CVE-2025-21715

In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000_drv_remove dm is netdev private data and it cannot be used after free_netdev() call. Using dm after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function. This is similar to the issue fixed in commit ad297cd2db89 ("net: qcom/emac: fix UAF in emac_remove"). This bug is detected by our static analysis tool.

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

dma-debug: fix a possible deadlock on radix_lock

radix_lock() shouldn't be held while holding dma_hash_entry[idx].lock otherwise, there's a possible deadlock scenario when dma debug API is called holding rq_lock():

CPU0 CPU1 CPU2 dma_free_attrs() check_unmap() add_dma_entry() __schedule() //out (A) rq_lock() get_hash_bucket() (A) dma_entry_hash check_sync() (A) radix_lock() (W) dma_entry_hash dma_entry_free() (W) radix_lock() // CPU2's one (W) rq_lock()

CPU1 situation can happen when it extending radix tree and it tries to wake up kswapd via wake_all_kswapd().

CPU2 situation can happen while perf_event_task_sched_out() (i.e. dma sync operation is called while deleting perf_event using etm and etr tmc which are Arm Coresight hwtracing driver backends).

To remove this possible situation, call dma_entry_free() after put_hash_bucket() in check_unmap().(CVE-2024-47143)

In the Linux kernel, the following vulnerability has been resolved:

dlm: fix possible lkb_resource null dereference

This patch fixes a possible null pointer dereference when this function is called from request_lock() as lkb->lkb_resource is not assigned yet, only after validate_lock_args() by calling attach_lkb(). Another issue is that a resource name could be a non printable bytearray and we cannot assume to be ASCII coded.

The log functionality is probably never being hit when DLM is used in normal way and no debug logging is enabled. The null pointer dereference can only occur on a new created lkb that does not have the resource assigned yet, it probably never hits the null pointer dereference but we should be sure that other changes might not change this behaviour and we actually can hit the mentioned null pointer dereference.

In this patch we just drop the printout of the resource name, the lkb id is enough to make a possible connection to a resource name if this exists.(CVE-2024-47809)

In the Linux kernel, the following vulnerability has been resolved:

bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again

Commit 028ddcac477b ("bcache: Remove unnecessary NULL point check in node allocations") leads a NULL pointer deference in cache_set_flush().

1721 if (!IS_ERR_OR_NULL(c->root)) 1722 list_add(&c->root->list, &c->btree_cache);

>From the above code in cache_set_flush(), if previous registration code fails before allocating c->root, it is possible c->root is NULL as what it is initialized. __bch_btree_node_alloc() never returns NULL but c->root is possible to be NULL at above line 1721.

This patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.(CVE-2024-48881)

In the Linux kernel, the following vulnerability has been resolved:

vfio/pci: Properly hide first-in-list PCIe extended capability

There are cases where a PCIe extended capability should be hidden from the user. For example, an unknown capability (i.e., capability with ID greater than PCI_EXT_CAP_ID_MAX) or a capability that is intentionally chosen to be hidden from the user.

Hiding a capability is done by virtualizing and modifying the 'Next Capability Offset' field of the previous capability so it points to the capability after the one that should be hidden.

The special case where the first capability in the list should be hidden is handled differently because there is no previous capability that can be modified. In this case, the capability ID and version are zeroed while leaving the next pointer intact. This hides the capability and leaves an anchor for the rest of the capability list.

However, today,…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

syzkaller reported a use-after-free of UDP kernel socket in cleanup_bearer() without repro. [0][1]

When bearer_disable() calls tipc_udp_disable(), cleanup of the UDP kernel socket is deferred by work calling cleanup_bearer().

tipc_exit_net() waits for such works to finish by checking tipc_net(net)->wq_count. However, the work decrements the count too early before releasing the kernel socket, unblocking cleanup_net() and resulting in use-after-free.

Let's move the decrement after releasing the socket in cleanup_bearer().

[0]: ref_tracker: net notrefcnt@000000009b3d1faf has 1/1 users at sk_alloc+0x438/0x608 inet_create+0x4c8/0xcb0 __sock_create+0x350/0x6b8 sock_create_kern+0x58/0x78 udp_sock_create4+0x68/0x398 udp_sock_create+0x88/0xc8 tipc_udp_enable+0x5e8/0x848 __tipc_nl_bearer_enable+0x84c/0xed8 tipc_nl_bearer_enable+0x38/0x60 genl_family_rcv_msg_doit+0x170/0x248 genl_rcv_msg+0x400/0x5b0 netlink_rcv_skb+0x1dc/0x398 genl_rcv+0x44/0x68 netlink_unicast+0x678/0x8b0 netlink_sendmsg+0x5e4/0x898 ____sys_sendmsg+0x500/0x830

[1]: BUG: KMSAN: use-after-free in udp_hashslot include/net/udp.h:85 [inline] BUG: KMSAN: use-after-free in udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979 udp_hashslot include/net/udp.h:85 [inline] udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979 sk_common_release+0xaf/0x3f0 net/core/sock.c:3820 inet_release+0x1e0/0x260 net/ipv4/af_inet.c:437 inet6_release+0x6f/0xd0 net/ipv6/af_inet6.c:489 __sock_release net/socket.c:658 [inline] sock_release+0xa0/0x210 net/socket.c:686 cleanup_bearer+0x42d/0x4c0 net/tipc/udp_media.c:819 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310 worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391 kthread+0x531/0x6b0 kernel/kthread.c:389 ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244

Uninit was created at: slab_free_hook mm/slub.c:2269 [inline] slab_free mm/slub.c:4580 [inline] kmem_cache_free+0x207/0xc40 mm/slub.c:4682 net_free net/core/net_namespace.c:454 [inline] cleanup_net+0x16f2/0x19d0 net/core/net_namespace.c:647 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310 worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391 kthread+0x531/0x6b0 kernel/kthread.c:389 ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244

CPU: 0 UID: 0 PID: 54 Comm: kworker/0:2 Not tainted 6.12.0-rc1-00131-gf66ebf37d69c #7 91723d6f74857f70725e1583cba3cf4adc716cfa Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 Workqueue: events cleanup_bearer(CVE-2024-56642)

In the Linux kernel, the following vulnerability has been resolved:

net: hsr: avoid potential out-of-bound access in fill_frame_info()

syzbot is able to feed a packet with 14 bytes, pretending it is a vlan one.

Since fill_frame_info() is relying on skb->mac_len already, extend the check to cover this case.

BUG: KMSAN: uninit-value in fill_frame_info net/hsr/hsr_forward.c:709 [inline] BUG: KMSAN: uninit-value in hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724 fill_frame_info net/hsr/hsr_forward.c:709 [inline] hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724 hsr_dev_xmit+0x2f0/0x350 net/hsr/hsr_device.c:235 __netdev_start_xmit include/linux/netdevice.h:5002 [inline] netdev_start_xmit include/linux/netdevice.h:5011 [inline] xmit_one net/core/dev.c:3590 [inline] dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3606 __dev_queue_xmit+0x366a/0x57d0 net/core/dev.c:4434 dev_queue_xmit…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'

All error handling paths lead to 'out' where many resources are freed.

Do it as well here instead of a direct return, otherwise 'log', 'ra' and 'log->one_page_buf' (at least) will leak.(CVE-2021-47660)

In the Linux kernel, the following vulnerability has been resolved:

list: fix a data-race around ep->rdllist

ep_poll() first calls ep_events_available() with no lock held and checks if ep->rdllist is empty by list_empty_careful(), which reads rdllist->prev. Thus all accesses to it need some protection to avoid store/load-tearing.

Note INIT_LIST_HEAD_RCU() already has the annotation for both prev and next.

Commit bf3b9f6372c4 ("epoll: Add busy poll support to epoll with socket fds.") added the first lockless ep_events_available(), and commit c5a282e9635e ("fs/epoll: reduce the scope of wq lock in epoll_wait()") made some ep_events_available() calls lockless and added single call under a lock, finally commit e59d3c64cba6 ("epoll: eliminate unnecessary lock for zero timeout") made the last ep_events_available() lockless.

BUG: KCSAN: data-race in do_epoll_wait / do_epoll_wait

write to 0xffff88810480c7d8 of 8 bytes by task 1802 on cpu 0: INIT_LIST_HEAD include/linux/list.h:38 [inline] list_splice_init include/linux/list.h:492 [inline] ep_start_scan fs/eventpoll.c:622 [inline] ep_send_events fs/eventpoll.c:1656 [inline] ep_poll fs/eventpoll.c:1806 [inline] do_epoll_wait+0x4eb/0xf40 fs/eventpoll.c:2234 do_epoll_pwait fs/eventpoll.c:2268 [inline] __do_sys_epoll_pwait fs/eventpoll.c:2281 [inline] __se_sys_epoll_pwait+0x12b/0x240 fs/eventpoll.c:2275 __x64_sys_epoll_pwait+0x74/0x80 fs/eventpoll.c:2275 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88810480c7d8 of 8 bytes by task 1799 on cpu 1: list_empty_careful include/linux/list.h:329 [inline] ep_events_available fs/eventpoll.c:381 [inline] ep_poll fs/eventpoll.c:1797 [inline] do_epoll_wait+0x279/0xf40 fs/eventpoll.c:2234 do_epoll_pwait fs/eventpoll.c:2268 [inline] __do_sys_epoll_pwait fs/eventpoll.c:2281 [inline] __se_sys_epoll_pwait+0x12b/0x240 fs/eventpoll.c:2275 __x64_sys_epoll_pwait+0x74/0x80 fs/eventpoll.c:2275 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0xffff88810480c7d0 -> 0xffff888103c15098

Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 1799 Comm: syz-fuzzer Tainted: G W 5.17.0-rc7-syzkaller-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011(CVE-2022-49443)

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: governor: Use kobject release() method to free dbs_data

The struct dbs_data embeds a struct gov_attr_set and the struct gov_attr_set embeds a kobject. Since every kobject must have a release() method and we can't use kfree() to free it directly, so introduce cpufreq_dbs_data_release() to release the dbs_data via the kobject::release() method. This fixes the calltrace like below:

ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x34 WARNING: CPU: 12 PID: 810 at lib/debugobjects.c:505 debug_print_object+0xb8/0x100 Modules linked in: CPU: 12 PID: 810 Comm: sh Not tainted 5.16.0-next-20220120-yocto-standard+ #536 Hardware name: Marvell OcteonTX CN96XX board (DT) pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : debug_print_object+0xb8/0x100 lr : debug_print_object+0xb8/0x100 sp : ffff80001dfcf9a0 x29: ffff80001dfcf9a0 x28:…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'

All error handling paths lead to 'out' where many resources are freed.

