CVE-2025-21714

RDMA/mlx5: Fix implicit ODP use after free

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Fix implicit ODP use after free

Prevent double queueing of implicit ODP mr destroy work by using __xa_cmpxchg() to make sure this is the only time we are destroying this specific mr.

Without this change, we could try to invalidate this mr twice, which in turn could result in queuing a MR work destroy twice, and eventually the second work could execute after the MR was freed due to the first work, causing a user after free and trace below.

refcount_t: underflow; use-after-free. WARNING: CPU: 2 PID: 12178 at lib/refcount.c:28 refcount_warn_saturate+0x12b/0x130 Modules linked in: bonding ib_ipoib vfio_pci ip_gre geneve nf_tables ip6_gre gre ip6_tunnel tunnel6 ipip tunnel4 ib_umad rdma_ucm mlx5_vfio_pci vfio_pci_core vfio_iommu_type1 mlx5_ib vfio ib_uverbs mlx5_core iptable_raw openvswitch nsh rpcrdma ib_iser libiscsi scsi_transport_iscsi rdma_cm iw_cm ib_cm ib_core xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink xt_addrtype iptable_nat nf_nat br_netfilter rpcsec_gss_krb5 auth_rpcgss oid_registry overlay zram zsmalloc fuse [last unloaded: ib_uverbs] CPU: 2 PID: 12178 Comm: kworker/u20:5 Not tainted 6.5.0-rc1_net_next_mlx5_58c644e #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 Workqueue: events_unbound free_implicit_child_mr_work [mlx5_ib] RIP: 0010:refcount_warn_saturate+0x12b/0x130 Code: 48 c7 c7 38 95 2a 82 c6 05 bc c6 fe 00 01 e8 0c 66 aa ff 0f 0b 5b c3 48 c7 c7 e0 94 2a 82 c6 05 a7 c6 fe 00 01 e8 f5 65 aa ff <0f> 0b 5b c3 90 8b 07 3d 00 00 00 c0 74 12 83 f8 01 74 13 8d 50 ff RSP: 0018:ffff8881008e3e40 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000027 RDX: ffff88852c91b5c8 RSI: 0000000000000001 RDI: ffff88852c91b5c0 RBP: ffff8881dacd4e00 R08: 00000000ffffffff R09: 0000000000000019 R10: 000000000000072e R11: 0000000063666572 R12: ffff88812bfd9e00 R13: ffff8881c792d200 R14: ffff88810011c005 R15: ffff8881002099c0 FS: 0000000000000000(0000) GS:ffff88852c900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5694b5e000 CR3: 00000001153f6003 CR4: 0000000000370ea0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ? refcount_warn_saturate+0x12b/0x130 free_implicit_child_mr_work+0x180/0x1b0 [mlx5_ib] process_one_work+0x1cc/0x3c0 worker_thread+0x218/0x3c0 kthread+0xc6/0xf0 ret_from_fork+0x1f/0x30 </TASK>

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.24%Up 0.2 points since Feb 27, 2025

What each source reports

CVE List Score used 7.8

RDMA/mlx5: Fix implicit ODP use after free

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Fix implicit ODP use after free

Prevent double queueing of implicit ODP mr destroy work by using __xa_cmpxchg() to make sure this is the only time we are destroying this specific mr.

Record: CVE-2025-21714
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

EUVDEUVD-2025-5252 7.8

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Fix implicit ODP use after free

Prevent double queueing of implicit ODP mr destroy work by using __xa_cmpxchg() to make sure this is the only time we are destroying this specific mr.

Record: EUVD-2025-5252
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-3g4q-gv3v-9pj2 7.8

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP...

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Fix implicit ODP use after free

Prevent double queueing of implicit ODP mr destroy work by using __xa_cmpxchg() to make sure this is the only time we are destroying this specific mr.

Record: GHSA-3g4q-gv3v-9pj2
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Fix implicit ODP use after free

Prevent double queueing of implicit ODP mr destroy work by using __xa_cmpxchg() to make sure this is the only time we are destroying this specific mr.

Record: CVE-2025-21714
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-416
Updated: 2026-11-02

OSVBELL-CVE-2025-21714 7.8

Record: BELL-CVE-2025-21714
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-04

OSV 7.8

RDMA/mlx5: Fix implicit ODP use after free

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Fix implicit ODP use after free

Prevent double queueing of implicit ODP mr destroy work by using __xa_cmpxchg() to make sure this is the only time we are destroying this specific mr.

Record: CVE-2025-21714
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 30 moreShow less

OSVDEBIAN-CVE-2025-21714 7.8

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent double queueing of implicit ODP mr destroy work by using __xa_cmpxchg() to make sure this is the only time we are destroying this specific mr. Without this change, we could try to invalidate this mr twice, which in turn could result in queuing a MR work destroy twice, and eventually the second work could execute after the MR was freed due to the first work, causing a user after free and trace below. refcount_t: underflow; use-after-free. WARNING: CPU: 2 PID: 12178 at lib/refcount.c:28 refcount_warn_saturate+0x12b/0x130 Modules linked in: bonding ib_ipoib vfio_pci ip_gre geneve nf_tables ip6_gre gre ip6_tunnel tunnel6 ipip tunnel4 ib_umad rdma_ucm mlx5_vfio_pci vfio_pci_core vfio_iommu_type1 mlx5_ib vfio ib_uverbs mlx5_core iptable_raw openvswitch nsh rpcrdma ib_iser libiscsi scsi_transport_iscsi rdma_cm iw_cm ib_cm ib_core xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink xt_addrtype iptable_nat nf_nat br_netfilter rpcsec_gss_krb5 auth_rpcgss oid_registry overlay zram zsmalloc fuse [last unloaded: ib_uverbs] CPU: 2 PID: 12178 Comm: kworker/u20:5 Not tainted 6.5.0-rc1_net_next_mlx5_58c644e #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 Workqueue: events_unbound free_implicit_child_mr_work [mlx5_ib] RIP: 0010:refcount_warn_saturate+0x12b/0x130 Code: 48 c7 c7 38 95 2a 82 c6 05 bc c6 fe 00 01 e8 0c 66 aa ff 0f 0b 5b c3 48 c7 c7 e0 94 2a 82 c6 05 a7 c6 fe 00 01 e8 f5 65 aa ff <0f> 0b 5b c3 90 8b 07 3d 00 00 00 c0 74 12 83 f8 01 74 13 8d 50 ff RSP: 0018:ffff8881008e3e40 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000027 RDX: ffff88852c91b5c8 RSI: 0000000000000001 RDI: ffff88852c91b5c0 RBP: ffff8881dacd4e00 R08: 00000000ffffffff R09: 0000000000000019 R10: 000000000000072e R11: 0000000063666572 R12: ffff88812bfd9e00 R13: ffff8881c792d200 R14: ffff88810011c005 R15: ffff8881002099c0 FS: 0000000000000000(0000) GS:ffff88852c900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f5694b5e000 CR3: 00000001153f6003 CR4: 0000000000370ea0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ? refcount_warn_saturate+0x12b/0x130 free_implicit_child_mr_work+0x180/0x1b0 [mlx5_ib] process_one_work+0x1cc/0x3c0 worker_thread+0x218/0x3c0 kthread+0xc6/0xf0 ret_from_fork+0x1f/0x30 </TASK>

Record: DEBIAN-CVE-2025-21714
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:20518 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:20518
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2025:20518 7.8

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830)
kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689)
kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744)
kernel: vfs: fix race between evice_inodes() and find_inode()&iput() (CVE-2024-47679)
kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727)
kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864)
kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060)
kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024)
kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195)
kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294)
kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052)
kernel: afs: Fix lock recursion (CVE-2024-53090)
kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)
kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)
kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229)
kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170)
kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)
kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)
kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709)
kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)
kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786)
kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)
kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)
kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)
kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672)
kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
kernel: usbnet: fix memory leak in error case (CVE-2022-49657)
kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432)
kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672)
kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353)
kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437)
kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627)
kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670)
kernel: can: isotp: sanitize CAN ID checks in isotp_bind() (CVE-2022-49269)
kernel:…

Record: RLSA-2025:20518
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-21714 7.8

Record: UBUNTU-CVE-2025-21714
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-06

OSVALSA-2025:20518 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830)
kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689)
kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744)
kernel: vfs: fix race between evice_inodes() and find_inode()&iput() (CVE-2024-47679)
kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727)
kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864)
kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060)
kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024)
kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195)
kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294)
kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052)
kernel: afs: Fix lock recursion (CVE-2024-53090)
kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)
kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)
kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229)
kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170)
kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)
kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)
kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709)
kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)
kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786)
kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)
kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)
kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)
kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672)
kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
kernel: usbnet: fix memory leak in error case (CVE-2022-49657)
kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432)
kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672)
kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353)
kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437)
kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627)
kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670)
kernel: can: isotp: sanitize CAN ID…

Record: ALSA-2025:20518
Updated: 2026-11-02

OSVAZL-59022 No score

CVE-2025-21714 affecting package kernel 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Fix implicit ODP use after free

Prevent double queueing of implicit ODP mr destroy work by using __xa_cmpxchg() to make sure this is the only time we are destroying this specific mr.

