2025:20192-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20260-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
- CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
- CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
- CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
- CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
- CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
- CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
- CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
- CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
- CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
- CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
- CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
- CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
- CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
- CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
- CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
- CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
- CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
- CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
- CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
- CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
- CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
- CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
- CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
- CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
- CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
- CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
- CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
- CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
- CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
- CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
- CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
- CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
- CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
- CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
- CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
- CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
- CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
- CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
- CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
- CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…
- Record
SUSE-SU-2025:20260-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20270-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
- CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
- CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
- CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
- CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
- CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
- CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
- CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
- CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
- CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
- CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
- CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
- CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
- CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
- CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
- CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
- CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
- CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
- CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
- CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
- CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
- CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
- CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
- CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
- CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
- CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
- CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
- CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
- CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
- CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
- CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
- CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
- CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
- CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
- CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
- CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
- CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
- CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
- CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
- CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
- CVE-2024-56640: net/smc: fix LGR and link use-after-free…
- Record
SUSE-SU-2025:20270-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0473-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues
The following security issues were fixed:
- CVE-2022-50347: mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (bsc#1249928).
- CVE-2022-50580: blk-throttle: prevent overflow while calculating wait time (bsc#1252542).
- CVE-2022-50676: net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() (bsc#1254689).
- CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
- CVE-2022-50709: wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (bsc#1255565).
- CVE-2022-50716: wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (bsc#1255839).
- CVE-2022-50717: nvmet-tcp: add bounds check on Transfer Tag (bsc#1255844).
- CVE-2022-50719: ALSA: line6: fix stack overflow in line6_midi_transmit (bsc#1255939).
- CVE-2022-50740: wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (bsc#1256155).
- CVE-2022-50744: scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs (bsc#1256165).
- CVE-2022-50749: acct: fix potential integer overflow in encode_comp_t() (bsc#1256191).
- CVE-2022-50751: configfs: fix possible memory leak in configfs_create_dir() (bsc#1256184).
- CVE-2022-50760: drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (bsc#1255983).
- CVE-2022-50770: ocfs2: fix memory leak in ocfs2_mount_volume() (bsc#1256221).
- CVE-2022-50777: net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (bsc#1256320).
- CVE-2022-50780: net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (bsc#1256305).
- CVE-2022-50782: ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1256282).
- CVE-2022-50786: media: s5p-mfc: Clear workbit to handle error condition (bsc#1256258).
- CVE-2022-50816: ipv6: ensure sane device mtu in tunnels (bsc#1256038).
- CVE-2022-50834: nfc: Fix potential resource leaks (bsc#1256219).
- CVE-2022-50865: tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (bsc#1256168).
- CVE-2022-50868: hwrng: amd - Fix PCI device refcount leak (bsc#1256386).
- CVE-2022-50880: wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (bsc#1256132).
- CVE-2022-50881: ath9k: Fix typo in function name (bsc#1256130).
- CVE-2022-50884: drm: Prevent drm_copy_field() to attempt copying a NULL pointer (bsc#1256127).
- CVE-2022-50885: RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (bsc#1256122).
- CVE-2022-50887: regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (bsc#1256125).
- CVE-2023-50756: nvme-pci: fix mempool alloc size (bsc#1256216).
- CVE-2023-53685: tun: Fix memory leak for detached NAPI queue (bsc#1251770).
- CVE-2023-53747: vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (bsc#1254572).
- CVE-2023-53751: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1254986).
- CVE-2023-53825: kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg() (bsc#1254707).
- CVE-2023-53853: netlink: annotate accesses to nlk->cb_running (bsc#1254673).
- CVE-2023-53863: netlink: do not hard code device address lenth in fdb dumps (bsc#1254657).
- CVE-2023-53992: wifi: cfg80211: ocb: don't leave if not joined (bsc#1256058).
- CVE-2023-54012: net: fix stack overflow when LRO is disabled for virtual interfaces (bsc#1255571).
- CVE-2023-54047: drm/rockchip: dw_hdmi: cleanup drm encoder during unbind (bsc#1256398).