Do it as well here instead of a direct return, otherwise 'log', 'ra' and 'log->one_page_buf' (at least) will leak.(CVE-2021-47660)

In the Linux kernel, the following vulnerability has been resolved:

list: fix a data-race around ep->rdllist

ep_poll() first calls ep_events_available() with no lock held and checks if ep->rdllist is empty by list_empty_careful(), which reads rdllist->prev. Thus all accesses to it need some protection to avoid store/load-tearing.

Note INIT_LIST_HEAD_RCU() already has the annotation for both prev and next.

Commit bf3b9f6372c4 ("epoll: Add busy poll support to epoll with socket fds.") added the first lockless ep_events_available(), and commit c5a282e9635e ("fs/epoll: reduce the scope of wq lock in epoll_wait()") made some ep_events_available() calls lockless and added single call under a lock, finally commit e59d3c64cba6 ("epoll: eliminate unnecessary lock for zero timeout") made the last ep_events_available() lockless.

BUG: KCSAN: data-race in do_epoll_wait / do_epoll_wait

write to 0xffff88810480c7d8 of 8 bytes by task 1802 on cpu 0: INIT_LIST_HEAD include/linux/list.h:38 [inline] list_splice_init include/linux/list.h:492 [inline] ep_start_scan fs/eventpoll.c:622 [inline] ep_send_events fs/eventpoll.c:1656 [inline] ep_poll fs/eventpoll.c:1806 [inline] do_epoll_wait+0x4eb/0xf40 fs/eventpoll.c:2234 do_epoll_pwait fs/eventpoll.c:2268 [inline] __do_sys_epoll_pwait fs/eventpoll.c:2281 [inline] __se_sys_epoll_pwait+0x12b/0x240 fs/eventpoll.c:2275 __x64_sys_epoll_pwait+0x74/0x80 fs/eventpoll.c:2275 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88810480c7d8 of 8 bytes by task 1799 on cpu 1: list_empty_careful include/linux/list.h:329 [inline] ep_events_available fs/eventpoll.c:381 [inline] ep_poll fs/eventpoll.c:1797 [inline] do_epoll_wait+0x279/0xf40 fs/eventpoll.c:2234 do_epoll_pwait fs/eventpoll.c:2268 [inline] __do_sys_epoll_pwait fs/eventpoll.c:2281 [inline] __se_sys_epoll_pwait+0x12b/0x240 fs/eventpoll.c:2275 __x64_sys_epoll_pwait+0x74/0x80 fs/eventpoll.c:2275 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae

value changed: 0xffff88810480c7d0 -> 0xffff888103c15098

Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 1799 Comm: syz-fuzzer Tainted: G W 5.17.0-rc7-syzkaller-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011(CVE-2022-49443)

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: governor: Use kobject release() method to free dbs_data

The struct dbs_data embeds a struct gov_attr_set and the struct gov_attr_set embeds a kobject. Since every kobject must have a release() method and we can't use kfree() to free it directly, so introduce cpufreq_dbs_data_release() to release the dbs_data via the kobject::release() method. This fixes the calltrace like below:

ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x34 WARNING: CPU: 12 PID: 810 at lib/debugobjects.c:505 debug_print_object+0xb8/0x100 Modules linked in: CPU: 12 PID: 810 Comm: sh Not tainted 5.16.0-next-20220120-yocto-standard+ #536 Hardware name: Marvell OcteonTX CN96XX board (DT) pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : debug_print_object+0xb8/0x100 lr : debug_print_object+0xb8/0x100 sp : ffff80001dfcf9a0 x29: ffff80001dfcf9a0 x28:…

In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000_drv_remove dm is netdev private data and it cannot be used after free_netdev() call. Using dm after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function. This is similar to the issue fixed in commit ad297cd2db89 ("net: qcom/emac: fix UAF in emac_remove"). This bug is detected by our static analysis tool.

• sctp: sysctl: auth_enable: avoid using current->nsproxy
• sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy {CVE-2025-21640}
• bpf: Use preempt_count() directly in bpf_send_signal_common()
• Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy"
• jfs: fix slab-out-of-bounds read in ea_get()
• serial: 8250_dma: terminate correct DMA in tx_dma_flush()
• Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy"
• net: usb: usbnet: restore usb%d name exception for local mac addresses
• vlan: fix memory leak in vlan_newlink() {CVE-2022-49636}
• rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity
• LTS tag: v5.4.291
• eeprom: digsy_mtc: Make GPIO lookup table match the device
• slimbus: messaging: Free transaction ID in delayed interrupt scenario {CVE-2025-21914}
• intel_th: pci: Add Panther Lake-P/U support
• intel_th: pci: Add Panther Lake-H support
• intel_th: pci: Add Arrow Lake support
• Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
• xhci: pci: Fix indentation in the PCI device ID definitions
• usb: gadget: Check bmAttributes only if configuration is valid
• usb: gadget: Fix setting self-powered state on suspend
• usb: gadget: Set self-powered based on MaxPower and bmAttributes
• usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
• usb: typec: ucsi: increase timeout for PPM reset operations
• usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916}
• usb: renesas_usbhs: Flush the notify_hotplug_work {CVE-2025-21917}
• usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
• usb: renesas_usbhs: Use devm_usb_get_phy()
• usb: renesas_usbhs: Call clk_put()
• Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
• gpio: rcar: Fix missing of_node_put() call
• net: ipv6: fix missing dst ref drop in ila lwtunnel
• net: ipv6: fix dst ref loop in ila lwtunnel
• net-timestamp: support TCP GSO case for a few missing flags
• vlan: enforce underlying device type {CVE-2025-21920}
• ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922}
• be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
• drm/sched: Fix preprocessor guard
• hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
• llc: do not use skb_get() before dev_queue_xmit() {CVE-2025-21925}
• hwmon: (ad7314) Validate leading zero bits and return error
• hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
• hwmon: (pmbus) Initialise page count in pmbus_identify()
• caif_virtio: fix wrong pointer check in cfv_probe() {CVE-2025-21904}
• net: gso: fix ownership in __udp_gso_segment {CVE-2025-21926}
• HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}
• HID: google: fix unused variable warning under !CONFIG_ACPI
• wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905}
• mm/page_alloc: fix uninitialized variable
• rapidio: fix an API misues when rio_add_net() fails {CVE-2025-21934}
• rapidio: add check for rio_add_net() in rio_scan_alloc_net()
• wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
• wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910}
• x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
• x86/cpu: Validate CPUID leaf 0x2 EDX output
• x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
• platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
• drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
• ALSA: hda/realtek: update ALC222 depop optimize
• ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
• HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948}
• Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
• drm/amdgpu: disable BAR resize on Dell G5 SE
• drm/amdgpu: Check extended configuration space register when system uses large bar
• drm/amdgpu: skip BAR resizing if the bios already…

• CVE-url: https://ubuntu.com/security/CVE-2025-21811
  • nilfs2: protect access to buffers with no active references
• CVE-url: https://ubuntu.com/security/CVE-2025-21715
  • net: davicom: fix UAF in dm9000_drv_remove
• CVE-url: https://ubuntu.com/security/CVE-2024-58083
  • KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
• CVE-url: https://ubuntu.com/security/CVE-2024-57979
  • pps: Fix a use-after-free
• CVE-url: https://ubuntu.com/security/CVE-2025-21898
  • ftrace: Avoid potential division by zero in function_stat_show()
• CVE-url: https://ubuntu.com/security/CVE-2025-21993
  • iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
• CVE-url: https://ubuntu.com/security/CVE-2025-21653
  • netlink: add attribute range validation to policy
  • net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
• CVE-url: https://ubuntu.com/security/CVE-2024-53148
  • comedi: Flush partial mappings in error case
• CVE-url: https://ubuntu.com/security/CVE-2022-49541
  • cifs: fix potential double free during failed mount
• CVE-url: https://ubuntu.com/security/CVE-2024-35937
  • wifi: cfg80211: check A-MSDU format more carefully
• CVE-url: https://ubuntu.com/security/CVE-2021-47211
  • ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
• CVE-url: https://ubuntu.com/security/CVE-2025-21772
  • partitions: mac: fix handling of bogus partition table
• CVE-url: https://ubuntu.com/security/CVE-2025-21753
  • btrfs: fix use-after-free when attempting to join an aborted transaction
• CVE-url: https://ubuntu.com/security/CVE-2025-21934
  • rapidio: fix an API misues when rio_add_net() fails

[ Ubuntu: 4.15.0-248.259 ]