Record: AZL-59022
Updated: 2026-11-05

OSVAZL-59034 No score

CVE-2025-21714 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Fix implicit ODP use after free

Prevent double queueing of implicit ODP mr destroy work by using __xa_cmpxchg() to make sure this is the only time we are destroying this specific mr.

Record: AZL-59034
Updated: 2026-11-02

OSVCLSA-2026-1786824415 No score

kernel: Fix of 82 CVEs

nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling
wifi: rtlwifi: pci: wait for firmware loading before releasing memory
wifi: rtlwifi: fix memory leaks and invalid access at probe error path {CVE-2024-58063}
tracing: Fix bad hist from corrupting named_triggers list {CVE-2025-21899}
PM / devfreq: Fix leak in devfreq_dev_release() {CVE-2023-53518}
net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization {CVE-2025-38725}
net/sched: Fix backlog accounting in qdisc_dequeue_internal {CVE-2025-37992}
nfsd: decrease sc_count directly if fail to queue dl_recall {CVE-2025-22025}
net: usb: asix_devices: add phy_mask for ax88772 mdio bus {CVE-2025-38725}
nfsd: put dl_stid if fail to queue dl_recall {CVE-2025-22025}
rtnetlink: add missing netlink_ns_capable() check for peer netns {CVE-2026-31692}
mm: add smp_rmb() in pfn_swap_entry_to_page() to pair with THP split {CVE-2026-31466}
net_sched: Flush gso_skb list too during ->change() {CVE-2025-37992}
io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() {CVE-2025-38106}
Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884}
mtd: rawnand: serialize lock/unlock against other NAND operations {CVE-2026-23434}
be2net: fix potential memory leak in be_xmit() {CVE-2024-50167}
net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data {CVE-2024-53058}
Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet {CVE-2024-55916}
idpf: detach and close netdevs while handling a reset {CVE-2026-22981}
ice: fix devlink reload call trace {CVE-2026-23104}
nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec {CVE-2026-23112}
bpf: Prevent tailcall infinite loop caused by freplace {CVE-2024-47794}
crypto: pcrypt - restore callback for non-parallel fallback
crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY {CVE-2024-56690}
tracing/histograms: Allow variables to have some modifiers {CVE-2023-53093}
intel_th: fix device leak on output open() {CVE-2026-23091}
RDMA/mlx5: Fix implicit ODP hang on parent deregistration
RDMA/mlx5: Fix implicit ODP use after free {CVE-2025-21714}
net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping {CVE-2025-38126}
KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer {CVE-2025-71104}
i2c: s3c24xx: check the size of the SMBUS message before using it {CVE-2026-31627}
scsi: qla2xxx: Free sp in error path to fix system crash {CVE-2025-71232}
nfc: llcp: add missing return after LLCP_CLOSED checks {CVE-2026-31629}
gfs2: No more self recovery {CVE-2025-38659}
hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() {CVE-2022-50334}
tracing: Prevent bad count for tracing_cpumask_write {CVE-2024-56763}
CDC-NCM: avoid overflow in sanity checking {CVE-2022-48938}
cxl: Fix race of nvdimm_bus object when creating nvdimm objects {CVE-2026-23348}
KVM: SEV: Protect all of sev_mem_enc_register_region() with kvm->lock {CVE-2026-31592}
sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting {CVE-2026-23371}
md/raid1,raid10: don't ignore IO flags {CVE-2025-22125}
mm: slub: avoid wake up kswapd in set_track_prepare {CVE-2025-39843}
iommu/vt-d: Disallow dirty tracking if incoherent page walk {CVE-2025-40058}
backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() {CVE-2025-23144}
PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 {CVE-2025-21831}
drm/amd/display: Add null pointer check for get_first_active_display() {CVE-2025-38362}
pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map {CVE-2022-49832}
spi: fsl-qspi: Simplify probe error handling using managed API
spi: fsl-qspi: Fix double cleanup in probe error path
spi:…

Record: CLSA-2026-1786824415
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-11-CVE-2025-21714 No score

CVE-2025-21714 in linux - Patched by Root

Root has patched CVE-2025-21714 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-11-CVE-2025-21714
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2025-21714 No score

CVE-2025-21714 in linux - Patched by Root

Root has patched CVE-2025-21714 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2025-21714
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2204-CVE-2025-21714 No score

CVE-2025-21714 in linux - Patched by Root

Root has patched CVE-2025-21714 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2025-21714
Updated: 2026-11-06

OSVSUSE-SU-2025:01919-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-43869: perf: Fix hang while freeing sigtrap event (bsc#1229491).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086). -…

Record: SUSE-SU-2025:01919-1
Updated: 2026-11-02

OSVSUSE-SU-2025:1177-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738).
CVE-2025-21760: ndisc: extend RCU protection in ndisc_send_skb() (bsc#1238763).
CVE-2025-21761: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (bsc#1238775).
CVE-2025-21762: arp: use RCU protection in arp_xmit() (bsc#1238780).
CVE-2025-21763:…

Record: SUSE-SU-2025:1177-1
Updated: 2026-11-02

OSVSUSE-SU-2025:1178-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
CVE-2024-57979: kABI workaround for pps changes (bsc#1238521).
CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
CVE-2025-21733: tracing/osnoise: Fix resetting of tracepoints (bsc#1238494).
CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
CVE-2025-21754: btrfs: fix assertion failure when splitting ordered extent after transaction abort (bsc#1238496).
CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738). -…

Record: SUSE-SU-2025:1178-1
Updated: 2026-11-02

OSVSUSE-SU-2025:1180-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
CVE-2024-57979: kABI workaround for pps changes (bsc#1238521).
CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
CVE-2024-58012: ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (bsc#1239104).
CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
CVE-2025-21635: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy (bsc#1236111).
CVE-2025-21659: netdev: prevent accessing NAPI instances from another namespace (bsc#1236206).
CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
CVE-2025-21706: mptcp: pm: only set fullmesh for subflow endp (bsc#1238528).
CVE-2025-21733: tracing/osnoise: Fix resetting of tracepoints (bsc#1238494).
CVE-2025-21739: kABI: ufshcd: add ufshcd_dealloc_host back (bsc#1238506).
CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
CVE-2025-21754: btrfs: fix assertion failure when splitting ordered extent after transaction abort (bsc#1238496).
CVE-2025-21759: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738). -…

Record: SUSE-SU-2025:1180-1
Updated: 2026-11-02

OSVSUSE-SU-2025:1183-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207).
CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339).
CVE-2024-41092: drm/i915/gt: Fix potential UAF by revoke of fence registers (bsc#1228483).
CVE-2024-42098: crypto: ecdh - explicitly zeroize private_key (bsc#1228779).
CVE-2024-42229: crypto: aead,cipher - zeroize key buffer after use (bsc#1228708).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528).
CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109).
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
CVE-2025-21714: RDMA/mlx5: Fix implicit ODP use after free (bsc#1237890).
CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073).
CVE-2025-21732: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (bsc#1237877).
CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).
CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115).
CVE-2025-21839: kABI: Fix kABI after backport od CVE-2025-21839 (bsc#1239061).