- CVE-2023-54048: RDMA/bnxt_re: Prevent handling any completions after qp destroy (bsc#1256395).
- CVE-2023-54067: btrfs: fix race when deleting free space root from the dirty cow roots list (bsc#1256369).
- CVE-2023-54111: pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (bsc#1256149).
- CVE-2023-54112: kcm: Fix memory leak in error path of kcm_sendmsg() (bsc#1256354).
- CVE-2023-54118: serial: sc16is7xx: setup GPIO controller later in probe…
- Record
SUSE-SU-2026:0473-1- Updated
- 2026-11-02
OSVUSN-7445-1 No score
linux, linux-aws, linux-gcp, linux-hwe-6.11, linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oem-6.11, linux-oracle, linux-raspi, linux-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- GPIO subsystem;
- GPU drivers;
- IRQ chip drivers;
- Network drivers;
- Mellanox network drivers;
- x86 platform drivers;
- i.MX PM domains;
- SCSI subsystem;
- USB Serial drivers;
- AFS file system;
- GFS2 file system;
- File systems infrastructure;
- Proc file system;
- SMB network file system;
- Timer subsystem;
- Kernel CPU control infrastructure;
- Memory management;
- Networking core;
- Ethtool driver;
- IEEE 802.15.4 subsystem;
- Open vSwitch;
- Network traffic control;
- VMware vSockets driver; (CVE-2025-21685, CVE-2025-21684, CVE-2025-21756, CVE-2025-21670, CVE-2024-57949, CVE-2025-21677, CVE-2025-21680, CVE-2025-21703, CVE-2024-57952, CVE-2025-21674, CVE-2025-21701, CVE-2025-21691, CVE-2025-21689, CVE-2025-21668, CVE-2025-21665, CVE-2025-21683, CVE-2025-21675, CVE-2025-21672, CVE-2024-57948, CVE-2025-21669, CVE-2025-21673, CVE-2025-21692, CVE-2025-21699, CVE-2025-21702, CVE-2025-21682, CVE-2025-21690, CVE-2025-21681, CVE-2025-21695, CVE-2025-21696, CVE-2025-21700, CVE-2025-21678, CVE-2025-21676, CVE-2024-57950, CVE-2025-21666, CVE-2025-21694, CVE-2025-21693, CVE-2025-21993, CVE-2024-57951, CVE-2025-21697, CVE-2025-21667)
- Record
USN-7445-1- Updated
- 2026-11-02
OSVUSN-7448-1 No score
linux-azure, linux-azure-6.11 vulnerabilities
It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- GPIO subsystem;
- GPU drivers;
- IRQ chip drivers;
- Network drivers;
- Mellanox network drivers;
- x86 platform drivers;
- i.MX PM domains;
- SCSI subsystem;
- USB Serial drivers;
- AFS file system;
- GFS2 file system;
- File systems infrastructure;
- Proc file system;
- SMB network file system;
- Timer subsystem;
- Kernel CPU control infrastructure;
- Memory management;
- Networking core;
- Ethtool driver;
- IEEE 802.15.4 subsystem;
- Open vSwitch;
- Network traffic control;
- VMware vSockets driver; (CVE-2025-21694, CVE-2025-21993, CVE-2025-21684, CVE-2025-21681, CVE-2025-21675, CVE-2025-21672, CVE-2025-21696, CVE-2025-21691, CVE-2025-21683, CVE-2025-21666, CVE-2025-21682, CVE-2025-21697, CVE-2025-21668, CVE-2025-21701, CVE-2025-21670, CVE-2025-21676, CVE-2025-21695, CVE-2025-21692, CVE-2025-21674, CVE-2025-21699, CVE-2024-57948, CVE-2025-21677, CVE-2024-57951, CVE-2025-21702, CVE-2025-21700, CVE-2024-57949, CVE-2025-21669, CVE-2025-21703, CVE-2025-21756, CVE-2025-21667, CVE-2024-57952, CVE-2024-57950, CVE-2025-21685, CVE-2025-21693, CVE-2025-21678, CVE-2025-21665, CVE-2025-21680, CVE-2025-21689, CVE-2025-21690, CVE-2025-21673)
- Record
USN-7448-1- Updated
- 2026-11-02
OSVUSN-7595-1 No score
linux, linux-aws, linux-aws-6.8, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8 vulnerabilities
It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- GPIO subsystem;
- GPU drivers;
- InfiniBand drivers;
- IRQ chip drivers;
- Network drivers;
- Mellanox network drivers;
- i.MX PM domains;
- SCSI subsystem;
- USB Serial drivers;
- AFS file system;
- GFS2 file system;
- File systems infrastructure;
- File system notification infrastructure;
- Overlay file system;
- Proc file system;
- SMB network file system;
- Timer subsystem;
- Kernel CPU control infrastructure;
- Memory management;
- Networking core;
- DCCP (Datagram Congestion Control Protocol);
- IPv6 networking;
- IEEE 802.15.4 subsystem;
- Open vSwitch;
- Network traffic control;
- VMware vSockets driver; (CVE-2025-21943, CVE-2025-21672, CVE-2024-57952, CVE-2024-57949, CVE-2025-21683, CVE-2025-21690, CVE-2025-21699, CVE-2025-21676, CVE-2024-57924, CVE-2025-21694, CVE-2024-57948, CVE-2025-21675, CVE-2024-57951, CVE-2025-21692, CVE-2025-21684, CVE-2025-21668, CVE-2025-21665, CVE-2025-21667, CVE-2025-21670, CVE-2025-21674, CVE-2025-21697, CVE-2024-53124, CVE-2025-21666, CVE-2025-21682, CVE-2025-21680, CVE-2025-21681, CVE-2025-21691, CVE-2025-21669, CVE-2025-21673, CVE-2024-50157, CVE-2025-21689, CVE-2025-21678)
- Record
USN-7595-1- Updated
- 2026-11-02
OSVUSN-7595-2 No score
linux-realtime vulnerabilities
It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- GPIO subsystem;
- GPU drivers;
- InfiniBand drivers;
- IRQ chip drivers;
- Network drivers;
- Mellanox network drivers;
- i.MX PM domains;
- SCSI subsystem;
- USB Serial drivers;
- AFS file system;
- GFS2 file system;
- File systems infrastructure;
- File system notification infrastructure;
- Overlay file system;
- Proc file system;
- SMB network file system;
- Timer subsystem;
- Kernel CPU control infrastructure;
- Memory management;
- Networking core;
- DCCP (Datagram Congestion Control Protocol);
- IPv6 networking;
- IEEE 802.15.4 subsystem;
- Open vSwitch;
- Network traffic control;
- VMware vSockets driver; (CVE-2025-21943, CVE-2025-21672, CVE-2024-57952, CVE-2024-57949, CVE-2025-21683, CVE-2025-21690, CVE-2025-21699, CVE-2025-21676, CVE-2024-57924, CVE-2025-21694, CVE-2024-57948, CVE-2025-21675, CVE-2024-57951, CVE-2025-21692, CVE-2025-21684, CVE-2025-21668, CVE-2025-21665, CVE-2025-21667, CVE-2025-21670, CVE-2025-21674, CVE-2025-21697, CVE-2024-53124, CVE-2025-21666, CVE-2025-21682, CVE-2025-21680, CVE-2025-21681, CVE-2025-21691, CVE-2025-21669, CVE-2025-21673, CVE-2024-50157, CVE-2025-21689, CVE-2025-21678)
- Record
USN-7595-2- Updated
- 2026-11-02
OSVUSN-7595-3 No score
linux-raspi-realtime vulnerabilities
It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- GPIO subsystem;
- GPU drivers;
- InfiniBand drivers;
- IRQ chip drivers;
- Network drivers;
- Mellanox network drivers;
- i.MX PM domains;
- SCSI subsystem;
- USB Serial drivers;
- AFS file system;
- GFS2 file system;
- File systems infrastructure;
- File system notification infrastructure;
- Overlay file system;
- Proc file system;
- SMB network file system;
- Timer subsystem;
- Kernel CPU control infrastructure;
- Memory management;
- Networking core;
- DCCP (Datagram Congestion Control Protocol);
- IPv6 networking;
- IEEE 802.15.4 subsystem;
- Open vSwitch;
- Network traffic control;
- VMware vSockets driver; (CVE-2025-21943, CVE-2025-21672, CVE-2024-57952, CVE-2024-57949, CVE-2025-21683, CVE-2025-21690, CVE-2025-21699, CVE-2025-21676, CVE-2024-57924, CVE-2025-21694, CVE-2024-57948, CVE-2025-21675, CVE-2024-57951, CVE-2025-21692, CVE-2025-21684, CVE-2025-21668, CVE-2025-21665, CVE-2025-21667, CVE-2025-21670, CVE-2025-21674, CVE-2025-21697, CVE-2024-53124, CVE-2025-21666, CVE-2025-21682, CVE-2025-21680, CVE-2025-21681, CVE-2025-21691, CVE-2025-21669, CVE-2025-21673, CVE-2024-50157, CVE-2025-21689, CVE-2025-21678)
- Record
USN-7595-3- Updated
- 2026-11-02
OSVUSN-7595-4 No score
linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities
It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- GPIO subsystem;
- GPU drivers;
- InfiniBand drivers;
- IRQ chip drivers;
- Network drivers;
- Mellanox network drivers;
- i.MX PM domains;
- SCSI subsystem;
- USB Serial drivers;
- AFS file system;
- GFS2 file system;
- File systems infrastructure;
- File system notification infrastructure;
- Overlay file system;
- Proc file system;
- SMB network file system;
- Timer subsystem;
- Kernel CPU control infrastructure;
- Memory management;
- Networking core;
- DCCP (Datagram Congestion Control Protocol);
- IPv6 networking;
- IEEE 802.15.4 subsystem;
- Open vSwitch;
- Network traffic control;