• CVE-url: https://ubuntu.com/security/CVE-2025-21811
  • nilfs2: protect access to buffers with no active references
• CVE-url: https://ubuntu.com/security/CVE-2025-21715
  • net: davicom: fix UAF in dm9000_drv_remove
• CVE-url: https://ubuntu.com/security/CVE-2024-58083
  • KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
• CVE-url: https://ubuntu.com/security/CVE-2024-57979
  • pps: Fix a use-after-free
• CVE-url: https://ubuntu.com/security/CVE-2025-21898
  • ftrace: Avoid potential division by zero in function_stat_show()
• CVE-url: https://ubuntu.com/security/CVE-2025-21993
  • iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
• CVE-url: https://ubuntu.com/security/CVE-2025-21653
  • netlink: add attribute range validation to policy
  • net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
• CVE-url: https://ubuntu.com/security/CVE-2024-53148
  • comedi: Flush partial mappings in error case
• CVE-url: https://ubuntu.com/security/CVE-2022-49541
  • cifs: fix potential double free during failed mount
• CVE-url: https://ubuntu.com/security/CVE-2024-35937
  • wifi: cfg80211: check A-MSDU format more carefully
• CVE-url: https://ubuntu.com/security/CVE-2021-47211
  • ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
• CVE-url: https://ubuntu.com/security/CVE-2025-21772
  • partitions: mac: fix handling of bogus partition table
• CVE-url: https://ubuntu.com/security/CVE-2025-21753
  • btrfs: fix use-after-free when attempting to join an aborted transaction
• CVE-url: https://ubuntu.com/security/CVE-2025-21934
  • rapidio: fix an API misues when rio_add_net() fails

In the Linux kernel, the following vulnerability has been resolved: e100: Fix possible use after free in e100_xmit_prepare In e100_xmit_prepare(), if we can't map the skb, then return -ENOMEM, so e100_xmit_frame() will return NETDEV_TX_BUSY and the upper layer will resend the skb.

In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for real_dev Create a new macsec device but not get reference to real_dev.

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware crash.

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix overflow in oa batch buffer By default xe_bb_create_job() appends a MI_BATCH_BUFFER_END to batch buffer, this is not a problem if batch buffer is only used once but oa reuses the batch buffer for the same metric and at each call it appends a MI_BATCH_BUFFER_END, printing the warning below and then overflowing.

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent NULL dereference in nfsd4_process_cb_update() @ses is initialized to NULL.

In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() Explicitly verify the target vCPU is fully online prior to clamping the index in kvm_get_vcpu().

In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: add bounds checks to host bulk flow fairness counts Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out of bounds memory access.

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan [email protected] found that ets_class_from_arg() can index an Out- Of-Bound class in ets_class_from_arg() when passed clid of 0.

In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size before access If the first fragment is shorter than struct usb_cdc_notification, we can't calculate an expected_size.

In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000_drv_remove dm is netdev private data and it cannot be used after free_netdev() call.

In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block When get_block is called with a buffer_head allocated on the stack, such as do_mpage_readpage, stack corruption due to buffer_head UAF may occur in the following race condition situation.

Root has patched CVE-2025-21715 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
• CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-43869: perf: Fix hang while freeing sigtrap event (bsc#1229491).
• CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
• CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
• CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
• CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
• CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
• CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
• CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
• CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
• CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
• CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086). -…

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
• CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
• CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).
• CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).
• CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
• CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
• CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
• CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
• CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
• CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
• CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
• CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (bsc#1236680).
• CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
• CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
• CVE-2025-21669: vsock/virtio: discard packets if the transport changes (bsc#1236683).
• CVE-2025-21670: vsock/bpf: return early if transport is not assigned (bsc#1236685).
• CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
• CVE-2025-21675: net/mlx5: Clear port select structure when fail to create (bsc#1236694).
• CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
• CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
• CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
• CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
• CVE-2025-21700: net: sched:…

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
• CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).
• CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
• CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
• CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
• CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
• CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
• CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
• CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
• CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
• CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
• CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
• CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
• CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
• CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
• CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
• CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
• CVE-2025-21728: bpf: Send signals asynchronously if !preemptible (bsc#1237879).
• CVE-2025-21705: mptcp: handle fastopen disconnect correctly (bsc#1238525).
• CVE-2025-21715: net: davicom: fix UAF in dm9000_drv_remove (bsc#1237889).
• CVE-2025-21716: vxlan: Fix uninit-value in vxlan_vnifilter_dump() (bsc#1237891).
• CVE-2025-21719: ipmr: do not call mr_mfc_uses_dev() for unres entries (bsc#1238860).
• CVE-2025-21724: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (bsc#1238863).
• CVE-2025-21725: smb: client: fix oops due to unset link speed (bsc#1238877). -…