The following non-security bugs were fixed:

ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (bsc#1237530).
RDMA/mana_ib: Prefer struct_size over open coded arithmetic (bsc#1239016).
RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (bsc#1239016).
RDMA/mlx5: Fix implicit ODP hang on parent deregistration (git-fixes)
btrfs: defrag: do not use merged extent map for their generation check (bsc#1239968).
btrfs: fix defrag not merging contiguous extents due to merged extent maps (bsc#1239968).
btrfs: fix extent map merging not happening for adjacent extents (bsc#1239968).
btrfs: send: allow cloning non-aligned extent if it ends at i_size (bsc#1239969).
btrfs: send: fix invalid clone operation for file that got its size decreased (bsc#1239969).
gfs2: Fix inode height consistency check (git-fixes).
mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (bsc#1239126).
mm: zswap: move allocations during CPU init outside the lock (git-fixes).
net: mana: Add flex array to struct mana_cfg_rx_steer_req_v2 (bsc#1239016).
net: mana: Allow variable size indirection table (bsc#1239016).
net: mana: Avoid open coded arithmetic (bsc#1239016).
net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (bsc#1240195).
net: mana: Support holes in device list reply msg (bsc#1240133).
x86/bhi: Avoid warning in #DB handler due to BHI mitigation (git-fixes).
x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (git-fixes).
x86/bugs: Fix BHI documentation (git-fixes).
x86/bugs: Fix BHI handling of RRSBA (git-fixes).
x86/bugs: Fix BHI retpoline check (git-fixes).
x86/bugs: Fix return type of spectre_bhi_state() (git-fixes).
x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (git-fixes).

Record: SUSE-SU-2025:1183-1
Updated: 2026-11-02

OSVSUSE-SU-2025:1195-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919).
CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207).
CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528).
CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029).
CVE-2025-21714: RDMA/mlx5: Fix implicit ODP use after free (bsc#1237890).
CVE-2025-21732: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (bsc#1237877).
CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875).
CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).

The following non-security bugs were fixed:

ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (bsc#1237530).
RDMA/mana_ib: Prefer struct_size over open coded arithmetic (bsc#1239016).
RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (bsc#1239016).
RDMA/mlx5: Fix implicit ODP hang on parent deregistration (git-fixes)
btrfs: defrag: do not use merged extent map for their generation check (bsc#1239968).
btrfs: fix defrag not merging contiguous extents due to merged extent maps (bsc#1239968).
btrfs: fix extent map merging not happening for adjacent extents (bsc#1239968).
btrfs: send: allow cloning non-aligned extent if it ends at i_size (bsc#1239969).
btrfs: send: fix invalid clone operation for file that got its size decreased (bsc#1239969).
gfs2: Fix inode height consistency check (git-fixes).
mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (bsc#1239126).
mm: zswap: move allocations during CPU init outside the lock (git-fixes).
net: mana: Add flex array to struct mana_cfg_rx_steer_req_v2 (bsc#1239016).
net: mana: Allow variable size indirection table (bsc#1239016).
net: mana: Avoid open coded arithmetic (bsc#1239016).
net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (bsc#1240195).
net: mana: Support holes in device list reply msg (bsc#1240133).

Record: SUSE-SU-2025:1195-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20190-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…

Record: SUSE-SU-2025:20190-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20192-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free…

Record: SUSE-SU-2025:20192-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20260-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…

Record: SUSE-SU-2025:20260-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20270-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
CVE-2024-56640: net/smc: fix LGR and link use-after-free…

Record: SUSE-SU-2025:20270-1
Updated: 2026-11-02

OSVUSN-7651-1 No score

linux, linux-aws, linux-oem-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PowerPC architecture;
S390 architecture;
Block layer subsystem;
Serial ATA and Parallel ATA drivers;
Drivers core;
Network block device driver;
Character device driver;
TPM device driver;
Clock framework and drivers;
FireWire subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
InfiniBand drivers;
IOMMU subsystem;
Media drivers;
NVIDIA Tegra memory controller driver;
Fastrpc Driver;
Network drivers;
Operating Performance Points (OPP) driver;
PCI subsystem;
x86 platform drivers;
PPS (Pulse Per Second) driver;
PTP clock framework;
Remote Processor subsystem;
Real Time Clock drivers;
SCSI subsystem;
QCOM SoC drivers;
Media staging drivers;
TTY drivers;
UFS subsystem;
USB Gadget drivers;
USB Host Controller drivers;
File systems infrastructure;
BTRFS file system;
F2FS file system;
NILFS2 file system;
SMB network file system;
UBI file system;
Timer subsystem;
KVM subsystem;
Networking core;
ptr_ring data structure definitions;
Networking subsytem;
Amateur Radio drivers;
XFRM subsystem;
Tracing infrastructure;
BPF subsystem;
Padata parallel execution mechanism;
printk logging mechanism;
Memory management;
Bluetooth subsystem;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
Rose network layer;
RxRPC session sockets;
Network traffic control;
Landlock security;
Linux Security Modules (LSM) Framework;
Tomoyo security module;
SoC audio core drivers; (CVE-2024-57980, CVE-2024-58061, CVE-2025-21742, CVE-2025-21820, CVE-2024-57993, CVE-2024-58071, CVE-2024-58017, CVE-2024-58019, CVE-2025-21745, CVE-2024-58016, CVE-2024-58011, CVE-2024-58054, CVE-2025-21731, CVE-2024-58058, CVE-2024-58082, CVE-2025-21722, CVE-2024-58063, CVE-2024-58014, CVE-2025-21735, CVE-2025-21828, CVE-2025-21804, CVE-2024-58018, CVE-2025-21814, CVE-2024-58005, CVE-2024-58078, CVE-2025-21832, CVE-2025-21725, CVE-2025-21732, CVE-2025-21718, CVE-2024-58069, CVE-2024-58052, CVE-2024-57973, CVE-2025-21825, CVE-2024-58056, CVE-2024-58080, CVE-2025-21810, CVE-2024-57953, CVE-2025-37974, CVE-2024-57979, CVE-2025-21708, CVE-2024-57974, CVE-2025-21753, CVE-2025-21736, CVE-2025-21728, CVE-2025-21743, CVE-2025-21815, CVE-2025-21802, CVE-2025-21739, CVE-2024-57986, CVE-2024-57982, CVE-2025-21749, CVE-2025-21806, CVE-2025-21754, CVE-2025-21738, CVE-2025-21716, CVE-2025-21705, CVE-2024-57998, CVE-2024-58006, CVE-2024-58068, CVE-2025-21748, CVE-2024-58077, CVE-2025-21723, CVE-2024-58013, CVE-2025-21719, CVE-2024-58002, CVE-2025-21750, CVE-2024-58053, CVE-2024-58070, CVE-2025-21809, CVE-2024-57975, CVE-2025-21816, CVE-2025-21798, CVE-2024-58051, CVE-2024-58083, CVE-2025-21808, CVE-2025-21799, CVE-2024-57996, CVE-2024-58085, CVE-2025-21744, CVE-2024-57994, CVE-2024-58055, CVE-2024-58076, CVE-2025-21710, CVE-2025-21707, CVE-2024-58072, CVE-2025-21726, CVE-2025-21811, CVE-2025-37750, CVE-2024-58001, CVE-2025-21714, CVE-2025-21711, CVE-2025-21830, CVE-2024-58007, CVE-2025-21812, CVE-2025-21734, CVE-2024-58034, CVE-2024-58081, CVE-2024-58079, CVE-2024-58003, CVE-2025-21721, CVE-2024-49887, CVE-2024-57984, CVE-2025-21715, CVE-2025-21801, CVE-2024-57997, CVE-2025-21741, CVE-2025-21727, CVE-2024-58057, CVE-2025-21724, CVE-2024-57990, CVE-2024-57981, CVE-2024-57999, CVE-2025-21733, CVE-2025-21829, CVE-2024-58010, CVE-2025-21720, CVE-2025-21826)