- VMware vSockets driver; (CVE-2025-21943, CVE-2025-21672, CVE-2024-57952, CVE-2024-57949, CVE-2025-21683, CVE-2025-21690, CVE-2025-21699, CVE-2025-21676, CVE-2024-57924, CVE-2025-21694, CVE-2024-57948, CVE-2025-21675, CVE-2024-57951, CVE-2025-21692, CVE-2025-21684, CVE-2025-21668, CVE-2025-21665, CVE-2025-21667, CVE-2025-21670, CVE-2025-21674, CVE-2025-21697, CVE-2024-53124, CVE-2025-21666, CVE-2025-21682, CVE-2025-21680, CVE-2025-21681, CVE-2025-21691, CVE-2025-21669, CVE-2025-21673, CVE-2024-50157, CVE-2025-21689, CVE-2025-21678)
- Record
USN-7595-4- Updated
- 2026-11-02
OSVUSN-7595-5 No score
linux-gcp, linux-gcp-6.8 vulnerabilities
It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- GPIO subsystem;
- GPU drivers;
- InfiniBand drivers;
- IRQ chip drivers;
- Network drivers;
- Mellanox network drivers;
- i.MX PM domains;
- SCSI subsystem;
- USB Serial drivers;
- AFS file system;
- GFS2 file system;
- File systems infrastructure;
- File system notification infrastructure;
- Overlay file system;
- Proc file system;
- SMB network file system;
- Timer subsystem;
- Kernel CPU control infrastructure;
- Memory management;
- Networking core;
- DCCP (Datagram Congestion Control Protocol);
- IPv6 networking;
- IEEE 802.15.4 subsystem;
- Open vSwitch;
- Network traffic control;
- VMware vSockets driver; (CVE-2025-21943, CVE-2025-21672, CVE-2024-57952, CVE-2024-57949, CVE-2025-21683, CVE-2025-21690, CVE-2025-21699, CVE-2025-21676, CVE-2024-57924, CVE-2025-21694, CVE-2024-57948, CVE-2025-21675, CVE-2024-57951, CVE-2025-21692, CVE-2025-21684, CVE-2025-21668, CVE-2025-21665, CVE-2025-21667, CVE-2025-21670, CVE-2025-21674, CVE-2025-21697, CVE-2024-53124, CVE-2025-21666, CVE-2025-21682, CVE-2025-21680, CVE-2025-21681, CVE-2025-21691, CVE-2025-21669, CVE-2025-21673, CVE-2024-50157, CVE-2025-21689, CVE-2025-21678)
- Record
USN-7595-5- Updated
- 2026-11-02
OSVUSN-7596-1 No score
linux-azure, linux-azure-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- GPIO subsystem;
- GPU drivers;
- InfiniBand drivers;
- IRQ chip drivers;
- Network drivers;
- Mellanox network drivers;
- i.MX PM domains;
- SCSI subsystem;
- USB Serial drivers;
- AFS file system;
- GFS2 file system;
- File systems infrastructure;
- File system notification infrastructure;
- Overlay file system;
- Proc file system;
- SMB network file system;
- Timer subsystem;
- Kernel CPU control infrastructure;
- Memory management;
- Networking core;
- DCCP (Datagram Congestion Control Protocol);
- IPv6 networking;
- IEEE 802.15.4 subsystem;
- Open vSwitch;
- Network traffic control;
- VMware vSockets driver; (CVE-2025-21675, CVE-2025-21697, CVE-2025-21668, CVE-2024-57951, CVE-2025-21680, CVE-2024-50157, CVE-2025-21699, CVE-2025-21669, CVE-2025-21678, CVE-2025-21665, CVE-2024-57924, CVE-2024-57949, CVE-2024-53124, CVE-2025-21684, CVE-2025-21676, CVE-2025-21672, CVE-2025-21682, CVE-2025-21670, CVE-2025-21690, CVE-2025-21673, CVE-2025-21691, CVE-2024-57952, CVE-2025-21674, CVE-2025-21689, CVE-2025-21943, CVE-2025-21692, CVE-2025-21667, CVE-2025-21666, CVE-2024-57948, CVE-2025-21694, CVE-2025-21683, CVE-2025-21681)
- Record
USN-7596-1- Updated
- 2026-11-02
OSVUSN-7596-2 No score
linux-azure-nvidia vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- GPIO subsystem;
- GPU drivers;
- InfiniBand drivers;
- IRQ chip drivers;
- Network drivers;
- Mellanox network drivers;
- i.MX PM domains;
- SCSI subsystem;
- USB Serial drivers;
- AFS file system;
- GFS2 file system;
- File systems infrastructure;
- File system notification infrastructure;
- Overlay file system;
- Proc file system;
- SMB network file system;
- Timer subsystem;
- Kernel CPU control infrastructure;
- Memory management;
- Networking core;
- DCCP (Datagram Congestion Control Protocol);
- IPv6 networking;
- IEEE 802.15.4 subsystem;
- Open vSwitch;
- Network traffic control;
- VMware vSockets driver; (CVE-2025-21675, CVE-2025-21697, CVE-2025-21668, CVE-2024-57951, CVE-2025-21680, CVE-2024-50157, CVE-2025-21699, CVE-2025-21669, CVE-2025-21678, CVE-2025-21665, CVE-2024-57924, CVE-2024-57949, CVE-2024-53124, CVE-2025-21684, CVE-2025-21676, CVE-2025-21672, CVE-2025-21682, CVE-2025-21670, CVE-2025-21690, CVE-2025-21673, CVE-2025-21691, CVE-2024-57952, CVE-2025-21674, CVE-2025-21689, CVE-2025-21943, CVE-2025-21692, CVE-2025-21667, CVE-2025-21666, CVE-2024-57948, CVE-2025-21694, CVE-2025-21683, CVE-2025-21681)
- Record
USN-7596-2- Updated
- 2026-11-02
OSVUSN-7653-1 No score
linux-hwe-6.8 vulnerabilities
It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- PowerPC architecture;
- S390 architecture;
- Block layer subsystem;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- Network block device driver;
- Character device driver;
- TPM device driver;
- Clock framework and drivers;
- FireWire subsystem;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- I3C subsystem;
- InfiniBand drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Media drivers;
- NVIDIA Tegra memory controller driver;
- Fastrpc Driver;
- Network drivers;
- Mellanox network drivers;
- Operating Performance Points (OPP) driver;
- PCI subsystem;
- x86 platform drivers;
- i.MX PM domains;
- PPS (Pulse Per Second) driver;
- PTP clock framework;
- Remote Processor subsystem;
- Real Time Clock drivers;
- SCSI subsystem;
- QCOM SoC drivers;
- Media staging drivers;
- TTY drivers;
- UFS subsystem;
- USB Gadget drivers;
- USB Host Controller drivers;
- USB Serial drivers;
- AFS file system;
- File systems infrastructure;
- BTRFS file system;
- F2FS file system;
- GFS2 file system;
- NILFS2 file system;
- File system notification infrastructure;
- Overlay file system;
- Proc file system;
- SMB network file system;
- UBI file system;
- Timer subsystem;
- KVM subsystem;
- Networking core;
- ptr_ring data structure definitions;
- Networking subsytem;
- Amateur Radio drivers;
- XFRM subsystem;
- Tracing infrastructure;
- BPF subsystem;
- Kernel CPU control infrastructure;
- Padata parallel execution mechanism;
- printk logging mechanism;
- Memory management;
- Bluetooth subsystem;
- DCCP (Datagram Congestion Control Protocol);
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- IEEE 802.15.4 subsystem;
- Multipath TCP;
- Netfilter;
- NFC subsystem;
- Open vSwitch;
- Rose network layer;
- RxRPC session sockets;
- Network traffic control;
- VMware vSockets driver;
- Landlock security;
- Linux Security Modules (LSM) Framework;
- Tomoyo security module;
- SoC audio core drivers; (CVE-2025-21830, CVE-2025-21678, CVE-2025-21815, CVE-2024-57974, CVE-2025-21725, CVE-2025-21718, CVE-2025-21748, CVE-2025-21732, CVE-2024-57953, CVE-2025-21727, CVE-2025-21816, CVE-2025-21719, CVE-2024-53124, CVE-2024-58019, CVE-2025-38001, CVE-2025-21720, CVE-2025-21734, CVE-2025-21672, CVE-2025-21692, CVE-2024-58076, CVE-2025-21694, CVE-2024-58061, CVE-2025-21714, CVE-2025-21689, CVE-2024-49887, CVE-2024-57949, CVE-2025-38177, CVE-2025-21683, CVE-2025-21669, CVE-2025-21722, CVE-2024-57980, CVE-2025-38000, CVE-2025-37932, CVE-2024-58034, CVE-2024-58081, CVE-2025-21733, CVE-2025-21682, CVE-2024-57924, CVE-2025-21743, CVE-2024-57975, CVE-2025-37798, CVE-2024-58058, CVE-2025-21809, CVE-2025-21676, CVE-2024-57993, CVE-2025-21699, CVE-2024-58016, CVE-2025-21832, CVE-2025-21804, CVE-2024-58011, CVE-2024-58007, CVE-2025-21826, CVE-2024-58055, CVE-2025-21668, CVE-2025-21715, CVE-2024-58078, CVE-2025-21829, CVE-2025-21811, CVE-2025-21814, CVE-2024-58053, CVE-2025-21726, CVE-2025-21943, CVE-2025-37750, CVE-2025-21673, CVE-2024-57984, CVE-2025-37997, CVE-2025-21684, CVE-2025-21750, CVE-2024-58013, CVE-2025-21799, CVE-2024-58083, CVE-2025-21798, CVE-2025-21731, CVE-2025-21708, CVE-2024-57986, CVE-2025-21744, CVE-2024-58014, CVE-2025-21721, CVE-2024-58063, CVE-2024-57979, CVE-2024-58005, CVE-2025-21728, CVE-2025-21681, CVE-2025-21806, CVE-2024-57982, CVE-2024-58002, CVE-2024-58082, CVE-2025-21812, CVE-2025-21745, CVE-2024-58017, CVE-2025-21665, CVE-2025-21828, CVE-2025-37890,…
- Record
USN-7653-1- Updated
- 2026-11-03
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelAzure Linux:3 |
before 6.6.76.1-1 | 6.6.76.1-1 |
linux-ltsAlpaquita:23 |
6.1.124-r0 up to 6.1.127-r0 | 6.1.127-r0 |
linux-ltsAlpaquita:25 |
6.6.89-r0 up to 6.12.41-r0 | 6.12.41-r0 |
linux-ltsAlpaquita:stream |
6.12.92-r1 up to 6.18.35-r1 | 6.18.35-r1 |
bpftoolTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernel-uekTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernel-uek-containerTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernel-uek-container-debugTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernel-uek-debugTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernel-uek-debug-develTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-uek-develTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernel-uek-headersTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernel-uek-toolsTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
perfTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
python-perfTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernelTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64kTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-debugTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-debug-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-debug-develTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-debug-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-debug-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-debug-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-debug-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-debug-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-debug-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-develTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-64k-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-abi-stablelistsTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-cross-headersTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-debugTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-debug-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-debug-develTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-debug-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-debug-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-debug-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-debug-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-debug-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-debug-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-debug-uki-virtTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-debug-uki-virt-addonsTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-develTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-docTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-headersTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-ipaclones-internalTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rtTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64kTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-debugTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-debug-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-debug-develTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-debug-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-debug-kvmTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-debug-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-debug-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-debug-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-debug-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-debug-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-develTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-kvmTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-64k-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-debugTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-debug-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-debug-develTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-debug-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-debug-kvmTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-debug-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-debug-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-debug-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-debug-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-debug-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-develTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-devel-matchedTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-kvmTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-modulesTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-modules-coreTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-modules-extraTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-modules-internalTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-rt-modules-partnerTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-selftests-internalTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-toolsTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-tools-libsTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-tools-libs-develTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-uki-virtTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
kernel-uki-virt-addonsTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
libperfTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
libperf-develTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
perfTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
python3-perfTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
rtlaTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
rvTuxCare:AlmaLinux:9.6 From an advisory covering 141 CVEs |
before 5.14.0-570.62.1.el9_6.tuxcare.5.els5 | 5.14.0-570.62.1.el9_6.tuxcare.5.els5 |
bpftoolTuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs |
before 7.0.0-284.1101.el9_2.tuxcare.11.els8 | 7.0.0-284.1101.el9_2.tuxcare.11.els8 |
kernelTuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els8 | 5.14.0-284.1101.el9_2.tuxcare.11.els8 |
kernel-64kTuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els8 | 5.14.0-284.1101.el9_2.tuxcare.11.els8 |
kernel-64k-coreTuxCare:AlmaLinux:9.2 From an advisory covering 305 CVEs |
before 5.14.0-284.1101.el9_2.tuxcare.11.els8 | 5.14.0-284.1101.el9_2.tuxcare.11.els8 |
KernelLinux |
before 6.1.127, 6.2.0 up to 6.6.74, 6.3.0 up to 6.12.11 | 6.1.1276.6.746.12.11 |
linuxDebian:12 |
before 6.1.128-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 29 moreShow less6.1.119-16.1.123-16.1.124-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1 |
6.1.128-1 |
linuxDebian:13 |
before 6.12.11-1 | 6.12.11-1 |
linuxDebian:14 |
before 6.12.11-1 | 6.12.11-1 |
linux-6.1Debian:11 From an advisory covering 333 CVEs |
before 6.1.128-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1 |
6.1.128-1~deb11u1 |
linuxDebian:12 From an advisory covering 60 CVEs |
before 6.1.128-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 29 moreShow less6.1.119-16.1.123-16.1.124-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1 |
6.1.128-1 |
kernelopenEuler:24.03-LTS From an advisory covering 33 CVEs |
before 6.6.0-85.0.0.79.oe2403 | 6.6.0-85.0.0.79.oe2403 |
kernelopenEuler:24.03-LTS-SP1 From an advisory covering 37 CVEs |
before 6.6.0-85.0.0.90.oe2403sp1 | 6.6.0-85.0.0.90.oe2403sp1 |
kernel-cocoSUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 54 CVEs |
before 6.4.0-15061.15.coco15sp6.1 | 6.4.0-15061.15.coco15sp6.1 |
kernel-coco_debugSUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 54 CVEs |
before 6.4.0-15061.15.coco15sp6.1 | 6.4.0-15061.15.coco15sp6.1 |
kernel-source-cocoSUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 54 CVEs |
before 6.4.0-15061.15.coco15sp6.1 | 6.4.0-15061.15.coco15sp6.1 |
kernel-syms-cocoSUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 54 CVEs |
before 6.4.0-15061.15.coco15sp6.1 | 6.4.0-15061.15.coco15sp6.1 |
kernel-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 83 CVEs |
before 6.4.0-150600.8.31.1 | 6.4.0-150600.8.31.1 |
kernel-source-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 83 CVEs |
before 6.4.0-150600.8.31.1 | 6.4.0-150600.8.31.1 |
kernel-syms-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 83 CVEs |
before 6.4.0-150600.8.31.1 | 6.4.0-150600.8.31.1 |
kernel-azureopenSUSE:Leap 15.6 From an advisory covering 83 CVEs |
before 6.4.0-150600.8.31.1 | 6.4.0-150600.8.31.1 |
kernel-source-azureopenSUSE:Leap 15.6 From an advisory covering 83 CVEs |