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
• CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).
• CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
• CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
• CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
• CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
• CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
• CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
• CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
• CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
• CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
• CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
• CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
• CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
• CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
• CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
• CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
• CVE-2025-21705: mptcp: handle fastopen disconnect correctly (bsc#1238525).
• CVE-2025-21715: net: davicom: fix UAF in dm9000_drv_remove (bsc#1237889).
• CVE-2025-21716: vxlan: Fix uninit-value in vxlan_vnifilter_dump() (bsc#1237891).
• CVE-2025-21719: ipmr: do not call mr_mfc_uses_dev() for unres entries (bsc#1238860).
• CVE-2025-21724: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (bsc#1238863).
• CVE-2025-21725: smb: client: fix oops due to unset link speed (bsc#1238877).
• CVE-2025-21728: bpf: Send signals asynchronously if !preemptible (bsc#1237879).
• CVE-2025-21767: clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
• CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
• CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21731, CVE-2025-21926, CVE-2025-21830, CVE-2024-58010, CVE-2025-21745, CVE-2025-21871, CVE-2024-57980, CVE-2025-21916, CVE-2025-21735, CVE-2025-21763, CVE-2025-21799, CVE-2025-21811, CVE-2025-21814, CVE-2024-58083, CVE-2025-21922, CVE-2025-21802, CVE-2024-58034, CVE-2025-21758, CVE-2024-58069, CVE-2025-21905, CVE-2024-57986, CVE-2025-21718, CVE-2024-58020, CVE-2025-21858, CVE-2025-21749, CVE-2025-21928, CVE-2024-58085, CVE-2025-21795, CVE-2025-21744, CVE-2025-21776, CVE-2025-21804, CVE-2024-57973, CVE-2025-21848, CVE-2025-21844, CVE-2024-56721, CVE-2024-58079, CVE-2025-21781, CVE-2025-21866, CVE-2024-58052, CVE-2024-58017, CVE-2024-58071, CVE-2025-21791, CVE-2024-26982, CVE-2025-21787, CVE-2024-58090, CVE-2025-21951, CVE-2025-21846, CVE-2025-21722, CVE-2024-58001, CVE-2025-21715, CVE-2025-21919, CVE-2025-21904, CVE-2024-57977, CVE-2025-21785, CVE-2025-21950, CVE-2025-21924, CVE-2024-57979, CVE-2025-21711, CVE-2024-47726, CVE-2024-58002, CVE-2025-21914, CVE-2024-58086, CVE-2024-58005, CVE-2025-21835, CVE-2024-58051, CVE-2025-21761, CVE-2025-21760, CVE-2025-21767, CVE-2025-21766, CVE-2025-21726, CVE-2025-21865, CVE-2024-58014, CVE-2025-21878, CVE-2025-21934, CVE-2024-58007, CVE-2025-21898, CVE-2025-21806, CVE-2024-58058, CVE-2025-21779, CVE-2024-58063, CVE-2025-21708, CVE-2025-21684, CVE-2024-57834, CVE-2025-21971, CVE-2025-21762, CVE-2025-21728, CVE-2024-58076, CVE-2025-21704, CVE-2025-21719, CVE-2025-21948, CVE-2025-21707, CVE-2025-21917, CVE-2025-21782, CVE-2025-21943, CVE-2025-21765, CVE-2025-21721, CVE-2024-58016, CVE-2025-21859, CVE-2025-21909, CVE-2025-21748, CVE-2025-21912, CVE-2025-21736, CVE-2025-21862, CVE-2024-57978, CVE-2025-21826, CVE-2025-21920, CVE-2025-21772, CVE-2025-21877, CVE-2025-21935, CVE-2024-56599, CVE-2025-21820, CVE-2025-21764, CVE-2025-21796, CVE-2025-21887, CVE-2025-21753, CVE-2025-21910, CVE-2024-57981, CVE-2025-21727, CVE-2025-21875, CVE-2024-58072, CVE-2024-58055, CVE-2025-21925, CVE-2025-21823, CVE-2025-21647)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21731, CVE-2025-21926, CVE-2025-21830, CVE-2024-58010, CVE-2025-21745, CVE-2025-21871, CVE-2024-57980, CVE-2025-21916, CVE-2025-21735, CVE-2025-21763, CVE-2025-21799, CVE-2025-21811, CVE-2025-21814, CVE-2024-58083, CVE-2025-21922, CVE-2025-21802, CVE-2024-58034, CVE-2025-21758, CVE-2024-58069, CVE-2025-21905, CVE-2024-57986, CVE-2025-21718, CVE-2024-58020, CVE-2025-21858, CVE-2025-21749, CVE-2025-21928, CVE-2024-58085, CVE-2025-21795, CVE-2025-21744, CVE-2025-21776, CVE-2025-21804, CVE-2024-57973, CVE-2025-21848, CVE-2025-21844, CVE-2024-56721, CVE-2024-58079, CVE-2025-21781, CVE-2025-21866, CVE-2024-58052, CVE-2024-58017, CVE-2024-58071, CVE-2025-21791, CVE-2024-26982, CVE-2025-21787, CVE-2024-58090, CVE-2025-21951, CVE-2025-21846, CVE-2025-21722, CVE-2024-58001, CVE-2025-21715, CVE-2025-21919, CVE-2025-21904, CVE-2024-57977, CVE-2025-21785, CVE-2025-21950, CVE-2025-21924, CVE-2024-57979, CVE-2025-21711, CVE-2024-47726, CVE-2024-58002, CVE-2025-21914, CVE-2024-58086, CVE-2024-58005, CVE-2025-21835, CVE-2024-58051, CVE-2025-21761, CVE-2025-21760, CVE-2025-21767, CVE-2025-21766, CVE-2025-21726, CVE-2025-21865, CVE-2024-58014, CVE-2025-21878, CVE-2025-21934, CVE-2024-58007, CVE-2025-21898, CVE-2025-21806, CVE-2024-58058, CVE-2025-21779, CVE-2024-58063, CVE-2025-21708, CVE-2025-21684, CVE-2024-57834, CVE-2025-21971, CVE-2025-21762, CVE-2025-21728, CVE-2024-58076, CVE-2025-21704, CVE-2025-21719, CVE-2025-21948, CVE-2025-21707, CVE-2025-21917, CVE-2025-21782, CVE-2025-21943, CVE-2025-21765, CVE-2025-21721, CVE-2024-58016, CVE-2025-21859, CVE-2025-21909, CVE-2025-21748, CVE-2025-21912, CVE-2025-21736, CVE-2025-21862, CVE-2024-57978, CVE-2025-21826, CVE-2025-21920, CVE-2025-21772, CVE-2025-21877, CVE-2025-21935, CVE-2024-56599, CVE-2025-21820, CVE-2025-21764, CVE-2025-21796, CVE-2025-21887, CVE-2025-21753, CVE-2025-21910, CVE-2024-57981, CVE-2025-21727, CVE-2025-21875, CVE-2024-58072, CVE-2024-58055, CVE-2025-21925, CVE-2025-21823, CVE-2025-21647)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2024-58069, CVE-2025-21912, CVE-2025-21922, CVE-2025-21765, CVE-2025-21823, CVE-2025-21971, CVE-2024-58010, CVE-2025-21767, CVE-2025-21727, CVE-2025-21916, CVE-2025-21859, CVE-2025-21844, CVE-2024-58063, CVE-2025-21704, CVE-2024-57986, CVE-2025-21846, CVE-2024-58007, CVE-2025-21708, CVE-2025-21731, CVE-2024-58058, CVE-2024-58090, CVE-2025-21791, CVE-2025-21917, CVE-2024-26982, CVE-2024-47726, CVE-2025-21848, CVE-2025-21948, CVE-2025-21796, CVE-2025-21919, CVE-2025-21950, CVE-2024-58085, CVE-2025-21766, CVE-2025-21764, CVE-2025-21781, CVE-2024-58071, CVE-2024-58072, CVE-2025-21726, CVE-2025-21858, CVE-2024-58005, CVE-2025-21866, CVE-2025-21935, CVE-2025-21753, CVE-2025-21904, CVE-2025-21877, CVE-2024-58002, CVE-2025-21776, CVE-2025-21926, CVE-2025-21865, CVE-2025-21898, CVE-2024-58076, CVE-2025-21707, CVE-2025-21735, CVE-2025-21905, CVE-2025-21928, CVE-2025-21647, CVE-2025-21718, CVE-2025-21814, CVE-2025-21925, CVE-2024-58001, CVE-2025-21811, CVE-2024-58055, CVE-2024-58086, CVE-2025-21736, CVE-2025-21871, CVE-2025-21878, CVE-2025-21684, CVE-2025-21763, CVE-2025-21782, CVE-2024-58052, CVE-2025-21820, CVE-2024-57979, CVE-2025-21787, CVE-2025-21749, CVE-2025-21779, CVE-2024-57981, CVE-2025-21719, CVE-2025-21785, CVE-2024-57973, CVE-2025-21745, CVE-2025-21943, CVE-2025-21875, CVE-2025-21795, CVE-2025-21748, CVE-2025-21862, CVE-2025-21744, CVE-2025-21835, CVE-2025-21762, CVE-2025-21760, CVE-2024-58051, CVE-2024-58020, CVE-2024-56721, CVE-2025-21772, CVE-2025-21914, CVE-2024-58014, CVE-2024-58017, CVE-2025-21920, CVE-2025-21711, CVE-2024-57834, CVE-2025-21910, CVE-2025-21909, CVE-2025-21887, CVE-2024-56599, CVE-2025-21806, CVE-2025-21826, CVE-2025-21722, CVE-2024-57977, CVE-2025-21951, CVE-2025-21721, CVE-2024-58034, CVE-2024-57980, CVE-2024-58079, CVE-2024-58083, CVE-2025-21758, CVE-2024-58016, CVE-2024-57978, CVE-2025-21799, CVE-2025-21715, CVE-2025-21761, CVE-2025-21934, CVE-2025-21924, CVE-2025-21830, CVE-2025-21728, CVE-2025-21802, CVE-2025-21804)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21761, CVE-2025-21715, CVE-2025-21802, CVE-2024-57980, CVE-2025-21708, CVE-2025-21722, CVE-2025-21948, CVE-2024-58063, CVE-2025-21765, CVE-2024-58086, CVE-2025-21753, CVE-2025-21943, CVE-2025-21924, CVE-2024-57978, CVE-2025-21760, CVE-2025-21726, CVE-2025-21647, CVE-2025-21866, CVE-2025-21763, CVE-2025-21950, CVE-2024-57977, CVE-2025-21799, CVE-2024-57981, CVE-2025-21871, CVE-2025-21887, CVE-2025-21772, CVE-2025-21878, CVE-2024-58090, CVE-2025-21859, CVE-2024-57986, CVE-2024-57973, CVE-2024-58007, CVE-2025-21898, CVE-2025-21787, CVE-2025-21865, CVE-2025-21848, CVE-2025-21806, CVE-2024-58005, CVE-2024-58058, CVE-2024-56599, CVE-2024-58034, CVE-2025-21846, CVE-2025-21719, CVE-2025-21749, CVE-2025-21766, CVE-2025-21744, CVE-2024-58010, CVE-2025-21704, CVE-2024-26982, CVE-2024-58020, CVE-2025-21916, CVE-2024-58055, CVE-2024-58014, CVE-2024-58051, CVE-2025-21767, CVE-2025-21707, CVE-2025-21795, CVE-2024-58002, CVE-2025-21928, CVE-2025-21925, CVE-2024-58085, CVE-2025-21877, CVE-2025-21684, CVE-2024-58083, CVE-2025-21904, CVE-2024-58016, CVE-2025-21934, CVE-2025-21951, CVE-2025-21782, CVE-2025-21758, CVE-2025-21728, CVE-2025-21858, CVE-2025-21823, CVE-2025-21910, CVE-2025-21736, CVE-2025-21796, CVE-2025-21779, CVE-2025-21718, CVE-2024-56721, CVE-2024-58069, CVE-2024-58079, CVE-2025-21721, CVE-2025-21711, CVE-2025-21791, CVE-2025-21971, CVE-2025-21811, CVE-2025-21785, CVE-2025-21814, CVE-2025-21764, CVE-2024-58052, CVE-2025-21776, CVE-2024-58076, CVE-2024-47726, CVE-2025-21762, CVE-2025-21804, CVE-2025-21926, CVE-2025-21826, CVE-2025-21731, CVE-2024-57979, CVE-2025-21909, CVE-2025-21835, CVE-2025-21905, CVE-2025-21748, CVE-2024-58071, CVE-2025-21830, CVE-2025-21922, CVE-2024-57834, CVE-2025-21745, CVE-2025-21727, CVE-2025-21781, CVE-2025-21862, CVE-2024-58072, CVE-2025-21844, CVE-2025-21912, CVE-2025-21875, CVE-2025-21919, CVE-2025-21820, CVE-2024-58017, CVE-2025-21914, CVE-2025-21917, CVE-2025-21920, CVE-2025-21735, CVE-2025-21935, CVE-2024-58001)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21760, CVE-2025-21904, CVE-2025-21708, CVE-2025-21719, CVE-2024-58058, CVE-2025-21814, CVE-2024-56721, CVE-2025-21715, CVE-2024-58016, CVE-2025-21796, CVE-2025-21795, CVE-2025-21728, CVE-2025-21776, CVE-2024-57834, CVE-2025-21806, CVE-2025-21684, CVE-2025-21858, CVE-2025-21875, CVE-2025-21718, CVE-2025-21726, CVE-2025-21762, CVE-2025-21745, CVE-2025-21749, CVE-2025-21910, CVE-2025-21707, CVE-2024-57986, CVE-2025-21735, CVE-2024-58002, CVE-2025-21753, CVE-2025-21909, CVE-2025-21934, CVE-2025-21802, CVE-2024-58010, CVE-2025-21862, CVE-2025-21887, CVE-2025-21948, CVE-2024-57977, CVE-2025-21781, CVE-2025-21928, CVE-2024-26982, CVE-2025-21704, CVE-2024-58071, CVE-2024-57980, CVE-2025-21916, CVE-2025-21647, CVE-2024-57978, CVE-2025-21951, CVE-2025-21766, CVE-2025-21924, CVE-2025-21920, CVE-2025-21835, CVE-2025-21846, CVE-2025-21791, CVE-2024-58063, CVE-2024-58007, CVE-2025-21877, CVE-2025-21878, CVE-2025-21917, CVE-2025-21779, CVE-2024-57973, CVE-2024-57979, CVE-2025-21772, CVE-2024-58014, CVE-2025-21711, CVE-2025-21919, CVE-2024-58083, CVE-2025-21763, CVE-2024-58072, CVE-2025-21943, CVE-2025-21866, CVE-2025-21811, CVE-2025-21767, CVE-2025-21761, CVE-2025-21799, CVE-2024-56599, CVE-2025-21820, CVE-2025-21871, CVE-2025-21935, CVE-2024-58069, CVE-2024-58090, CVE-2024-58005, CVE-2025-21736, CVE-2025-21912, CVE-2025-21823, CVE-2025-21922, CVE-2025-21721, CVE-2024-58076, CVE-2025-21905, CVE-2025-21865, CVE-2025-21830, CVE-2024-58001, CVE-2024-58086, CVE-2024-58017, CVE-2024-58052, CVE-2025-21744, CVE-2025-21859, CVE-2025-21787, CVE-2024-58085, CVE-2025-21731, CVE-2024-58051, CVE-2025-21914, CVE-2025-21748, CVE-2024-58020, CVE-2025-21804, CVE-2025-21727, CVE-2025-21765, CVE-2025-21826, CVE-2025-21758, CVE-2024-58034, CVE-2024-58055, CVE-2025-21844, CVE-2025-21782, CVE-2024-57981, CVE-2025-21785, CVE-2025-21848, CVE-2025-21898, CVE-2025-21722, CVE-2025-21925, CVE-2025-21764, CVE-2024-47726, CVE-2025-21971, CVE-2025-21926, CVE-2025-21950, CVE-2024-58079)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2024-57973, CVE-2025-21728, CVE-2025-21684, CVE-2024-57980, CVE-2025-21919, CVE-2025-21802, CVE-2025-21748, CVE-2024-58034, CVE-2025-21877, CVE-2024-57981, CVE-2024-58071, CVE-2025-21926, CVE-2025-21848, CVE-2025-21766, CVE-2024-57834, CVE-2024-58085, CVE-2025-21914, CVE-2025-21758, CVE-2025-21707, CVE-2025-21726, CVE-2025-21731, CVE-2025-21916, CVE-2025-21826, CVE-2025-21917, CVE-2025-21760, CVE-2025-21925, CVE-2024-58086, CVE-2025-21948, CVE-2025-21943, CVE-2025-21782, CVE-2024-56599, CVE-2025-21875, CVE-2025-21753, CVE-2025-21721, CVE-2025-21711, CVE-2025-21787, CVE-2025-21928, CVE-2024-57979, CVE-2025-21779, CVE-2025-21924, CVE-2024-58020, CVE-2025-21905, CVE-2024-58002, CVE-2025-21744, CVE-2025-21763, CVE-2024-58017, CVE-2025-21736, CVE-2024-58069, CVE-2025-21715, CVE-2024-58083, CVE-2025-21934, CVE-2024-58055, CVE-2025-21761, CVE-2025-21772, CVE-2025-21796, CVE-2025-21718, CVE-2025-21719, CVE-2025-21887, CVE-2025-21806, CVE-2024-58063, CVE-2025-21871, CVE-2025-21858, CVE-2025-21922, CVE-2025-21767, CVE-2024-58058, CVE-2024-57986, CVE-2025-21971, CVE-2025-21912, CVE-2025-21862, CVE-2024-58001, CVE-2024-58005, CVE-2024-58079, CVE-2025-21749, CVE-2024-58076, CVE-2024-47726, CVE-2025-21722, CVE-2024-58007, CVE-2024-26982, CVE-2024-58016, CVE-2025-21647, CVE-2025-21814, CVE-2024-57978, CVE-2025-21823, CVE-2025-21795, CVE-2025-21910, CVE-2024-58051, CVE-2024-58010, CVE-2025-21776, CVE-2025-21859, CVE-2025-21950, CVE-2025-21811, CVE-2025-21935, CVE-2025-21799, CVE-2025-21835, CVE-2024-58090, CVE-2025-21844, CVE-2024-58052, CVE-2025-21951, CVE-2025-21865, CVE-2025-21820, CVE-2025-21804, CVE-2025-21765, CVE-2025-21727, CVE-2025-21830, CVE-2025-21846, CVE-2025-21781, CVE-2025-21704, CVE-2025-21735, CVE-2024-58072, CVE-2025-21878, CVE-2025-21909, CVE-2024-56721, CVE-2025-21866, CVE-2025-21904, CVE-2025-21898, CVE-2025-21920, CVE-2025-21745, CVE-2025-21785, CVE-2025-21791, CVE-2024-57977, CVE-2025-21764, CVE-2024-58014, CVE-2025-21762, CVE-2025-21708)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21767, CVE-2025-21875, CVE-2025-21719, CVE-2025-21760, CVE-2025-21704, CVE-2025-21749, CVE-2024-56721, CVE-2025-21731, CVE-2025-21910, CVE-2024-58063, CVE-2025-21835, CVE-2025-21726, CVE-2024-58086, CVE-2025-21934, CVE-2024-58014, CVE-2025-21904, CVE-2024-56599, CVE-2025-21727, CVE-2025-21877, CVE-2025-21799, CVE-2024-58071, CVE-2025-21776, CVE-2025-21905, CVE-2025-21926, CVE-2025-21922, CVE-2025-21858, CVE-2024-47726, CVE-2025-21647, CVE-2025-21764, CVE-2025-21862, CVE-2025-21846, CVE-2025-21848, CVE-2024-57973, CVE-2025-21796, CVE-2025-21814, CVE-2025-21878, CVE-2025-21898, CVE-2025-21795, CVE-2025-21735, CVE-2025-21785, CVE-2025-21950, CVE-2024-26982, CVE-2024-57986, CVE-2025-21948, CVE-2024-58072, CVE-2025-21766, CVE-2025-21715, CVE-2025-21920, CVE-2025-21823, CVE-2024-58020, CVE-2024-58017, CVE-2024-58069, CVE-2025-21871, CVE-2024-58085, CVE-2025-21791, CVE-2025-21765, CVE-2025-21782, CVE-2024-58001, CVE-2025-21909, CVE-2024-58079, CVE-2025-21811, CVE-2025-21943, CVE-2025-21924, CVE-2025-21928, CVE-2025-21826, CVE-2025-21708, CVE-2025-21802, CVE-2025-21