Record: USN-7651-1
Updated: 2026-11-02

OSVUSN-7651-2 No score

linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PowerPC architecture;
S390 architecture;
Block layer subsystem;
Serial ATA and Parallel ATA drivers;
Drivers core;
Network block device driver;
Character device driver;
TPM device driver;
Clock framework and drivers;
FireWire subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
InfiniBand drivers;
IOMMU subsystem;
Media drivers;
NVIDIA Tegra memory controller driver;
Fastrpc Driver;
Network drivers;
Operating Performance Points (OPP) driver;
PCI subsystem;
x86 platform drivers;
PPS (Pulse Per Second) driver;
PTP clock framework;
Remote Processor subsystem;
Real Time Clock drivers;
SCSI subsystem;
QCOM SoC drivers;
Media staging drivers;
TTY drivers;
UFS subsystem;
USB Gadget drivers;
USB Host Controller drivers;
File systems infrastructure;
BTRFS file system;
F2FS file system;
NILFS2 file system;
SMB network file system;
UBI file system;
Timer subsystem;
KVM subsystem;
Networking core;
ptr_ring data structure definitions;
Networking subsytem;
Amateur Radio drivers;
XFRM subsystem;
Tracing infrastructure;
BPF subsystem;
Padata parallel execution mechanism;
printk logging mechanism;
Memory management;
Bluetooth subsystem;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
Rose network layer;
RxRPC session sockets;
Network traffic control;
Landlock security;
Linux Security Modules (LSM) Framework;
Tomoyo security module;
SoC audio core drivers; (CVE-2024-57980, CVE-2024-57999, CVE-2025-21727, CVE-2024-58058, CVE-2024-58052, CVE-2025-21739, CVE-2025-21722, CVE-2024-58072, CVE-2025-21748, CVE-2024-57993, CVE-2024-58003, CVE-2024-58077, CVE-2025-21734, CVE-2024-58070, CVE-2025-21719, CVE-2024-58006, CVE-2025-21826, CVE-2024-58061, CVE-2025-21745, CVE-2025-21715, CVE-2024-58078, CVE-2025-21829, CVE-2024-49887, CVE-2025-21742, CVE-2025-21721, CVE-2025-21724, CVE-2025-21828, CVE-2025-21814, CVE-2025-21801, CVE-2024-57953, CVE-2024-58081, CVE-2024-58080, CVE-2025-21753, CVE-2025-21732, CVE-2025-21811, CVE-2025-37974, CVE-2024-58068, CVE-2024-58010, CVE-2024-58011, CVE-2024-58085, CVE-2025-21714, CVE-2025-21705, CVE-2025-21735, CVE-2024-58001, CVE-2024-58082, CVE-2024-58055, CVE-2025-21743, CVE-2025-21716, CVE-2024-57998, CVE-2025-21731, CVE-2024-58017, CVE-2024-58053, CVE-2025-21808, CVE-2024-57997, CVE-2024-58016, CVE-2024-58076, CVE-2025-21710, CVE-2025-21738, CVE-2025-21809, CVE-2025-21733, CVE-2025-21810, CVE-2024-57996, CVE-2024-58005, CVE-2025-21720, CVE-2025-21728, CVE-2024-58054, CVE-2024-58057, CVE-2025-21725, CVE-2025-21812, CVE-2025-21830, CVE-2024-58014, CVE-2025-21832, CVE-2024-58002, CVE-2025-21802, CVE-2024-57986, CVE-2025-21749, CVE-2024-58018, CVE-2024-57984, CVE-2025-21736, CVE-2024-58079, CVE-2024-58034, CVE-2024-57973, CVE-2024-57974, CVE-2025-21718, CVE-2025-21723, CVE-2024-58019, CVE-2025-21820, CVE-2024-58013, CVE-2025-21707, CVE-2024-58071, CVE-2025-21711, CVE-2024-58056, CVE-2024-58007, CVE-2024-58051, CVE-2025-21815, CVE-2024-57982, CVE-2025-21799, CVE-2025-21754, CVE-2025-21708, CVE-2025-21798, CVE-2024-57979, CVE-2024-57981, CVE-2024-58069, CVE-2025-21744, CVE-2025-21741, CVE-2024-58063, CVE-2024-58083, CVE-2024-57994, CVE-2025-21804, CVE-2025-21825, CVE-2024-57990, CVE-2025-21726, CVE-2025-21806, CVE-2024-57975, CVE-2025-21750, CVE-2025-21816, CVE-2025-37750)

Record: USN-7651-2
Updated: 2026-11-02

OSVUSN-7651-3 No score

linux-aws-6.8, linux-gke, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PowerPC architecture;
S390 architecture;
Block layer subsystem;
Serial ATA and Parallel ATA drivers;
Drivers core;
Network block device driver;
Character device driver;
TPM device driver;
Clock framework and drivers;
FireWire subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
InfiniBand drivers;
IOMMU subsystem;
Media drivers;
NVIDIA Tegra memory controller driver;
Fastrpc Driver;
Network drivers;
Operating Performance Points (OPP) driver;
PCI subsystem;
x86 platform drivers;
PPS (Pulse Per Second) driver;
PTP clock framework;
Remote Processor subsystem;
Real Time Clock drivers;
SCSI subsystem;
QCOM SoC drivers;
Media staging drivers;
TTY drivers;
UFS subsystem;
USB Gadget drivers;
USB Host Controller drivers;
File systems infrastructure;
BTRFS file system;
F2FS file system;
NILFS2 file system;
SMB network file system;
UBI file system;
Timer subsystem;
KVM subsystem;
Networking core;
ptr_ring data structure definitions;
Networking subsytem;
Amateur Radio drivers;
XFRM subsystem;
Tracing infrastructure;
BPF subsystem;
Padata parallel execution mechanism;
printk logging mechanism;
Memory management;
Bluetooth subsystem;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
Rose network layer;
RxRPC session sockets;
Network traffic control;
Landlock security;
Linux Security Modules (LSM) Framework;
Tomoyo security module;
SoC audio core drivers; (CVE-2024-58058, CVE-2024-57984, CVE-2025-21727, CVE-2025-21812, CVE-2024-58070, CVE-2024-57974, CVE-2025-21810, CVE-2025-21816, CVE-2024-58085, CVE-2025-21738, CVE-2024-58057, CVE-2025-21733, CVE-2024-58054, CVE-2024-57994, CVE-2025-21721, CVE-2024-57979, CVE-2025-21825, CVE-2025-37750, CVE-2025-21750, CVE-2025-21798, CVE-2024-58080, CVE-2024-58034, CVE-2025-21724, CVE-2025-21714, CVE-2025-21742, CVE-2025-21720, CVE-2024-58077, CVE-2025-21710, CVE-2024-58014, CVE-2024-58052, CVE-2024-57986, CVE-2024-58007, CVE-2024-58017, CVE-2025-21731, CVE-2024-58056, CVE-2025-21722, CVE-2025-21826, CVE-2024-58079, CVE-2024-58005, CVE-2025-21732, CVE-2025-21749, CVE-2024-57998, CVE-2024-58055, CVE-2025-21809, CVE-2025-21806, CVE-2025-21820, CVE-2024-58010, CVE-2025-21829, CVE-2025-21705, CVE-2024-58082, CVE-2024-58051, CVE-2024-57982, CVE-2025-21723, CVE-2024-58053, CVE-2024-57973, CVE-2024-58006, CVE-2025-21707, CVE-2024-58061, CVE-2025-21735, CVE-2025-21804, CVE-2024-58068, CVE-2024-57996, CVE-2025-21748, CVE-2024-57999, CVE-2024-58069, CVE-2024-57953, CVE-2025-21718, CVE-2024-49887, CVE-2025-21708, CVE-2024-58063, CVE-2024-58001, CVE-2025-21811, CVE-2025-21744, CVE-2025-21754, CVE-2025-21734, CVE-2025-21715, CVE-2024-57981, CVE-2025-21743, CVE-2024-57990, CVE-2024-58011, CVE-2025-21745, CVE-2024-58076, CVE-2024-58002, CVE-2024-57997, CVE-2025-21728, CVE-2025-21802, CVE-2025-21830, CVE-2025-21719, CVE-2025-21711, CVE-2024-57975, CVE-2025-37974, CVE-2025-21716, CVE-2024-58071, CVE-2024-58019, CVE-2025-21828, CVE-2025-21832, CVE-2025-21799, CVE-2025-21739, CVE-2024-58083, CVE-2025-21725, CVE-2024-58013, CVE-2025-21801, CVE-2025-21808, CVE-2024-58003, CVE-2025-21814, CVE-2024-58016, CVE-2024-58072, CVE-2024-57993, CVE-2024-58018, CVE-2025-21726, CVE-2024-57980, CVE-2024-58081, CVE-2024-58078, CVE-2025-21736, CVE-2025-21753, CVE-2025-21741, CVE-2025-21815)