before 6.4.0-150600.8.31.1 | 6.4.0-150600.8.31.1 |
kernel-syms-azureopenSUSE:Leap 15.6 From an advisory covering 83 CVEs |
before 6.4.0-150600.8.31.1 | 6.4.0-150600.8.31.1 |
kernel-64kbSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2 | 6.4.0-150600.23.42.2 |
kernel-defaultSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2 | 6.4.0-150600.23.42.2 |
kernel-default-baseSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2.150600.12.18.4 | 6.4.0-150600.23.42.2.150600.12.18.4 |
kernel-sourceSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.1 | 6.4.0-150600.23.42.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2 | 6.4.0-150600.23.42.2 |
kernel-docsSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.1 | 6.4.0-150600.23.42.1 |
kernel-obs-buildSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2 | 6.4.0-150600.23.42.2 |
kernel-sourceSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.1 | 6.4.0-150600.23.42.1 |
kernel-symsSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.1 | 6.4.0-150600.23.42.1 |
kernel-defaultSUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2 | 6.4.0-150600.23.42.2 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2 | 6.4.0-150600.23.42.2 |
kernel-livepatch-SLE15-SP6_Update_9SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 72 CVEs |
before 1-150600.13.3.4 | 1-150600.13.3.4 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2 | 6.4.0-150600.23.42.2 |
kernel-defaultSUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2 | 6.4.0-150600.23.42.2 |
dtb-aarch64openSUSE:Leap 15.6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.1 | 6.4.0-150600.23.42.1 |
kernel-64kbopenSUSE:Leap 15.6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2 | 6.4.0-150600.23.42.2 |
kernel-debugopenSUSE:Leap 15.6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2 | 6.4.0-150600.23.42.2 |
kernel-defaultopenSUSE:Leap 15.6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2 | 6.4.0-150600.23.42.2 |
kernel-default-baseopenSUSE:Leap 15.6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2.150600.12.18.4 | 6.4.0-150600.23.42.2.150600.12.18.4 |
kernel-docsopenSUSE:Leap 15.6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.1 | 6.4.0-150600.23.42.1 |
kernel-kvmsmallopenSUSE:Leap 15.6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2 | 6.4.0-150600.23.42.2 |
kernel-obs-buildopenSUSE:Leap 15.6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2 | 6.4.0-150600.23.42.2 |
kernel-obs-qaopenSUSE:Leap 15.6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.1 | 6.4.0-150600.23.42.1 |
kernel-sourceopenSUSE:Leap 15.6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.1 | 6.4.0-150600.23.42.1 |
kernel-symsopenSUSE:Leap 15.6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.1 | 6.4.0-150600.23.42.1 |
kernel-zfcpdumpopenSUSE:Leap 15.6 From an advisory covering 72 CVEs |
before 6.4.0-150600.23.42.2 | 6.4.0-150600.23.42.2 |
kernel-livepatch-SLE15-SP6-RT_Update_9SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 71 CVEs |
before 1-150600.1.3.2 | 1-150600.1.3.2 |
kernel-rtSUSE:Real Time Module 15 SP6 From an advisory covering 71 CVEs |
before 6.4.0-150600.10.29.1 | 6.4.0-150600.10.29.1 |
kernel-rt_debugSUSE:Real Time Module 15 SP6 From an advisory covering 71 CVEs |
before 6.4.0-150600.10.29.1 | 6.4.0-150600.10.29.1 |
kernel-source-rtSUSE:Real Time Module 15 SP6 From an advisory covering 71 CVEs |
before 6.4.0-150600.10.29.1 | 6.4.0-150600.10.29.1 |
kernel-syms-rtSUSE:Real Time Module 15 SP6 From an advisory covering 71 CVEs |
before 6.4.0-150600.10.29.1 | 6.4.0-150600.10.29.1 |
kernel-rtopenSUSE:Leap 15.6 From an advisory covering 71 CVEs |
before 6.4.0-150600.10.29.1 | 6.4.0-150600.10.29.1 |
kernel-rt_debugopenSUSE:Leap 15.6 From an advisory covering 71 CVEs |
before 6.4.0-150600.10.29.1 | 6.4.0-150600.10.29.1 |
kernel-source-rtopenSUSE:Leap 15.6 From an advisory covering 71 CVEs |
before 6.4.0-150600.10.29.1 | 6.4.0-150600.10.29.1 |
kernel-syms-rtopenSUSE:Leap 15.6 From an advisory covering 71 CVEs |
before 6.4.0-150600.10.29.1 | 6.4.0-150600.10.29.1 |
kernel-livepatch-MICRO-6-0-RT_Update_6SUSE:Linux Micro 6.0 From an advisory covering 272 CVEs |
before 1-3.1 | 1-3.1 |
kernel-rtSUSE:Linux Micro 6.0 From an advisory covering 272 CVEs |
before 6.4.0-28.1 | 6.4.0-28.1 |
kernel-source-rtSUSE:Linux Micro 6.0 From an advisory covering 272 CVEs |
before 6.4.0-28.1 | 6.4.0-28.1 |
kernel-defaultSUSE:Linux Micro 6.0 From an advisory covering 347 CVEs |
before 6.4.0-28.1 | 6.4.0-28.1 |
kernel-default-baseSUSE:Linux Micro 6.0 From an advisory covering 347 CVEs |
before 6.4.0-28.1.21.6 | 6.4.0-28.1.21.6 |
kernel-kvmsmallSUSE:Linux Micro 6.0 From an advisory covering 347 CVEs |
before 6.4.0-28.1 | 6.4.0-28.1 |
kernel-livepatch-MICRO-6-0_Update_6SUSE:Linux Micro 6.0 From an advisory covering 347 CVEs |
before 1-3.1 | 1-3.1 |
kernel-sourceSUSE:Linux Micro 6.0 From an advisory covering 347 CVEs |
before 6.4.0-28.1 | 6.4.0-28.1 |
kernel-livepatch-MICRO-6-0-RT_Update_6SUSE:Linux Micro 6.1 From an advisory covering 272 CVEs |
before 1-3.1 | 1-3.1 |
kernel-rtSUSE:Linux Micro 6.1 From an advisory covering 272 CVEs |
before 6.4.0-28.1 | 6.4.0-28.1 |
kernel-source-rtSUSE:Linux Micro 6.1 From an advisory covering 272 CVEs |
before 6.4.0-28.1 | 6.4.0-28.1 |
kernel-defaultSUSE:Linux Micro 6.1 From an advisory covering 347 CVEs |
before 6.4.0-28.1 | 6.4.0-28.1 |
kernel-default-baseSUSE:Linux Micro 6.1 From an advisory covering 347 CVEs |
before 6.4.0-28.1.21.6 | 6.4.0-28.1.21.6 |
kernel-kvmsmallSUSE:Linux Micro 6.1 From an advisory covering 347 CVEs |
before 6.4.0-28.1 | 6.4.0-28.1 |
kernel-livepatch-MICRO-6-0_Update_6SUSE:Linux Micro 6.1 From an advisory covering 347 CVEs |
before 1-3.1 | 1-3.1 |
kernel-sourceSUSE:Linux Micro 6.1 From an advisory covering 347 CVEs |
before 6.4.0-28.1 | 6.4.0-28.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 145 CVEs |
before 4.12.14-122.293.1 | 4.12.14-122.293.1 |
kgraft-patch-SLE12-SP5_Update_77SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 145 CVEs |
before 1-8.3.1 | 1-8.3.1 |
kernel-defaultSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 145 CVEs |
before 4.12.14-122.293.1 | 4.12.14-122.293.1 |
kernel-sourceSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 145 CVEs |
before 4.12.14-122.293.1 | 4.12.14-122.293.1 |
kernel-symsSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 145 CVEs |
before 4.12.14-122.293.1 | 4.12.14-122.293.1 |
kernel-defaultSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 145 CVEs |
before 4.12.14-122.293.1 | 4.12.14-122.293.1 |
kernel-sourceSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 145 CVEs |
before 4.12.14-122.293.1 | 4.12.14-122.293.1 |
kernel-symsSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 145 CVEs |
before 4.12.14-122.293.1 | 4.12.14-122.293.1 |
linux-hwe-edgeUbuntu:16.04:LTS |
All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1 |
None known |
linux-aws-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30 |
None known |
linux-aws-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37 |
None known |
linux-azureUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38 |
None known |
linux-azure-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36 |
None known |
linux-azure-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2 |
None known |
linux-gcpUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35 |
None known |
linux-gcp-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1 |
None known |
linux-gke-4.15Ubuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84 |
None known |
linux-gke-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1 |
None known |
linux-gkeop-5.4Ubuntu:18.04:LTS |
All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1 |
None known |
linux-hweUbuntu:18.04:LTS |
All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72 |
None known |
linux-hwe-edgeUbuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2 |
None known |
linux-oemUbuntu:18.04:LTS |
All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114 |
None known |
linux-oracle-5.0Ubuntu:18.04:LTS |