951, CVE-2025-21744, CVE-2025-21925, CVE-2025-21971, CVE-2024-58076, CVE-2025-21761, CVE-2025-21914, CVE-2025-21684, CVE-2024-58083, CVE-2025-21830, CVE-2025-21887, CVE-2025-21748, CVE-2025-21721, CVE-2024-57980, CVE-2024-58034, CVE-2025-21935, CVE-2025-21859, CVE-2024-58052, CVE-2025-21912, CVE-2025-21753, CVE-2025-21787, CVE-2025-21806, CVE-2025-21917, CVE-2025-21718, CVE-2024-57979, CVE-2025-21866, CVE-2025-21758, CVE-2025-21781, CVE-2025-21711, CVE-2025-21745, CVE-2024-58051, CVE-2024-58016, CVE-2024-58002, CVE-2025-21844, CVE-2024-57977, CVE-2024-57981, CVE-2025-21728, CVE-2024-58090, CVE-2024-58007, CVE-2025-21763, CVE-2025-21762, CVE-2024-58005, CVE-2025-21916, CVE-2024-57834, CVE-2025-21707, CVE-2025-21865, CVE-2025-21736, CVE-2024-57978, CVE-2025-21919, CVE-2025-21820, CVE-2025-21804, CVE-2025-21722, CVE-2024-58055, CVE-2025-21779, CVE-2025-21772, CVE-2024-58010, CVE-2024-58058)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21804, CVE-2025-21779, CVE-2025-21878, CVE-2025-21735, CVE-2024-57977, CVE-2025-21951, CVE-2025-21704, CVE-2025-21859, CVE-2025-21760, CVE-2025-21862, CVE-2024-57834, CVE-2025-21745, CVE-2025-21762, CVE-2024-58005, CVE-2025-21846, CVE-2025-21914, CVE-2025-21736, CVE-2025-21928, CVE-2024-57986, CVE-2025-21761, CVE-2024-58086, CVE-2025-21731, CVE-2025-21766, CVE-2025-21844, CVE-2024-58072, CVE-2024-58069, CVE-2025-21924, CVE-2025-21848, CVE-2025-21950, CVE-2025-21934, CVE-2025-21647, CVE-2024-58076, CVE-2025-21726, CVE-2025-21791, CVE-2025-21722, CVE-2025-21971, CVE-2025-21719, CVE-2025-21904, CVE-2025-21875, CVE-2025-21877, CVE-2025-21758, CVE-2024-58001, CVE-2024-58007, CVE-2024-58010, CVE-2025-21787, CVE-2025-21905, CVE-2024-58055, CVE-2025-21782, CVE-2024-58090, CVE-2025-21910, CVE-2025-21708, CVE-2025-21826, CVE-2024-57980, CVE-2024-58051, CVE-2024-56721, CVE-2025-21909, CVE-2025-21802, CVE-2025-21744, CVE-2024-58058, CVE-2025-21728, CVE-2024-47726, CVE-2024-58079, CVE-2024-58002, CVE-2024-58014, CVE-2025-21898, CVE-2025-21811, CVE-2024-57979, CVE-2025-21865, CVE-2025-21748, CVE-2025-21749, CVE-2025-21920, CVE-2025-21763, CVE-2025-21764, CVE-2025-21887, CVE-2025-21858, CVE-2024-58034, CVE-2025-21820, CVE-2024-57978, CVE-2025-21866, CVE-2025-21922, CVE-2025-21926, CVE-2025-21753, CVE-2024-58052, CVE-2025-21684, CVE-2025-21823, CVE-2024-58016, CVE-2025-21835, CVE-2025-21925, CVE-2025-21707, CVE-2025-21785, CVE-2025-21795, CVE-2025-21718, CVE-2025-21935, CVE-2025-21765, CVE-2025-21715, CVE-2025-21916, CVE-2025-21727, CVE-2025-21912, CVE-2024-58071, CVE-2024-58083, CVE-2025-21948, CVE-2024-56599, CVE-2025-21721, CVE-2024-58063, CVE-2025-21806, CVE-2025-21772, CVE-2025-21776, CVE-2025-21830, CVE-2025-21917, CVE-2024-58020, CVE-2025-21871, CVE-2025-21796, CVE-2025-21711, CVE-2024-58017, CVE-2024-58085, CVE-2024-57981, CVE-2024-57973, CVE-2025-21919, CVE-2025-21814, CVE-2024-26982, CVE-2025-21781, CVE-2025-21943, CVE-2025-21799, CVE-2025-21767)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2024-58063, CVE-2025-21802, CVE-2025-21910, CVE-2025-21718, CVE-2025-21707, CVE-2025-21781, CVE-2025-21726, CVE-2024-56599, CVE-2025-21735, CVE-2025-21859, CVE-2025-21924, CVE-2024-57980, CVE-2024-58002, CVE-2024-58090, CVE-2025-21728, CVE-2024-58055, CVE-2024-57978, CVE-2025-21704, CVE-2025-21820, CVE-2025-21776, CVE-2025-21919, CVE-2025-21765, CVE-2025-21935, CVE-2025-21647, CVE-2025-21804, CVE-2024-58072, CVE-2025-21865, CVE-2025-21887, CVE-2024-58079, CVE-2024-58020, CVE-2024-35889, CVE-2024-58017, CVE-2024-58005, CVE-2025-21862, CVE-2025-21875, CVE-2025-21925, CVE-2025-21951, CVE-2025-21866, CVE-2025-21871, CVE-2025-21914, CVE-2025-21948, CVE-2025-21715, CVE-2025-21848, CVE-2025-21905, CVE-2025-21830, CVE-2024-58051, CVE-2025-21909, CVE-2025-21711, CVE-2025-21684, CVE-2025-21844, CVE-2025-21904, CVE-2025-21898, CVE-2025-21767, CVE-2024-58069, CVE-2024-57834, CVE-2025-21934, CVE-2025-21926, CVE-2025-21708, CVE-2025-21736, CVE-2024-58085, CVE-2024-26982, CVE-2024-58083, CVE-2025-21920, CVE-2025-21764, CVE-2025-21753, CVE-2025-21799, CVE-2025-21846, CVE-2024-57979, CVE-2025-21785, CVE-2024-58010, CVE-2024-57986, CVE-2025-21762, CVE-2025-21912, CVE-2025-21744, CVE-2025-21787, CVE-2025-21761, CVE-2025-21971, CVE-2025-21943, CVE-2024-47726, CVE-2025-21721, CVE-2025-21748, CVE-2025-21791, CVE-2025-21796, CVE-2025-21806, CVE-2025-21779, CVE-2024-58001, CVE-2025-21745, CVE-2025-21814, CVE-2025-21719, CVE-2025-21950, CVE-2025-21858, CVE-2025-21823, CVE-2025-21758, CVE-2024-57981, CVE-2024-58058, CVE-2024-56721, CVE-2025-21811, CVE-2024-58086, CVE-2025-21722, CVE-2025-21727, CVE-2025-21760, CVE-2024-58076, CVE-2025-21916, CVE-2025-21826, CVE-2024-57973, CVE-2025-21795, CVE-2025-21763, CVE-2024-58014, CVE-2025-21917, CVE-2024-57977, CVE-2024-44964, CVE-2024-58016, CVE-2024-58007, CVE-2025-21928, CVE-2024-58052, CVE-2025-21749, CVE-2025-21772, CVE-2025-21877, CVE-2025-21782, CVE-2025-21922, CVE-2025-21766, CVE-2024-58034, CVE-2025-21835, CVE-2025-21878, CVE-2025-21731, CVE-2024-58071)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2024-58063, CVE-2025-21802, CVE-2025-21910, CVE-2025-21718, CVE-2025-21707, CVE-2025-21781, CVE-2025-21726, CVE-2024-56599, CVE-2025-21735, CVE-2025-21859, CVE-2025-21924, CVE-2024-57980, CVE-2024-58002, CVE-2024-58090, CVE-2025-21728, CVE-2024-58055, CVE-2024-57978, CVE-2025-21704, CVE-2025-21820, CVE-2025-21776, CVE-2025-21919, CVE-2025-21765, CVE-2025-21935, CVE-2025-21647, CVE-2025-21804, CVE-2024-58072, CVE-2025-21865, CVE-2025-21887, CVE-2024-58079, CVE-2024-58020, CVE-2024-35889, CVE-2024-58017, CVE-2024-58005, CVE-2025-21862, CVE-2025-21875, CVE-2025-21925, CVE-2025-21951, CVE-2025-21866, CVE-2025-21871, CVE-2025-21914, CVE-2025-21948, CVE-2025-21715, CVE-2025-21848, CVE-2025-21905, CVE-2025-21830, CVE-2024-58051, CVE-2025-21909, CVE-2025-21711, CVE-2025-21684, CVE-2025-21844, CVE-2025-21904, CVE-2025-21898, CVE-2025-21767, CVE-2024-58069, CVE-2024-57834, CVE-2025-21934, CVE-2025-21926, CVE-2025-21708, CVE-2025-21736, CVE-2024-58085, CVE-2024-26982, CVE-2024-58083, CVE-2025-21920, CVE-2025-21764, CVE-2025-21753, CVE-2025-21799, CVE-2025-21846, CVE-2024-57979, CVE-2025-21785, CVE-2024-58010, CVE-2024-57986, CVE-2025-21762, CVE-2025-21912, CVE-2025-21744, CVE-2025-21787, CVE-2025-21761, CVE-2025-21971, CVE-2025-21943, CVE-2024-47726, CVE-2025-21721, CVE-2025-21748, CVE-2025-21791, CVE-2025-21796, CVE-2025-21806, CVE-2025-21779, CVE-2024-58001, CVE-2025-21745, CVE-2025-21814, CVE-2025-21719, CVE-2025-21950, CVE-2025-21858, CVE-2025-21823, CVE-2025-21758, CVE-2024-57981, CVE-2024-58058, CVE-2024-56721, CVE-2025-21811, CVE-2024-58086, CVE-2025-21722, CVE-2025-21727, CVE-2025-21760, CVE-2024-58076, CVE-2025-21916, CVE-2025-21826, CVE-2024-57973, CVE-2025-21795, CVE-2025-21763, CVE-2024-58014, CVE-2025-21917, CVE-2024-57977, CVE-2024-44964, CVE-2024-58016, CVE-2024-58007, CVE-2025-21928, CVE-2024-58052, CVE-2025-21749, CVE-2025-21772, CVE-2025-21877, CVE-2025-21782, CVE-2025-21922, CVE-2025-21766, CVE-2024-58034, CVE-2025-21835, CVE-2025-21878, CVE-2025-21731, CVE-2024-58071)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2024-58002, CVE-2025-21767, CVE-2024-58051, CVE-2025-21909, CVE-2025-21866, CVE-2025-21823, CVE-2025-21922, CVE-2025-21804, CVE-2024-58069, CVE-2025-21761, CVE-2025-21799, CVE-2024-58034, CVE-2025-21826, CVE-2024-58007, CVE-2025-21948, CVE-2025-21910, CVE-2025-21748, CVE-2024-57834, CVE-2025-21926, CVE-2025-21722, CVE-2024-58072, CVE-2024-58086, CVE-2025-21914, CVE-2025-21802