Record: USN-7651-3
Updated: 2026-11-02

OSVUSN-7651-4 No score

linux-gcp, linux-gcp-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PowerPC architecture;
S390 architecture;
Block layer subsystem;
Serial ATA and Parallel ATA drivers;
Drivers core;
Network block device driver;
Character device driver;
TPM device driver;
Clock framework and drivers;
FireWire subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
InfiniBand drivers;
IOMMU subsystem;
Media drivers;
NVIDIA Tegra memory controller driver;
Fastrpc Driver;
Network drivers;
Operating Performance Points (OPP) driver;
PCI subsystem;
x86 platform drivers;
PPS (Pulse Per Second) driver;
PTP clock framework;
Remote Processor subsystem;
Real Time Clock drivers;
SCSI subsystem;
QCOM SoC drivers;
Media staging drivers;
TTY drivers;
UFS subsystem;
USB Gadget drivers;
USB Host Controller drivers;
File systems infrastructure;
BTRFS file system;
F2FS file system;
NILFS2 file system;
SMB network file system;
UBI file system;
Timer subsystem;
KVM subsystem;
Networking core;
ptr_ring data structure definitions;
Networking subsytem;
Amateur Radio drivers;
XFRM subsystem;
Tracing infrastructure;
BPF subsystem;
Padata parallel execution mechanism;
printk logging mechanism;
Memory management;
Bluetooth subsystem;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
Rose network layer;
RxRPC session sockets;
Network traffic control;
Landlock security;
Linux Security Modules (LSM) Framework;
Tomoyo security module;
SoC audio core drivers; (CVE-2024-58052, CVE-2025-21826, CVE-2025-21736, CVE-2025-21809, CVE-2025-21723, CVE-2024-57994, CVE-2025-21802, CVE-2024-58003, CVE-2024-58078, CVE-2025-21742, CVE-2025-21721, CVE-2024-57973, CVE-2025-21830, CVE-2025-21733, CVE-2025-21714, CVE-2024-58002, CVE-2025-21804, CVE-2025-21825, CVE-2024-58014, CVE-2024-58055, CVE-2025-21808, CVE-2024-57986, CVE-2024-57997, CVE-2024-57981, CVE-2025-21753, CVE-2025-21743, CVE-2025-37750, CVE-2024-57975, CVE-2025-21741, CVE-2025-21715, CVE-2025-21744, CVE-2025-21829, CVE-2025-21801, CVE-2025-21815, CVE-2024-58051, CVE-2024-58082, CVE-2024-58058, CVE-2024-58079, CVE-2024-58006, CVE-2024-58011, CVE-2025-21750, CVE-2024-57996, CVE-2025-21705, CVE-2024-58056, CVE-2024-58072, CVE-2025-21806, CVE-2024-57999, CVE-2025-21814, CVE-2024-58080, CVE-2024-57953, CVE-2025-37974, CVE-2025-21732, CVE-2024-58069, CVE-2024-58053, CVE-2024-58054, CVE-2025-21725, CVE-2025-21708, CVE-2025-21799, CVE-2024-57998, CVE-2024-57984, CVE-2025-21719, CVE-2024-58057, CVE-2024-57990, CVE-2024-57979, CVE-2025-21722, CVE-2025-21812, CVE-2024-58071, CVE-2024-57974, CVE-2024-58076, CVE-2024-57980, CVE-2024-58005, CVE-2024-58007, CVE-2024-58083, CVE-2025-21716, CVE-2025-21710, CVE-2025-21745, CVE-2024-58063, CVE-2024-58018, CVE-2024-57993, CVE-2024-49887, CVE-2025-21798, CVE-2024-58081, CVE-2025-21810, CVE-2024-58068, CVE-2024-58013, CVE-2025-21731, CVE-2024-57982, CVE-2025-21727, CVE-2025-21738, CVE-2025-21811, CVE-2024-58085, CVE-2025-21735, CVE-2025-21720, CVE-2025-21748, CVE-2025-21749, CVE-2024-58077, CVE-2025-21711, CVE-2025-21726, CVE-2025-21754, CVE-2024-58019, CVE-2025-21739, CVE-2024-58010, CVE-2024-58070, CVE-2025-21724, CVE-2024-58061, CVE-2025-21820, CVE-2025-21816, CVE-2025-21718, CVE-2024-58017, CVE-2025-21734, CVE-2025-21728, CVE-2024-58034, CVE-2024-58016, CVE-2024-58001, CVE-2025-21832, CVE-2025-21707, CVE-2025-21828)

Record: USN-7651-4
Updated: 2026-11-02

OSVUSN-7651-5 No score

linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PowerPC architecture;
S390 architecture;
Block layer subsystem;
Serial ATA and Parallel ATA drivers;
Drivers core;
Network block device driver;
Character device driver;
TPM device driver;
Clock framework and drivers;
FireWire subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
InfiniBand drivers;
IOMMU subsystem;
Media drivers;
NVIDIA Tegra memory controller driver;
Fastrpc Driver;
Network drivers;
Operating Performance Points (OPP) driver;
PCI subsystem;
x86 platform drivers;
PPS (Pulse Per Second) driver;
PTP clock framework;
Remote Processor subsystem;
Real Time Clock drivers;
SCSI subsystem;
QCOM SoC drivers;
Media staging drivers;
TTY drivers;
UFS subsystem;
USB Gadget drivers;
USB Host Controller drivers;
File systems infrastructure;
BTRFS file system;
F2FS file system;
NILFS2 file system;
SMB network file system;
UBI file system;
Timer subsystem;
KVM subsystem;
Networking core;
ptr_ring data structure definitions;
Networking subsytem;
Amateur Radio drivers;
XFRM subsystem;
Tracing infrastructure;
BPF subsystem;
Padata parallel execution mechanism;
printk logging mechanism;
Memory management;
Bluetooth subsystem;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
Rose network layer;
RxRPC session sockets;
Network traffic control;
Landlock security;
Linux Security Modules (LSM) Framework;
Tomoyo security module;
SoC audio core drivers; (CVE-2024-57973, CVE-2024-58076, CVE-2025-21733, CVE-2024-58016, CVE-2024-58013, CVE-2025-21731, CVE-2024-58017, CVE-2024-58079, CVE-2025-21815, CVE-2025-21812, CVE-2025-21705, CVE-2025-21804, CVE-2025-21718, CVE-2025-21802, CVE-2025-21708, CVE-2024-58011, CVE-2025-21734, CVE-2025-21716, CVE-2024-57998, CVE-2025-21715, CVE-2024-57975, CVE-2024-57981, CVE-2025-21738, CVE-2025-21820, CVE-2025-21721, CVE-2024-58069, CVE-2025-21732, CVE-2025-21742, CVE-2025-21754, CVE-2025-21745, CVE-2024-57974, CVE-2025-21826, CVE-2025-37974, CVE-2025-21801, CVE-2024-58054, CVE-2024-58071, CVE-2025-21799, CVE-2024-58034, CVE-2024-58070, CVE-2025-21739, CVE-2024-58061, CVE-2024-57980, CVE-2025-21741, CVE-2024-57990, CVE-2025-21816, CVE-2025-21719, CVE-2024-57999, CVE-2025-37750, CVE-2024-49887, CVE-2025-21808, CVE-2024-58081, CVE-2025-21710, CVE-2025-21728, CVE-2024-58018, CVE-2025-21825, CVE-2024-57986, CVE-2025-21727, CVE-2024-57984, CVE-2025-21725, CVE-2024-57979, CVE-2024-58056, CVE-2025-21707, CVE-2025-21811, CVE-2024-58003, CVE-2024-58057, CVE-2024-58063, CVE-2024-58005, CVE-2025-21748, CVE-2024-57993, CVE-2024-58006, CVE-2025-21832, CVE-2024-58072, CVE-2025-21736, CVE-2025-21798, CVE-2025-21711, CVE-2024-58002, CVE-2024-58080, CVE-2025-21720, CVE-2024-58010, CVE-2025-21809, CVE-2025-21829, CVE-2024-58019, CVE-2025-21724, CVE-2024-58058, CVE-2025-21735, CVE-2024-57994, CVE-2024-58078, CVE-2024-57997, CVE-2025-21806, CVE-2024-58077, CVE-2024-58051, CVE-2024-58083, CVE-2024-58055, CVE-2025-21750, CVE-2024-58082, CVE-2024-58001, CVE-2025-21810, CVE-2025-21744, CVE-2024-57953, CVE-2024-58007, CVE-2025-21722, CVE-2025-21828, CVE-2025-21714, CVE-2024-58053, CVE-2025-21726, CVE-2024-58085, CVE-2024-58014, CVE-2024-58052, CVE-2025-21749, CVE-2025-21814, CVE-2025-21743, CVE-2024-57996, CVE-2025-21830, CVE-2025-21723, CVE-2024-58068, CVE-2025-21753, CVE-2024-57982)