All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19 |
None known |
linux-oracle-5.3Ubuntu:18.04:LTS |
All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1 |
None known |
linux-aws-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1 |
None known |
linux-aws-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1 |
None known |
linux-aws-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1 |
None known |
linux-azure-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2 |
None known |
linux-azure-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1 |
None known |
linux-azure-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1 |
None known |
linux-azure-fdeUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1 |
None known |
linux-bluefieldUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 45 moreShow less5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92 |
None known |
linux-gcp-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3 |
None known |
linux-gcp-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1 |
None known |
linux-gcp-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41 |
None known |
linux-gkeUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111 |
None known |
linux-gke-5.15Ubuntu:20.04:LTS |
All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1 |
None known |
linux-gkeopUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77 |
None known |
linux-gkeop-5.15Ubuntu:20.04:LTS |
All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1 |
None known |
linux-hwe-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1 |
None known |
linux-hwe-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1 |
None known |
linux-hwe-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1 |
None known |
linux-intel-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19 |
None known |
linux-oem-5.10Ubuntu:20.04:LTS |
All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61 |
None known |
linux-oem-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36 |
None known |
linux-oem-5.14Ubuntu:20.04:LTS |
All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67 |
None known |
linux-oem-5.6Ubuntu:20.04:LTS |
All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60 |
None known |
linux-oracle-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1 |
None known |
linux-oracle-5.13Ubuntu:20.04:LTS |
All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1 |
None known |
linux-oracle-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1 |
None known |
linux-raspi2Ubuntu:20.04:LTS |
All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6 |
None known |
linux-riscvUbuntu:20.04:LTS |
All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45 |
None known |
linux-riscv-5.11Ubuntu:20.04:LTS |
All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35 |
None known |
linux-riscv-5.8Ubuntu:20.04:LTS |
All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1 |
None known |
linux-allwinner-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1 |
None known |
linux-aws-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1 |
None known |
linux-aws-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1 |
None known |
linux-aws-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1 |
None known |
linux-aws-6.8Ubuntu:22.04:LTS |
before 6.8.0-1030.32~22.04.1, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1 Show 12 moreShow less6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.1 |
6.8.0-1030.32~22.04.1 |
linux-azure-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2 |
None known |
linux-azure-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1 |
None known |
linux-azure-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1 |
None known |
linux-azure-6.8Ubuntu:22.04:LTS |
before 6.8.0-1030.35~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1 Show 11 moreShow less6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.1 |
6.8.0-1030.35~22.04.1 |
linux-azure-fde-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1 |
None known |
linux-azure-fde-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1 |
None known |
linux-gcp-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1 |
None known |
linux-gcp-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1 |
None known |
linux-gcp-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1 |
None known |
linux-gcp-6.8Ubuntu:22.04:LTS |
before 6.8.0-1031.33~22.04.1, plus listed versions 6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1 Show 14 moreShow less6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.1 |
6.8.0-1031.33~22.04.1 |
linux-hwe-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50 |
None known |
linux-hwe-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1 |
None known |
linux-hwe-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1 |
None known |
linux-hwe-6.8Ubuntu:22.04:LTS |
before 6.8.0-64.67~22.04.1, plus listed versions 6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1 Show 9 moreShow less6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.1 |
6.8.0-64.67~22.04.1 |
linux-ibm-6.8Ubuntu:22.04:LTS |
before 6.8.0-1027.27~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1 Show 10 moreShow less6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.1 |
6.8.0-1027.27~22.04.1 |
linux-intel-iot-realtimeUbuntu:22.04:LTS |
All versions, plus listed versions 5.15.0-1073.75 |
None known |
linux-lowlatency-hwe-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30 |
None known |
linux-lowlatency-hwe-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1 |
None known |
linux-lowlatency-hwe-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1 |
None known |
linux-lowlatency-hwe-6.8Ubuntu:22.04:LTS |
before 6.8.0-62.65.1~22.04.1, plus listed versions 6.8.0-38.38.1~22.04.26.8.0-40.40.1~22.04.16.8.0-44.44.1~22.04.16.8.0-45.45.1~22.04.16.8.0-47.47.1~22.04.1 Show 12 moreShow less6.8.0-48.48.3~22.04.16.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-54.56.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.16.8.0-60.63.1~22.04.1 |
6.8.0-62.65.1~22.04.1 |
linux-nvidia-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15 |
None known |
linux-nvidia-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15 Show 6 moreShow less6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25 |
None known |
linux-nvidia-6.8Ubuntu:22.04:LTS |
before 6.8.0-1029.32~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1 Show 15 moreShow less6.8.0-1013.14~22.04.16.8.0-1014.15~22.04.16.8.0-1015.16~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1022.25~22.04.26.8.0-1023.26~22.04.16.8.0-1024.27~22.04.16.8.0-1025.28~22.04.16.8.0-1026.29~22.04.16.8.0-1027.30~22.04.16.8.0-1028.31~22.04.1 |
6.8.0-1029.32~22.04.1 |
linux-oem-5.17Ubuntu:22.04:LTS |
All versions, plus listed versions 5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13 Show 21 moreShow less5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36 |
None known |
linux-oem-6.0Ubuntu:22.04:LTS |
All versions, plus listed versions 6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10 Show 11 moreShow less6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21 |
None known |
linux-oem-6.1Ubuntu:22.04:LTS |
All versions, plus listed versions 6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9 Show 22 moreShow less6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36 |
None known |
linux-oem-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8 Show 14 moreShow less6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28 |
None known |
linux-oracle-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1 Show 8 moreShow less6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1 |
None known |
linux-oracle-6.8Ubuntu:22.04:LTS |
before 6.8.0-1027.28~22.04.1, plus listed versions 6.8.0-1006.6~22.04.36.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1 Show 14 moreShow less6.8.0-1013.13~22.04.16.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.17~22.04.16.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.20~22.04.16.8.0-1020.21~22.04.16.8.0-1021.22~22.04.16.8.0-1022.23~22.04.16.8.0-1023.24~22.04.16.8.0-1024.25~22.04.16.8.0-1025.26~22.04.16.8.0-1026.27~22.04.1 |