, CVE-2025-21916, CVE-2025-21943, CVE-2025-21830, CVE-2025-21950, CVE-2025-21736, CVE-2024-58014, CVE-2025-21785, CVE-2025-21766, CVE-2025-21878, CVE-2024-56721, CVE-2025-21707, CVE-2025-21904, CVE-2025-21782, CVE-2025-21776, CVE-2025-21726, CVE-2025-21862, CVE-2024-57986, CVE-2025-21647, CVE-2025-21887, CVE-2025-21877, CVE-2024-44964, CVE-2024-58052, CVE-2025-21796, CVE-2024-58085, CVE-2025-21934, CVE-2025-21760, CVE-2025-21924, CVE-2024-57979, CVE-2025-21875, CVE-2024-58083, CVE-2025-21811, CVE-2025-21749, CVE-2025-21814, CVE-2025-21727, CVE-2025-21715, CVE-2025-21684, CVE-2025-21917, CVE-2025-21731, CVE-2024-58016, CVE-2024-58090, CVE-2025-21865, CVE-2024-58010, CVE-2025-21719, CVE-2025-21925, CVE-2025-21846, CVE-2024-58020, CVE-2024-58017, CVE-2024-58063, CVE-2025-21844, CVE-2024-58079, CVE-2024-58055, CVE-2024-57981, CVE-2024-56599, CVE-2024-26982, CVE-2025-21835, CVE-2025-21935, CVE-2024-58005, CVE-2025-21791, CVE-2024-57977, CVE-2024-57978, CVE-2025-21806, CVE-2025-21772, CVE-2025-21859, CVE-2025-21728, CVE-2025-21781, CVE-2024-57980, CVE-2025-21744, CVE-2025-21721, CVE-2025-21718, CVE-2025-21858, CVE-2025-21704, CVE-2025-21905, CVE-2025-21951, CVE-2025-21971, CVE-2025-21848, CVE-2025-21745, CVE-2025-21928, CVE-2024-58076, CVE-2025-21763, CVE-2025-21762, CVE-2025-21919, CVE-2025-21708, CVE-2025-21795, CVE-2024-57973, CVE-2025-21753, CVE-2025-21912, CVE-2024-47726, CVE-2024-35889, CVE-2024-58071, CVE-2025-21787, CVE-2025-21871, CVE-2025-21711, CVE-2025-21765, CVE-2024-58058, CVE-2025-21898, CVE-2025-21735, CVE-2025-21758, CVE-2025-21820, CVE-2025-21779, CVE-2025-21920, CVE-2024-58001, CVE-2025-21764)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Network block device driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• InfiniBand drivers;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Network drivers;
• PCI subsystem;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• ACRN Hypervisor Service Module driver;
• File systems infrastructure;
• BTRFS file system;
• F2FS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Netfilter;
• Process Accounting mechanism;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Timer subsystem;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• Multipath TCP;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module; (CVE-2025-21914, CVE-2024-58090, CVE-2024-58017, CVE-2024-58069, CVE-2025-21920, CVE-2025-21935, CVE-2024-57977, CVE-2025-21763, CVE-2025-21684, CVE-2025-21721, CVE-2025-21736, CVE-2024-58020, CVE-2025-21799, CVE-2025-21904, CVE-2025-21934, CVE-2025-21719, CVE-2025-21811, CVE-2025-21727, CVE-2024-58071, CVE-2025-21905, CVE-2024-26982, CVE-2025-21820, CVE-2024-58052, CVE-2025-21925, CVE-2025-21796, CVE-2025-21779, CVE-2025-21823, CVE-2024-58063, CVE-2025-21772, CVE-2025-21924, CVE-2025-21765, CVE-2024-56721, CVE-2025-21859, CVE-2025-21760, CVE-2025-21753, CVE-2025-21835, CVE-2025-21887, CVE-2024-58002, CVE-2024-58086, CVE-2025-21744, CVE-2025-21848, CVE-2024-57986, CVE-2025-21865, CVE-2025-21766, CVE-2025-21715, CVE-2023-52664, CVE-2025-21764, CVE-2024-58085, CVE-2025-21704, CVE-2024-58072, CVE-2024-58079, CVE-2025-21846, CVE-2025-21647, CVE-2025-21726, CVE-2024-58034, CVE-2025-21943, CVE-2025-21875, CVE-2025-21871, CVE-2025-21898, CVE-2024-58083, CVE-2025-21748, CVE-2024-57834, CVE-2024-58051, CVE-2025-21862, CVE-2025-21722, CVE-2025-21912, CVE-2025-21950, CVE-2025-21917, CVE-2024-57973, CVE-2024-56599, CVE-2025-21922, CVE-2025-21787, CVE-2025-21919, CVE-2025-21971, CVE-2024-57979, CVE-2024-35889, CVE-2025-21804, CVE-2025-21782, CVE-2025-21910, CVE-2025-21909, CVE-2025-21708, CVE-2025-21830, CVE-2025-21791, CVE-2024-58016, CVE-2025-21711, CVE-2025-21928, CVE-2024-58007, CVE-2024-58005, CVE-2023-52927, CVE-2025-21802, CVE-2024-58010, CVE-2024-58001, CVE-2024-47726, CVE-2024-57978, CVE-2024-58055, CVE-2025-21735, CVE-2025-21795, CVE-2025-21745, CVE-2025-21878, CVE-2025-21877, CVE-2025-21826, CVE-2024-58076, CVE-2025-21806, CVE-2025-21858, CVE-2025-21866, CVE-2025-21776, CVE-2025-21785, CVE-2025-21758, CVE-2024-57980, CVE-2025-21728, CVE-2024-58014, CVE-2025-21814, CVE-2025-21762, CVE-2025-21951, CVE-2025-21767, CVE-2025-21844, CVE-2025-21781, CVE-2024-58058, CVE-2025-21761, CVE-2025-21707, CVE-2025-21731, CVE-2024-44964, CVE-2025-21749, CVE-2024-57981, CVE-2025-21948, CVE-2025-21926, CVE-2025-21916, CVE-2025-21718)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21866, CVE-2025-21846, CVE-2025-21971, CVE-2025-21909, CVE-2024-58083, CVE-2025-21811, CVE-2025-21776, CVE-2024-58051, CVE-2025-21917, CVE-2025-21935, CVE-2025-21785, CVE-2021-47191, CVE-2025-21765, CVE-2025-21704, CVE-2025-21647, CVE-2024-58069, CVE-2025-21877, CVE-2025-21948, CVE-2024-58007, CVE-2024-58001, CVE-2025-21871, CVE-2024-58055, CVE-2025-21848, CVE-2025-21925, CVE-2024-58058, CVE-2025-21814, CVE-2025-21905, CVE-2025-21898, CVE-2025-21926, CVE-2025-21760, CVE-2024-57973, CVE-2025-21806, CVE-2024-58071, CVE-2025-21761, CVE-2025-21762, CVE-2024-57986, CVE-2025-21708, CVE-2025-21744, CVE-2024-26996, CVE-2024-50055, CVE-2024-58020, CVE-2025-21858, CVE-2025-21715, CVE-2025-21904, CVE-2025-21920, CVE-2024-56599, CVE-2025-21781, CVE-2025-21764, CVE-2025-21865, CVE-2025-21772, CVE-2024-58072, CVE-2025-21928, CVE-2025-21859, CVE-2025-21721, CVE-2025-21719, CVE-2025-21914, CVE-2025-21753, CVE-2024-58009, CVE-2024-57981, CVE-2024-58063, CVE-2024-58052, CVE-2025-21722, CVE-2024-57977, CVE-2025-21736, CVE-2025-21922, CVE-2024-26982, CVE-2025-21718, CVE-2025-21916, CVE-2025-21749, CVE-2025-21787, CVE-2024-58085, CVE-2024-58010, CVE-2024-57979, CVE-2024-57980, CVE-2025-21782, CVE-2025-21791, CVE-2025-21728, CVE-2023-52741, CVE-2025-21934, CVE-2024-58002, CVE-2025-21735, CVE-2025-21910, CVE-2025-21823, CVE-2024-58090, CVE-2025-21862, CVE-2025-21731, CVE-2025-21835, CVE-2024-58017, CVE-2024-58014, CVE-2025-21763)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21866, CVE-2025-21846, CVE-2025-21971, CVE-2025-21909, CVE-2024-58083, CVE-2025-21811, CVE-2025-21776, CVE-2024-58051, CVE-2025-21917, CVE-2025-21935, CVE-2025-21785, CVE-2021-47191, CVE-2025-21765, CVE-2025-21704, CVE-2025-21647, CVE-2024-58069, CVE-2025-21877, CVE-2025-21948, CVE-2024-58007, CVE-2024-58001, CVE-2025-21871, CVE-2024-58055, CVE-2025-21848, CVE-2025-21925, CVE-2024-58058, CVE-2025-21814, CVE-2025-21905, CVE-2025-21898, CVE-2025-21926, CVE-2025-21760, CVE-2024-57973, CVE-2025-21806, CVE-2024-58071, CVE-2025-21761, CVE-2025-21762, CVE-2024-57986, CVE-2025-21708, CVE-2025-21744, CVE-2024-26996, CVE-2024-50055, CVE-2024-58020, CVE-2025-21858, CVE-2025-21715, CVE-2025-21904, CVE-2025-21920, CVE-2024-56599, CVE-2025-21781, CVE-2025-21764, CVE-2025-21865, CVE-2025-21772, CVE-2024-58072, CVE-2025-21928, CVE-2025-21859, CVE-2025-21721, CVE-2025-21719, CVE-2025-21914, CVE-2025-21753, CVE-2024-58009, CVE-2024-57981, CVE-2024-58063, CVE-2024-58052, CVE-2025-21722, CVE-2024-57977, CVE-2025-21736, CVE-2025-21922, CVE-2024-26982, CVE-2025-21718, CVE-2025-21916, CVE-2025-21749, CVE-2025-21787, CVE-2024-58085, CVE-2024-58010, CVE-2024-57979, CVE-2024-57980, CVE-2025-21782, CVE-2025-21791, CVE-2025-21728, CVE-2023-52741, CVE-2025-21934, CVE-2024-58002, CVE-2025-21735, CVE-2025-21910, CVE-2025-21823, CVE-2024-58090, CVE-2025-21862, CVE-2025-21731, CVE-2025-21835, CVE-2024-58017, CVE-2024-58014, CVE-2025-21763)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21719, CVE-2024-58069, CVE-2025-21914, CVE-2025-21928, CVE-2025-21909, CVE-2025-21772, CVE-2025-21814