Record: USN-7651-5
Updated: 2026-11-02

OSVUSN-7651-6 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PowerPC architecture;
S390 architecture;
Block layer subsystem;
Serial ATA and Parallel ATA drivers;
Drivers core;
Network block device driver;
Character device driver;
TPM device driver;
Clock framework and drivers;
FireWire subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
InfiniBand drivers;
IOMMU subsystem;
Media drivers;
NVIDIA Tegra memory controller driver;
Fastrpc Driver;
Network drivers;
Operating Performance Points (OPP) driver;
PCI subsystem;
x86 platform drivers;
PPS (Pulse Per Second) driver;
PTP clock framework;
Remote Processor subsystem;
Real Time Clock drivers;
SCSI subsystem;
QCOM SoC drivers;
Media staging drivers;
TTY drivers;
UFS subsystem;
USB Gadget drivers;
USB Host Controller drivers;
File systems infrastructure;
BTRFS file system;
F2FS file system;
NILFS2 file system;
SMB network file system;
UBI file system;
Timer subsystem;
KVM subsystem;
Networking core;
ptr_ring data structure definitions;
Networking subsytem;
Amateur Radio drivers;
XFRM subsystem;
Tracing infrastructure;
BPF subsystem;
Padata parallel execution mechanism;
printk logging mechanism;
Memory management;
Bluetooth subsystem;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
Rose network layer;
RxRPC session sockets;
Network traffic control;
Landlock security;
Linux Security Modules (LSM) Framework;
Tomoyo security module;
SoC audio core drivers; (CVE-2025-21829, CVE-2025-21753, CVE-2024-58051, CVE-2025-21738, CVE-2025-21727, CVE-2025-21719, CVE-2024-57982, CVE-2025-21745, CVE-2024-58003, CVE-2025-21716, CVE-2025-21728, CVE-2024-58001, CVE-2024-58069, CVE-2025-21754, CVE-2025-21812, CVE-2025-21816, CVE-2024-58071, CVE-2024-58018, CVE-2025-21708, CVE-2024-58078, CVE-2025-21707, CVE-2025-21741, CVE-2024-57996, CVE-2024-58019, CVE-2024-58014, CVE-2024-58058, CVE-2024-57953, CVE-2025-21710, CVE-2024-58061, CVE-2025-21808, CVE-2025-21826, CVE-2025-21725, CVE-2025-21722, CVE-2025-21733, CVE-2024-58034, CVE-2025-21718, CVE-2025-21714, CVE-2025-21723, CVE-2025-21743, CVE-2025-21736, CVE-2024-58056, CVE-2025-21810, CVE-2024-58077, CVE-2024-58002, CVE-2024-49887, CVE-2025-21739, CVE-2024-57980, CVE-2025-21721, CVE-2025-21815, CVE-2025-21811, CVE-2024-57974, CVE-2024-58005, CVE-2025-21814, CVE-2024-58055, CVE-2025-21744, CVE-2025-21798, CVE-2024-58082, CVE-2024-58081, CVE-2025-21832, CVE-2024-58053, CVE-2025-21828, CVE-2024-58076, CVE-2025-21820, CVE-2024-58083, CVE-2024-58054, CVE-2024-57984, CVE-2025-21742, CVE-2024-58013, CVE-2025-21799, CVE-2025-21715, CVE-2025-21750, CVE-2025-21804, CVE-2024-57994, CVE-2024-58010, CVE-2024-58007, CVE-2024-58011, CVE-2024-57975, CVE-2025-37750, CVE-2025-21731, CVE-2025-21726, CVE-2024-58052, CVE-2024-57979, CVE-2025-21720, CVE-2025-21724, CVE-2024-57986, CVE-2024-58057, CVE-2024-58080, CVE-2024-58079, CVE-2024-57990, CVE-2025-21748, CVE-2025-21806, CVE-2025-21825, CVE-2024-58016, CVE-2025-21711, CVE-2024-58072, CVE-2025-21732, CVE-2024-57999, CVE-2024-57981, CVE-2024-58068, CVE-2025-21734, CVE-2024-58017, CVE-2024-57997, CVE-2025-21749, CVE-2025-37974, CVE-2025-21802, CVE-2024-58070, CVE-2025-21809, CVE-2024-58063, CVE-2024-58085, CVE-2025-21735, CVE-2024-57973, CVE-2024-58006, CVE-2024-57993, CVE-2025-21705, CVE-2024-57998, CVE-2025-21830, CVE-2025-21801)

Record: USN-7651-6
Updated: 2026-11-02

OSVUSN-7652-1 No score

linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PowerPC architecture;
S390 architecture;
Block layer subsystem;
Serial ATA and Parallel ATA drivers;
Drivers core;
Network block device driver;
Character device driver;
TPM device driver;
Clock framework and drivers;
FireWire subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
InfiniBand drivers;
IOMMU subsystem;
Media drivers;
NVIDIA Tegra memory controller driver;
Fastrpc Driver;
Network drivers;
Operating Performance Points (OPP) driver;
PCI subsystem;
x86 platform drivers;
PPS (Pulse Per Second) driver;
PTP clock framework;
Remote Processor subsystem;
Real Time Clock drivers;
SCSI subsystem;
QCOM SoC drivers;
Media staging drivers;
TTY drivers;
UFS subsystem;
USB Gadget drivers;
USB Host Controller drivers;
File systems infrastructure;
BTRFS file system;
F2FS file system;
NILFS2 file system;
SMB network file system;
UBI file system;
Timer subsystem;
KVM subsystem;
Networking core;
ptr_ring data structure definitions;
Networking subsytem;
Amateur Radio drivers;
XFRM subsystem;
Tracing infrastructure;
BPF subsystem;
Padata parallel execution mechanism;
printk logging mechanism;
Memory management;
Bluetooth subsystem;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
Rose network layer;
RxRPC session sockets;
Network traffic control;
Landlock security;
Linux Security Modules (LSM) Framework;
Tomoyo security module;
SoC audio core drivers; (CVE-2024-58055, CVE-2024-58077, CVE-2024-58080, CVE-2024-58082, CVE-2025-21743, CVE-2024-57953, CVE-2024-57994, CVE-2025-21806, CVE-2024-58007, CVE-2024-58002, CVE-2024-57974, CVE-2024-57980, CVE-2025-21720, CVE-2024-57990, CVE-2025-21725, CVE-2024-58057, CVE-2024-58018, CVE-2024-58011, CVE-2025-21814, CVE-2025-21799, CVE-2024-58017, CVE-2024-58014, CVE-2025-21731, CVE-2024-58072, CVE-2024-58069, CVE-2024-58006, CVE-2024-57984, CVE-2025-21710, CVE-2024-58061, CVE-2024-57997, CVE-2024-57975, CVE-2025-21724, CVE-2025-37974, CVE-2025-21808, CVE-2024-58056, CVE-2025-21753, CVE-2024-58068, CVE-2025-21728, CVE-2025-21714, CVE-2024-58054, CVE-2025-21741, CVE-2025-21736, CVE-2025-21715, CVE-2025-21802, CVE-2025-21739, CVE-2025-21727, CVE-2025-21749, CVE-2024-58053, CVE-2024-58081, CVE-2025-21828, CVE-2025-21705, CVE-2024-58051, CVE-2024-57979, CVE-2025-21754, CVE-2025-21734, CVE-2025-21829, CVE-2025-21735, CVE-2025-21826, CVE-2025-21738, CVE-2024-58079, CVE-2025-21815, CVE-2025-21708, CVE-2024-57986, CVE-2024-58085, CVE-2025-21801, CVE-2024-58071, CVE-2025-21810, CVE-2025-21726, CVE-2025-21744, CVE-2025-21830, CVE-2025-21748, CVE-2024-58001, CVE-2024-58063, CVE-2024-57996, CVE-2025-21716, CVE-2024-58013, CVE-2024-58019, CVE-2025-21811, CVE-2025-21711, CVE-2024-58076, CVE-2024-58070, CVE-2024-57982, CVE-2024-57998, CVE-2025-21745, CVE-2025-21804, CVE-2024-57973, CVE-2024-58083, CVE-2025-21742, CVE-2025-37750, CVE-2025-21733, CVE-2025-21750, CVE-2024-57981, CVE-2025-21718, CVE-2024-58058, CVE-2024-49887, CVE-2024-58003, CVE-2024-57993, CVE-2024-57999, CVE-2024-58010, CVE-2025-21825, CVE-2025-21732, CVE-2025-21719, CVE-2025-21721, CVE-2024-58034, CVE-2024-58005, CVE-2025-21707, CVE-2025-21809, CVE-2024-58078, CVE-2025-21812, CVE-2024-58016, CVE-2025-21816, CVE-2024-58052, CVE-2025-21722, CVE-2025-21832, CVE-2025-21723, CVE-2025-21820, CVE-2025-21798)