6.8.0-1027.28~22.04.1 |
linux-realtimeUbuntu:22.04:LTS |
All versions, plus listed versions 5.15.0-1032.35 |
None known |
linux-riscvUbuntu:22.04:LTS |
All versions, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4 Show 18 moreShow less5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32 |
None known |
linux-riscv-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1 |
None known |
linux-riscv-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1 Show 5 moreShow less6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1 |
None known |
linux-riscv-6.8Ubuntu:22.04:LTS |
before 6.8.0-62.65~22.04.1, plus listed versions 6.8.0-38.38.1~22.04.16.8.0-39.39.1~22.04.16.8.0-40.40.1~22.04.16.8.0-41.41.1~22.04.16.8.0-44.44.1~22.04.1 Show 12 moreShow less6.8.0-47.47.1~22.04.16.8.0-48.48.1~22.04.26.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-53.55.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.1 |
6.8.0-62.65~22.04.1 |
linux-starfive-5.19Ubuntu:22.04:LTS |
All versions, plus listed versions 5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1 |
None known |
linux-starfive-6.2Ubuntu:22.04:LTS |
All versions, plus listed versions 6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1 |
None known |
linux-starfive-6.5Ubuntu:22.04:LTS |
All versions, plus listed versions 6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1 Show 6 moreShow less6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.16.5.0-1017.18~22.04.16.5.0-1018.19~22.04.1 |
None known |
linux-bluefieldUbuntu:Nvidia-BlueField:22.04:LTS |
before 5.15.0-1072.74, plus listed versions 5.15.0-1011.135.15.0-1014.165.15.0-1015.175.15.0-1017.195.15.0-1019.21 Show 39 moreShow less5.15.0-1021.235.15.0-1022.245.15.0-1023.255.15.0-1024.265.15.0-1027.295.15.0-1028.305.15.0-1031.335.15.0-1032.345.15.0-1033.355.15.0-1035.375.15.0-1036.385.15.0-1037.395.15.0-1038.405.15.0-1040.425.15.0-1042.445.15.0-1043.455.15.0-1044.465.15.0-1045.475.15.0-1047.495.15.0-1048.505.15.0-1050.525.15.0-1051.535.15.0-1052.545.15.0-1053.555.15.0-1054.565.15.0-1056.585.15.0-1057.595.15.0-1058.605.15.0-1059.615.15.0-1060.625.15.0-1061.635.15.0-1062.645.15.0-1063.655.15.0-1064.665.15.0-1065.675.15.0-1066.685.15.0-1067.695.15.0-1069.715.15.0-1070.72 |
5.15.0-1072.74 |
linux-realtime-6.8Ubuntu:Pro:Realtime:22.04:LTS |
before 6.8.1-1023.24~22.04.1, plus listed versions 6.8.1-1004.4~22.04.16.8.1-1005.5~22.04.26.8.1-1006.6~22.04.16.8.1-1007.7~22.04.16.8.1-1008.8~22.04.1 Show 14 moreShow less6.8.1-1009.9~22.04.16.8.1-1010.10~22.04.16.8.1-1011.11~22.04.16.8.1-1012.12~22.04.16.8.1-1013.14~22.04.16.8.1-1014.15~22.04.16.8.1-1015.16~22.04.16.8.1-1016.17~22.04.16.8.1-1017.18~22.04.16.8.1-1018.19~22.04.16.8.1-1019.20~22.04.16.8.1-1020.21~22.04.16.8.1-1021.22~22.04.16.8.1-1022.23~22.04.1 |
6.8.1-1023.24~22.04.1 |
linuxUbuntu:24.04:LTS |
before 6.8.0-62.65, plus listed versions 6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22 Show 24 moreShow less6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.476.8.0-48.486.8.0-49.496.8.0-50.516.8.0-51.526.8.0-52.536.8.0-53.556.8.0-54.566.8.0-55.576.8.0-56.586.8.0-57.596.8.0-58.606.8.0-59.616.8.0-60.63 |
6.8.0-62.65 |
linux-awsUbuntu:24.04:LTS |
before 6.8.0-1030.32, plus listed versions 6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8 Show 20 moreShow less6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1023.256.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.31 |
6.8.0-1030.32 |
linux-azureUbuntu:24.04:LTS |
before 6.8.0-1030.35, plus listed versions 6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6 Show 18 moreShow less6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.206.8.0-1018.216.8.0-1020.236.8.0-1021.256.8.0-1025.306.8.0-1026.316.8.0-1027.326.8.0-1028.336.8.0-1029.34 |
6.8.0-1030.35 |
linux-azure-6.11Ubuntu:24.04:LTS |
before 6.11.0-1013.13~24.04.1, plus listed versions 6.11.0-1008.8~24.04.16.11.0-1012.12~24.04.1 |
6.11.0-1013.13~24.04.1 |
linux-azure-nvidiaUbuntu:24.04:LTS |
before 6.8.0-1018.19, plus listed versions 6.8.0-1013.146.8.0-1014.156.8.0-1016.17 |
6.8.0-1018.19 |
linux-gcpUbuntu:24.04:LTS |
before 6.8.0-1031.33, plus listed versions 6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6 Show 22 moreShow less6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.32 |
6.8.0-1031.33 |
linux-gcp-6.11Ubuntu:24.04:LTS |
before 6.11.0-1013.13~24.04.1, plus listed versions 6.11.0-1006.6~24.04.26.11.0-1011.11~24.04.1 |
6.11.0-1013.13~24.04.1 |
linux-gkeUbuntu:24.04:LTS |
before 6.8.0-1026.30, plus listed versions 6.8.0-1003.56.8.0-1004.76.8.0-1005.86.8.0-1006.96.8.0-1007.10 Show 17 moreShow less6.8.0-1008.116.8.0-1009.126.8.0-1010.136.8.0-1011.146.8.0-1012.156.8.0-1013.176.8.0-1014.186.8.0-1015.196.8.0-1016.206.8.0-1017.216.8.0-1019.236.8.0-1020.246.8.0-1021.256.8.0-1022.266.8.0-1023.276.8.0-1024.286.8.0-1025.29 |
6.8.0-1026.30 |
linux-gkeopUbuntu:24.04:LTS |
before 6.8.0-1013.15, plus listed versions 6.8.0-1001.36.8.0-1002.46.8.0-1003.56.8.0-1004.66.8.0-1006.8 Show 6 moreShow less6.8.0-1007.96.8.0-1008.106.8.0-1009.116.8.0-1010.126.8.0-1011.136.8.0-1012.14 |
6.8.0-1013.15 |
linux-hwe-6.11Ubuntu:24.04:LTS |
before 6.11.0-24.24~24.04.1, plus listed versions 6.11.0-17.17~24.04.26.11.0-19.19~24.04.16.11.0-21.21~24.04.1 |
6.11.0-24.24~24.04.1 |
linux-ibmUbuntu:24.04:LTS |
before 6.8.0-1027.27, plus listed versions 6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5 Show 19 moreShow less6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.156.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1022.226.8.0-1023.236.8.0-1024.246.8.0-1025.256.8.0-1026.26 |
6.8.0-1027.27 |
linux-lowlatencyUbuntu:24.04:LTS |
before 6.8.0-62.65.1, plus listed versions 6.5.0-9.9.16.6.0-14.14.16.8.0-7.7.16.8.0-25.25.36.8.0-28.28.1 Show 23 moreShow less6.8.0-31.31.16.8.0-35.35.16.8.0-36.36.16.8.0-38.38.16.8.0-39.39.16.8.0-40.40.16.8.0-41.41.16.8.0-44.44.16.8.0-45.45.16.8.0-47.47.16.8.0-48.48.36.8.0-49.49.16.8.0-50.51.16.8.0-51.52.16.8.0-52.53.16.8.0-53.55.26.8.0-54.56.16.8.0-55.57.16.8.0-56.58.16.8.0-57.59.16.8.0-58.60.16.8.0-59.61.16.8.0-60.63.1 |
6.8.0-62.65.1 |
linux-lowlatency-hwe-6.11Ubuntu:24.04:LTS |
before 6.11.0-1012.13~24.04.1, plus listed versions 6.11.0-1009.10~24.04.16.11.0-1011.12~24.04.1 |
6.11.0-1012.13~24.04.1 |
linux-nvidiaUbuntu:24.04:LTS |
before 6.8.0-1029.32, plus listed versions 6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.11 Show 16 moreShow less6.8.0-1012.126.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1022.256.8.0-1023.266.8.0-1024.276.8.0-1025.286.8.0-1026.296.8.0-1027.306.8.0-1028.31 |
6.8.0-1029.32 |
linux-nvidia-6.11Ubuntu:24.04:LTS |
before 6.11.0-1007.7, plus listed versions 6.11.0-1002.26.11.0-1003.3 |
6.11.0-1007.7 |
linux-nvidia-lowlatencyUbuntu:24.04:LTS |
before 6.8.0-1029.32.1, plus listed versions 6.8.0-1009.9.16.8.0-1011.11.16.8.0-1012.12.16.8.0-1013.14.16.8.0-1014.15.1 Show 13 moreShow less6.8.0-1015.16.16.8.0-1017.19.16.8.0-1018.20.16.8.0-1019.21.16.8.0-1020.22.16.8.0-1021.23.16.8.0-1022.25.26.8.0-1023.26.16.8.0-1024.27.16.8.0-1025.28.16.8.0-1026.29.16.8.0-1027.30.16.8.0-1028.31.1 |
6.8.0-1029.32.1 |
linux-nvidia-tegraUbuntu:24.04:LTS |
before 6.8.0-1008.8, plus listed versions 6.8.0-1003.36.8.0-1004.4 |
6.8.0-1008.8 |
linux-oem-6.11Ubuntu:24.04:LTS |
before 6.11.0-1020.20, plus listed versions 6.11.0-1007.76.11.0-1008.86.11.0-1009.96.11.0-1010.106.11.0-1011.11 Show 6 moreShow less6.11.0-1012.126.11.0-1013.136.11.0-1015.156.11.0-1016.166.11.0-1017.176.11.0-1018.18 |
6.11.0-1020.20 |
linux-oem-6.8Ubuntu:24.04:LTS |
before 6.8.0-1029.29, plus listed versions 6.8.0-1003.36.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.7 Show 17 moreShow less6.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1020.206.8.0-1024.246.8.0-1025.256.8.0-1026.266.8.0-1027.276.8.0-1028.28 |
6.8.0-1029.29 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | CVE List, EUVD, NVD | |
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-21681 is a medium vulnerability (CVSS 5.5) in Linux, published January 31, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. Fixed in kernel 6.6.76.1-1.
References
git.kernel.org/stable/c/b5c73fc92f8d15c16e5dc87b5c17d2abf1e6d092
git.kernel.org/stable/c/87fcf0d137c770e6040ebfdb0abd8e7dd481b504
git.kernel.org/stable/c/930268823f6bccb697aa5d2047aeffd4a497308c
git.kernel.org/stable/c/ea9e990356b7bee95440ba0e6e83cc4d701afaca
git.kernel.org/stable/c/ea966b6698785fb9cd0fdb867acd91b222e4723f
git.kernel.org/stable/c/82f433e8dd0629e16681edf6039d094b5518d8ed
Show 194 moreShow less
git.kernel.org/stable/c/47e55e4b410f7d552e43011baa5be1aab4093990
lists.debian.org/debian-lts-announce/2025/03/msg00001.html
nvd.nist.gov/vuln/detail/CVE-2025-21681
github.com/advisories/GHSA-2x4f-r6q9-v77h
docs.bell-sw.com/security/cves/CVE-2025-21681
errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1757963029.html
nvd.nist.gov/vuln/detail/CVE-2021-47352
nvd.nist.gov/vuln/detail/CVE-2022-48773
nvd.nist.gov/vuln/detail/CVE-2022-48828
nvd.nist.gov/vuln/detail/CVE-2022-48829
nvd.nist.gov/vuln/detail/CVE-2023-52667
nvd.nist.gov/vuln/detail/CVE-2023-53034
nvd.nist.gov/vuln/detail/CVE-2023-6931
nvd.nist.gov/vuln/detail/CVE-2024-26744
nvd.nist.gov/vuln/detail/CVE-2024-28956
nvd.nist.gov/vuln/detail/CVE-2024-36350
nvd.nist.gov/vuln/detail/CVE-2024-38541
nvd.nist.gov/vuln/detail/CVE-2024-38555
nvd.nist.gov/vuln/detail/CVE-2024-46855
nvd.nist.gov/vuln/detail/CVE-2024-50000
nvd.nist.gov/vuln/detail/CVE-2024-50001
nvd.nist.gov/vuln/detail/CVE-2024-50146
nvd.nist.gov/vuln/detail/CVE-2024-50154
nvd.nist.gov/vuln/detail/CVE-2024-56655
nvd.nist.gov/vuln/detail/CVE-2024-58093
nvd.nist.gov/vuln/detail/CVE-2025-21956
nvd.nist.gov/vuln/detail/CVE-2025-21957
nvd.nist.gov/vuln/detail/CVE-2025-21959
nvd.nist.gov/vuln/detail/CVE-2025-21971
nvd.nist.gov/vuln/detail/CVE-2025-21991
nvd.nist.gov/vuln/detail/CVE-2025-21992
nvd.nist.gov/vuln/detail/CVE-2025-21993
nvd.nist.gov/vuln/detail/CVE-2025-21996
nvd.nist.gov/vuln/detail/CVE-2025-22004
nvd.nist.gov/vuln/detail/CVE-2025-22005
nvd.nist.gov/vuln/detail/CVE-2025-22007
nvd.nist.gov/vuln/detail/CVE-2025-22018
nvd.nist.gov/vuln/detail/CVE-2025-22020
nvd.nist.gov/vuln/detail/CVE-2025-22021
nvd.nist.gov/vuln/detail/CVE-2025-22035
nvd.nist.gov/vuln/detail/CVE-2025-22045
nvd.nist.gov/vuln/detail/CVE-2025-22047
nvd.nist.gov/vuln/detail/CVE-2025-22054
nvd.nist.gov/vuln/detail/CVE-2025-22063
nvd.nist.gov/vuln/detail/CVE-2025-22071
nvd.nist.gov/vuln/detail/CVE-2025-22073
nvd.nist.gov/vuln/detail/CVE-2025-22079
nvd.nist.gov/vuln/detail/CVE-2025-22086
nvd.nist.gov/vuln/detail/CVE-2025-23136
nvd.nist.gov/vuln/detail/CVE-2025-23139
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1782155469.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1783791447.html
github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21681.json
git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
security-tracker.debian.org/tracker/CVE-2025-21681
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1371
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1372
suse.com/support/update/announcement/2025/suse-su-20250564-1
bugzilla.suse.com/1215199
bugzilla.suse.com/1222803
bugzilla.suse.com/1224049
bugzilla.suse.com/1226980
bugzilla.suse.com/1227937
bugzilla.suse.com/1231088
bugzilla.suse.com/1232101
bugzilla.suse.com/1232161
bugzilla.suse.com/1233028
bugzilla.suse.com/1233221
bugzilla.suse.com/1233248
bugzilla.suse.com/1233522
bugzilla.suse.com/1233778
bugzilla.suse.com/1234070
bugzilla.suse.com/1234683
bugzilla.suse.com/1234693
bugzilla.suse.com/1234947
bugzilla.suse.com/1235001
bugzilla.suse.com/1235217
bugzilla.suse.com/1235230
bugzilla.suse.com/1235244
bugzilla.suse.com/1235390
bugzilla.suse.com/1235418
bugzilla.suse.com/1235430
bugzilla.suse.com/1235441
bugzilla.suse.com/1235485
bugzilla.suse.com/1235487
bugzilla.suse.com/1235489
bugzilla.suse.com/1235498
bugzilla.suse.com/1235545
bugzilla.suse.com/1235578
bugzilla.suse.com/1235582
bugzilla.suse.com/1235583
bugzilla.suse.com/1235612
bugzilla.suse.com/1235638
bugzilla.suse.com/1235656
bugzilla.suse.com/1235686
bugzilla.suse.com/1235865
bugzilla.suse.com/1235874
bugzilla.suse.com/1235914
bugzilla.suse.com/1235941
bugzilla.suse.com/1235948
bugzilla.suse.com/1236127
bugzilla.suse.com/1236160
bugzilla.suse.com/1236161
suse.com/security/cve/CVE-2024-40980
suse.com/security/cve/CVE-2024-46858
suse.com/security/cve/CVE-2024-49948
suse.com/security/cve/CVE-2024-49978
suse.com/security/cve/CVE-2024-50142
suse.com/security/cve/CVE-2024-50251
suse.com/security/cve/CVE-2024-50258
suse.com/security/cve/CVE-2024-50304
suse.com/security/cve/CVE-2024-53123
suse.com/security/cve/CVE-2024-53187
suse.com/security/cve/CVE-2024-53203
suse.com/security/cve/CVE-2024-56592
suse.com/security/cve/CVE-2024-56600
suse.com/security/cve/CVE-2024-56601
suse.com/security/cve/CVE-2024-56608
suse.com/security/cve/CVE-2024-56610
suse.com/security/cve/CVE-2024-56633
suse.com/security/cve/CVE-2024-56650
suse.com/security/cve/CVE-2024-56658
suse.com/security/cve/CVE-2024-56665
suse.com/security/cve/CVE-2024-56679
suse.com/security/cve/CVE-2024-56693
suse.com/security/cve/CVE-2024-56707
suse.com/security/cve/CVE-2024-56715
suse.com/security/cve/CVE-2024-56725
suse.com/security/cve/CVE-2024-56726
suse.com/security/cve/CVE-2024-56727
suse.com/security/cve/CVE-2024-56728
suse.com/security/cve/CVE-2024-56763
suse.com/security/cve/CVE-2024-57802
suse.com/security/cve/CVE-2024-57882
suse.com/security/cve/CVE-2024-57884
suse.com/security/cve/CVE-2024-57917
suse.com/security/cve/CVE-2024-57931
suse.com/security/cve/CVE-2024-57938
suse.com/security/cve/CVE-2024-57946
suse.com/security/cve/CVE-2025-21652
suse.com/security/cve/CVE-2025-21653
suse.com/security/cve/CVE-2025-21655
suse.com/security/cve/CVE-2025-21663
suse.com/security/cve/CVE-2025-21664
suse.com/security/cve/CVE-2025-21665
suse.com/security/cve/CVE-2025-21666
suse.com/security/cve/CVE-2025-21667
ubuntu.com/security/CVE-2025-21681
cve.org/CVERecord?id=CVE-2025-21681
git.kernel.org/linus/47e55e4b410f7d552e43011baa5be1aab4093990
ubuntu.com/security/notices/USN-7445-1
ubuntu.com/security/notices/USN-7448-1
ubuntu.com/security/notices/USN-7595-1
ubuntu.com/security/notices/USN-7596-1
ubuntu.com/security/notices/USN-7595-2
ubuntu.com/security/notices/USN-7596-2
ubuntu.com/security/notices/USN-7595-3
ubuntu.com/security/notices/USN-7595-4
ubuntu.com/security/notices/USN-7595-5
ubuntu.com/security/notices/USN-7653-1
ubuntu.com/security/CVE-2024-57948
ubuntu.com/security/CVE-2024-57949
ubuntu.com/security/CVE-2024-57950
ubuntu.com/security/CVE-2024-57951
ubuntu.com/security/CVE-2024-57952
ubuntu.com/security/CVE-2025-21665
ubuntu.com/security/CVE-2025-21666
ubuntu.com/security/CVE-2025-21667
ubuntu.com/security/CVE-2025-21668
ubuntu.com/security/CVE-2025-21669
ubuntu.com/security/CVE-2025-21670
ubuntu.com/security/CVE-2025-21672
ubuntu.com/security/CVE-2025-21673
ubuntu.com/security/CVE-2025-21674
ubuntu.com/security/CVE-2025-21675
ubuntu.com/security/CVE-2025-21676
ubuntu.com/security/CVE-2025-21677
ubuntu.com/security/CVE-2025-21678
ubuntu.com/security/CVE-2025-21680
ubuntu.com/security/CVE-2025-21682
ubuntu.com/security/CVE-2025-21683
ubuntu.com/security/CVE-2025-21684
ubuntu.com/security/CVE-2025-21685
ubuntu.com/security/CVE-2025-21689
ubuntu.com/security/CVE-2025-21690
ubuntu.com/security/CVE-2025-21691
ubuntu.com/security/CVE-2025-21692
ubuntu.com/security/CVE-2025-21693
ubuntu.com/security/CVE-2025-21694
ubuntu.com/security/CVE-2025-21695
ubuntu.com/security/CVE-2025-21696
ubuntu.com/security/CVE-2025-21697
ubuntu.com/security/CVE-2025-21699
ubuntu.com/security/CVE-2025-21700
Left out here: 86 package rows, 62 versions, 1,816 references and the rest of 15 source descriptions. The JSON record has them.