Record: USN-7652-1
Updated: 2026-11-02

OSVUSN-7653-1 No score

linux-hwe-6.8 vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

PowerPC architecture;
S390 architecture;
Block layer subsystem;
Serial ATA and Parallel ATA drivers;
Drivers core;
Network block device driver;
Character device driver;
TPM device driver;
Clock framework and drivers;
FireWire subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
InfiniBand drivers;
IOMMU subsystem;
IRQ chip drivers;
Media drivers;
NVIDIA Tegra memory controller driver;
Fastrpc Driver;
Network drivers;
Mellanox network drivers;
Operating Performance Points (OPP) driver;
PCI subsystem;
x86 platform drivers;
i.MX PM domains;
PPS (Pulse Per Second) driver;
PTP clock framework;
Remote Processor subsystem;
Real Time Clock drivers;
SCSI subsystem;
QCOM SoC drivers;
Media staging drivers;
TTY drivers;
UFS subsystem;
USB Gadget drivers;
USB Host Controller drivers;
USB Serial drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
F2FS file system;
GFS2 file system;
NILFS2 file system;
File system notification infrastructure;
Overlay file system;
Proc file system;
SMB network file system;
UBI file system;
Timer subsystem;
KVM subsystem;
Networking core;
ptr_ring data structure definitions;
Networking subsytem;
Amateur Radio drivers;
XFRM subsystem;
Tracing infrastructure;
BPF subsystem;
Kernel CPU control infrastructure;
Padata parallel execution mechanism;
printk logging mechanism;
Memory management;
Bluetooth subsystem;
DCCP (Datagram Congestion Control Protocol);
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
IEEE 802.15.4 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
Open vSwitch;
Rose network layer;
RxRPC session sockets;
Network traffic control;
VMware vSockets driver;
Landlock security;
Linux Security Modules (LSM) Framework;
Tomoyo security module;
SoC audio core drivers; (CVE-2025-21830, CVE-2025-21678, CVE-2025-21815, CVE-2024-57974, CVE-2025-21725, CVE-2025-21718, CVE-2025-21748, CVE-2025-21732, CVE-2024-57953, CVE-2025-21727, CVE-2025-21816, CVE-2025-21719, CVE-2024-53124, CVE-2024-58019, CVE-2025-38001, CVE-2025-21720, CVE-2025-21734, CVE-2025-21672, CVE-2025-21692, CVE-2024-58076, CVE-2025-21694, CVE-2024-58061, CVE-2025-21714, CVE-2025-21689, CVE-2024-49887, CVE-2024-57949, CVE-2025-38177, CVE-2025-21683, CVE-2025-21669, CVE-2025-21722, CVE-2024-57980, CVE-2025-38000, CVE-2025-37932, CVE-2024-58034, CVE-2024-58081, CVE-2025-21733, CVE-2025-21682, CVE-2024-57924, CVE-2025-21743, CVE-2024-57975, CVE-2025-37798, CVE-2024-58058, CVE-2025-21809, CVE-2025-21676, CVE-2024-57993, CVE-2025-21699, CVE-2024-58016, CVE-2025-21832, CVE-2025-21804, CVE-2024-58011, CVE-2024-58007, CVE-2025-21826, CVE-2024-58055, CVE-2025-21668, CVE-2025-21715, CVE-2024-58078, CVE-2025-21829, CVE-2025-21811, CVE-2025-21814, CVE-2024-58053, CVE-2025-21726, CVE-2025-21943, CVE-2025-37750, CVE-2025-21673, CVE-2024-57984, CVE-2025-37997, CVE-2025-21684, CVE-2025-21750, CVE-2024-58013, CVE-2025-21799, CVE-2024-58083, CVE-2025-21798, CVE-2025-21731, CVE-2025-21708, CVE-2024-57986, CVE-2025-21744, CVE-2024-58014, CVE-2025-21721, CVE-2024-58063, CVE-2024-57979, CVE-2024-58005, CVE-2025-21728, CVE-2025-21681, CVE-2025-21806, CVE-2024-57982, CVE-2024-58002, CVE-2024-58082, CVE-2025-21812, CVE-2025-21745, CVE-2024-58017, CVE-2025-21665, CVE-2025-21828, CVE-2025-37890,…

Record: USN-7653-1
Updated: 2026-11-03

OSVUSN-7737-1 No score

linux-azure, linux-azure-6.8, linux-azure-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Serial ATA and Parallel ATA drivers;
Drivers core;
Network block device driver;
Character device driver;
TPM device driver;
Clock framework and drivers;
FireWire subsystem;
GPIO subsystem;
GPU drivers;
HID subsystem;
I3C subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
Fastrpc Driver;
Network drivers;
Operating Performance Points (OPP) driver;
PCI subsystem;
x86 platform drivers;
PPS (Pulse Per Second) driver;
PTP clock framework;
Remote Processor subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
SPI subsystem;
Media staging drivers;
Trusted Execution Environment drivers;
TTY drivers;
UFS subsystem;
USB Device Class drivers;
USB core drivers;
USB Gadget drivers;
USB Host Controller drivers;
Framebuffer layer;
File systems infrastructure;
BTRFS file system;
F2FS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
SMB network file system;
UBI file system;
Timer subsystem;
KVM subsystem;
Networking core;
ptr_ring data structure definitions;
Networking subsytem;
Amateur Radio drivers;
L3 Master device support module;
TCP network protocol;
XFRM subsystem;
Tracing infrastructure;
io_uring subsystem;
Process Accounting mechanism;
BPF subsystem;
Padata parallel execution mechanism;
printk logging mechanism;
Workqueue subsystem;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
Open vSwitch;
Rose network layer;
RxRPC session sockets;
Network traffic control;
Landlock security;
Linux Security Modules (LSM) Framework;
Tomoyo security module;
SoC audio core drivers;
SOF drivers; (CVE-2025-37750, CVE-2025-21707, CVE-2025-21814, CVE-2025-21863, CVE-2025-21775, CVE-2024-57997, CVE-2025-21749, CVE-2025-21739, CVE-2025-21829, CVE-2025-21731, CVE-2025-21704, CVE-2024-57979, CVE-2025-21864, CVE-2024-57953, CVE-2025-21796, CVE-2025-21826, CVE-2024-57998, CVE-2025-21784, CVE-2024-58072, CVE-2025-21859, CVE-2025-21790, CVE-2025-21762, CVE-2025-37797, CVE-2024-57981, CVE-2024-58068, CVE-2025-21810, CVE-2024-58070, CVE-2025-21738, CVE-2024-58081, CVE-2024-58010, CVE-2025-21832, CVE-2025-21839, CVE-2024-58061, CVE-2024-58069, CVE-2024-58055, CVE-2024-57834, CVE-2025-21804, CVE-2025-21783, CVE-2025-21772, CVE-2024-57975, CVE-2024-57980, CVE-2024-58082, CVE-2025-21741, CVE-2025-21733, CVE-2025-21750, CVE-2025-21728, CVE-2025-21716, CVE-2025-21753, CVE-2025-21802, CVE-2024-57993, CVE-2025-21785, CVE-2024-57994, CVE-2025-21868, CVE-2025-21812, CVE-2025-21760, CVE-2025-21782, CVE-2025-21763, CVE-2024-57999, CVE-2025-21823, CVE-2024-57986, CVE-2024-58080, CVE-2025-21766, CVE-2025-21743, CVE-2025-21838, CVE-2025-21706, CVE-2025-21820, CVE-2024-58003, CVE-2025-21809, CVE-2025-21867, CVE-2024-57982, CVE-2025-21759, CVE-2024-57984, CVE-2025-21736, CVE-2024-58058, CVE-2025-21754, CVE-2024-49887, CVE-2025-21781, CVE-2025-21795, CVE-2025-21746, CVE-2024-58019, CVE-2025-21780, CVE-2024-58083, CVE-2025-21734, CVE-2025-21764, CVE-2025-21825, CVE-2024-54456, CVE-2024-58056, CVE-2025-21861, CVE-2024-57973, CVE-2025-21735, CVE-2025-21705, CVE-2024-57990, CVE-2025-21836, CVE-2025-21816, CVE-2024-58088, CVE-2024-58005, CVE-2025-21761,…

Record: USN-7737-1
Updated: 2026-11-03

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-core` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-debug` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-debug-core` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-debug-devel` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-debug-devel-matched` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-debug-modules` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-debug-modules-core` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-debug-modules-extra` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-devel-matched` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-modules` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-modules-core` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-64k-modules-extra` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-abi-stablelists` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-core` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-cross-headers` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug-core` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug-devel` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug-devel-matched` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug-modules` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug-modules-core` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug-modules-extra` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-debug-uki-virt` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-devel` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-devel-matched` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-doc` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-headers` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-modules` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-modules-core` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-modules-extra` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-core` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-debug` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-debug-core` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-debug-devel` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-debug-modules` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-debug-modules-core` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-debug-modules-extra` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-devel` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-modules` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-modules-core` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-64k-modules-extra` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-core` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-debug` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-debug-core` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-debug-devel` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-debug-modules` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-debug-modules-core` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel-rt-debug-modules-extra` AlmaLinux:9 From an advisory covering 112 CVEs	before 5.14.0-611.5.1.el9_7	5.14.0-611.5.1.el9_7
`kernel` Azure Linux:3	through 6.6.161.1-1	None known
`kernel` Azure Linux:2	through 5.15.200.1-1	None known
`linux-lts` Alpaquita:23	6.1.189-r0 up to 6.1.191-r0	6.1.191-r0
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`kernel` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-core` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-core` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-cross-headers` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-debug-uki-virt-addons` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-doc` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-headers` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-rt` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-rt-64k` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-rt-64k-core` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-rt-64k-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-rt-64k-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-rt-64k-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-rt-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-rt-64k-debug-kvm` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-rt-64k-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`kernel-rt-64k-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 82 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els11	5.14.0-570.62.1.el9_6.tuxcare.5.els11
`Kernel` Linux	5.5.0 up to 6.1.191, 6.2.0 up to 6.6.160, 6.7.0 up to 6.12.13, 6.13.0 up to 6.13.2	6.1.1916.6.1606.12.136.13.2
`linux` Debian:12	All versions, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.187-16.1.190-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+1	None known
`linux` Debian:13	before 6.12.13-1	6.12.13-1
`linux` Debian:14	before 6.12.13-1	6.12.13-1
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-rt-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`python3-perf` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`rtla` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`rv` Red Hat:enterprise_linux:9::appstream From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos From an advisory covering 145 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`kernel` Rocky Linux:9 From an advisory covering 111 CVEs	before 0:5.14.0-611.5.1.el9_7	0:5.14.0-611.5.1.el9_7
`linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`rootio-linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`rootio-linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`linux` Root:Ubuntu:22.04	before 5.15.0-203.213.aikido.119	5.15.0-203.213.aikido.119
`rootio-linux` Root:Ubuntu:22.04	before 5.15.0-203.213.aikido.119	5.15.0-203.213.aikido.119
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 433 CVEs	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 433 CVEs	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 433 CVEs	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 433 CVEs	before 6.4.0-15061.21.coco15sp6.1	6.4.0-15061.21.coco15sp6.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 186 CVEs	before 6.4.0-150600.8.34.2	6.4.0-150600.8.34.2
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 186 CVEs	before 6.4.0-150600.8.34.2	6.4.0-150600.8.34.2
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 186 CVEs	before 6.4.0-150600.8.34.1	6.4.0-150600.8.34.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 186 CVEs	before 6.4.0-150600.8.34.2	6.4.0-150600.8.34.2
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 186 CVEs	before 6.4.0-150600.8.34.2	6.4.0-150600.8.34.2
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 186 CVEs	before 6.4.0-150600.8.34.1	6.4.0-150600.8.34.1
`kernel-livepatch-SLE15-SP6-RT_Update_10` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 189 CVEs	before 1-150600.1.5.1	1-150600.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.10.34.1	6.4.0-150600.10.34.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2.150600.12.20.2	6.4.0-150600.23.47.2.150600.12.20.2
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-livepatch-SLE15-SP6_Update_10` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 189 CVEs	before 1-150600.13.5.1	1-150600.13.5.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2.150600.12.20.2	6.4.0-150600.23.47.2.150600.12.20.2
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.1	6.4.0-150600.23.47.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 189 CVEs	before 6.4.0-150600.23.47.2	6.4.0-150600.23.47.2
`kernel-rt` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 530 CVEs	before 5.14.21-150400.15.115.1	5.14.21-150400.15.115.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 530 CVEs	before 5.14.21-150400.15.115.1	5.14.21-150400.15.115.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 530 CVEs	before 5.14.21-150400.15.115.1	5.14.21-150400.15.115.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 530 CVEs	before 5.14.21-150400.15.115.1	5.14.21-150400.15.115.1
`kernel-default` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1.150400.24.80.1	5.14.21-150400.24.161.1.150400.24.80.1
`kernel-default` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1.150400.24.80.1	5.14.21-150400.24.161.1.150400.24.80.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-livepatch-SLE15-SP4_Update_39` SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 62 CVEs	before 1-150400.9.3.1	1-150400.9.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1.150400.24.80.1	5.14.21-150400.24.161.1.150400.24.80.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1.150400.24.80.1	5.14.21-150400.24.161.1.150400.24.80.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 62 CVEs	before 5.14.21-150400.24.161.1	5.14.21-150400.24.161.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-azure-fde-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1 Show 45 moreShow less 5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-ibm-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 45 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-intel-iotg-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 45 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1	None known
`linux-lowlatency-hwe-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	None known
`linux-nvidia-tegra-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 37 moreShow less 5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.15.15.0-1055.55~20.04.15.15.0-1057.57~20.04.15.15.0-1058.58~20.04.15.15.0-1060.60~20.04.15.15.0-1061.61~20.04.15.15.0-1063.63~20.04.15.15.0-1064.66~20.04.15.15.0-1065.67~20.04.15.15.0-1066.68~20.04.15.15.0-1067.69~20.04.15.15.0-1068.70~20.04.15.15.0-1070.72~20.04.1	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected
Nov 5, 2026	affected	OSV
Nov 4, 2026	affected	OSV
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-21714 is a high vulnerability (CVSS 7.8) in Linux, published February 27, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in linux-lts 6.1.191-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 331 package rows, 603 versions, 3,359 references and the rest of 13 source descriptions. The JSON record has them.