, CVE-2025-21721, CVE-2024-50055, CVE-2025-21917, CVE-2025-21862, CVE-2025-21806, CVE-2025-21647, CVE-2024-58051, CVE-2024-57986, CVE-2024-57981, CVE-2025-21904, CVE-2025-21925, CVE-2025-21859, CVE-2025-21948, CVE-2024-58052, CVE-2025-21922, CVE-2024-26996, CVE-2024-26982, CVE-2025-21858, CVE-2024-58090, CVE-2024-58085, CVE-2025-21718, CVE-2025-21762, CVE-2025-21753, CVE-2025-21763, CVE-2025-21760, CVE-2024-58010, CVE-2025-21920, CVE-2025-21916, CVE-2025-21776, CVE-2025-21728, CVE-2024-58002, CVE-2025-21781, CVE-2024-58072, CVE-2025-21735, CVE-2025-21749, CVE-2025-21731, CVE-2025-21835, CVE-2024-56599, CVE-2025-21877, CVE-2025-21785, CVE-2025-21704, CVE-2024-57979, CVE-2024-58007, CVE-2024-57977, CVE-2025-21761, CVE-2025-21787, CVE-2025-21846, CVE-2024-58063, CVE-2025-21898, CVE-2025-21791, CVE-2025-21934, CVE-2025-21926, CVE-2025-21764, CVE-2025-21811, CVE-2025-21722, CVE-2025-21715, CVE-2024-58020, CVE-2024-58001, CVE-2024-58071, CVE-2025-21905, CVE-2024-58014, CVE-2025-21736, CVE-2025-21865, CVE-2023-52741, CVE-2025-21935, CVE-2025-21910, CVE-2024-57980, CVE-2025-21744, CVE-2024-58055, CVE-2025-21823, CVE-2021-47191, CVE-2025-21866, CVE-2024-58083, CVE-2025-21871, CVE-2025-21782, CVE-2025-21848, CVE-2024-58009, CVE-2025-21971, CVE-2024-58058, CVE-2024-58017, CVE-2025-21765, CVE-2024-57973, CVE-2025-21708)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21735, CVE-2025-21922, CVE-2024-58001, CVE-2025-21926, CVE-2025-21647, CVE-2024-50055, CVE-2025-21862, CVE-2024-58002, CVE-2025-21814, CVE-2024-58020, CVE-2025-21835, CVE-2024-26982, CVE-2025-21744, CVE-2025-21763, CVE-2024-58069, CVE-2024-58090, CVE-2025-21846, CVE-2024-58010, CVE-2025-21859, CVE-2024-26996, CVE-2025-21971, CVE-2025-21934, CVE-2025-21904, CVE-2024-57977, CVE-2024-58058, CVE-2025-21704, CVE-2024-57986, CVE-2025-21762, CVE-2025-21925, CVE-2025-21806, CVE-2025-21909, CVE-2024-58063, CVE-2023-52741, CVE-2025-21791, CVE-2025-21728, CVE-2024-58014, CVE-2025-21858, CVE-2024-57981, CVE-2025-21916, CVE-2025-21787, CVE-2025-21781, CVE-2025-21708, CVE-2024-58071, CVE-2024-57980, CVE-2025-21920, CVE-2025-21914, CVE-2025-21948, CVE-2024-58017, CVE-2025-21877, CVE-2024-58052, CVE-2025-21731, CVE-2025-21715, CVE-2025-21898, CVE-2024-58085, CVE-2025-21865, CVE-2025-21811, CVE-2024-58051, CVE-2025-21749, CVE-2025-21736, CVE-2024-58072, CVE-2025-21722, CVE-2024-58009, CVE-2025-21719, CVE-2025-21785, CVE-2025-21928, CVE-2025-21761, CVE-2024-58007, CVE-2025-21866, CVE-2025-21910, CVE-2025-21765, CVE-2025-21753, CVE-2021-47191, CVE-2024-58055, CVE-2025-21782, CVE-2025-21871, CVE-2025-21760, CVE-2024-57973, CVE-2025-21718, CVE-2024-57979, CVE-2025-21935, CVE-2025-21917, CVE-2025-21905, CVE-2024-56599, CVE-2025-21721, CVE-2025-21823, CVE-2025-21848, CVE-2025-21764, CVE-2025-21772, CVE-2024-58083, CVE-2025-21776)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21922, CVE-2024-58051, CVE-2024-58010, CVE-2025-21787, CVE-2025-21728, CVE-2024-58052, CVE-2025-21905, CVE-2025-21735, CVE-2024-58020, CVE-2025-21898, CVE-2024-58085, CVE-2025-21935, CVE-2024-58072, CVE-2024-50055, CVE-2024-56599, CVE-2024-58071, CVE-2025-21753, CVE-2025-21749, CVE-2025-21858, CVE-2025-21904, CVE-2025-21715, CVE-2025-21782, CVE-2025-21760, CVE-2025-21718, CVE-2024-58069, CVE-2024-58002, CVE-2025-21926, CVE-2024-57980, CVE-2025-21806, CVE-2025-21719, CVE-2024-57973, CVE-2025-21763, CVE-2024-58009, CVE-2025-21731, CVE-2025-21823, CVE-2025-21910, CVE-2025-21909, CVE-2025-21859, CVE-2025-21762, CVE-2025-21928, CVE-2024-58014, CVE-2024-58055, CVE-2024-58083, CVE-2025-21846, CVE-2025-21814, CVE-2025-21948, CVE-2025-21917, CVE-2024-57977, CVE-2024-26982, CVE-2025-21934, CVE-2025-21877, CVE-2025-21920, CVE-2024-57981, CVE-2025-21848, CVE-2025-21925, CVE-2025-21708, CVE-2025-21871, CVE-2024-57986, CVE-2025-21866, CVE-2025-21764, CVE-2021-47191, CVE-2025-21914, CVE-2024-58063, CVE-2024-58007, CVE-2025-21791, CVE-2025-21835, CVE-2025-21704, CVE-2025-21916, CVE-2025-21736, CVE-2024-26996, CVE-2025-21781, CVE-2025-21776, CVE-2025-21772, CVE-2024-58001, CVE-2025-21865, CVE-2024-57979, CVE-2024-58017, CVE-2023-52741, CVE-2025-21785, CVE-2025-21862, CVE-2024-58090, CVE-2024-58058, CVE-2025-21811, CVE-2025-21765, CVE-2025-21647, CVE-2025-21721, CVE-2025-21971, CVE-2025-21761, CVE-2025-21744, CVE-2025-21722)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21814, CVE-2025-21917, CVE-2025-21871, CVE-2024-57973, CVE-2025-21862, CVE-2025-21877, CVE-2024-26982, CVE-2024-58090, CVE-2025-21925, CVE-2025-21787, CVE-2025-21763, CVE-2024-58083, CVE-2025-21719, CVE-2025-21715, CVE-2025-21704, CVE-2025-21865, CVE-2025-21781, CVE-2025-21762, CVE-2023-52741, CVE-2025-21761, CVE-2025-21764, CVE-2025-21811, CVE-2025-21846, CVE-2024-57981, CVE-2024-58051, CVE-2025-21772, CVE-2024-56599, CVE-2024-58014, CVE-2024-58007, CVE-2025-21760, CVE-2021-47191, CVE-2025-21909, CVE-2025-21791, CVE-2025-21916, CVE-2024-57979, CVE-2024-26996, CVE-2024-58085, CVE-2024-58072, CVE-2025-21914, CVE-2025-21848, CVE-2025-21736, CVE-2025-21785, CVE-2024-58002, CVE-2024-58058, CVE-2025-21776, CVE-2025-21935, CVE-2025-21722, CVE-2024-58071, CVE-2025-21721, CVE-2025-21708, CVE-2024-58055, CVE-2025-21782, CVE-2025-21806, CVE-2025-21922, CVE-2025-21835, CVE-2025-21749, CVE-2025-21858, CVE-2024-58020, CVE-2024-58069, CVE-2024-57980, CVE-2025-21735, CVE-2025-21905, CVE-2025-21823, CVE-2024-58052, CVE-2025-21971, CVE-2024-58063, CVE-2025-21728, CVE-2025-21910, CVE-2024-58017, CVE-2025-21647, CVE-2025-21934, CVE-2025-21926, CVE-2024-57986, CVE-2025-21948, CVE-2024-58009, CVE-2025-21765, CVE-2025-21904, CVE-2025-21866, CVE-2025-21928, CVE-2025-21859, CVE-2024-58010, CVE-2025-21753, CVE-2025-21718, CVE-2024-58001, CVE-2025-21731, CVE-2024-50055, CVE-2025-21744, CVE-2025-21920, CVE-2024-57977, CVE-2025-21898)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21791, CVE-2024-58002, CVE-2024-57980, CVE-2025-21848, CVE-2025-21846, CVE-2025-21859, CVE-2024-57981, CVE-2025-21735, CVE-2025-21909, CVE-2025-21926, CVE-2025-21731, CVE-2025-21760, CVE-2025-21806, CVE-2024-57979, CVE-2024-58009, CVE-2025-21866, CVE-2025-21781, CVE-2025-21862, CVE-2024-58090, CVE-2024-58069, CVE-2024-58014, CVE-2025-21763, CVE-2023-52741, CVE-2025-21776, CVE-2024-58010, CVE-2025-21871, CVE-2021-47191, CVE-2024-58058, CVE-2025-21721, CVE-2025-21715, CVE-2024-58052, CVE-2024-56599, CVE-2025-21708, CVE-2024-58071, CVE-2025-21785, CVE-2024-50055, CVE-2025-21925, CVE-2025-21904, CVE-2024-58007, CVE-2025-21905, CVE-2025-21772, CVE-2025-21736, CVE-2025-21718, CVE-2025-21764, CVE-2025-21920, CVE-2024-58017, CVE-2024-58020, CVE-2025-21761, CVE-2024-58001, CVE-2025-21704, CVE-2025-21922, CVE-2025-21782, CVE-2025-21728, CVE-2025-21719, CVE-2025-21835, CVE-2024-57977, CVE-2024-57973, CVE-2025-21971, CVE-2025-21934, CVE-2025-21749, CVE-2025-21916, CVE-2024-58063, CVE-2025-21898, CVE-2025-21877, CVE-2024-58072, CVE-2025-21811, CVE-2025-21858, CVE-2025-21865, CVE-2025-21744, CVE-2025-21753, CVE-2024-26996, CVE-2025-21814, CVE-2024-57986, CVE-2025-21910, CVE-2025-21722, CVE-2024-58051, CVE-2025-21787, CVE-2025-21935, CVE-2024-58055, CVE-2024-26982, CVE-2025-21647, CVE-2025-21928, CVE-2024-58083, CVE-2025-21948, CVE-2025-21914, CVE-2024-58085, CVE-2025-21765, CVE-2025-21762, CVE-2025-21823, CVE-2025-21917)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2024-58072, CVE-2024-58051, CVE-2024-58058, CVE-2024-57977, CVE-2024-58007, CVE-2025-21753, CVE-2025-21647, CVE-2025-21787, CVE-2025-21791, CVE-2025-21782, CVE-2024-56599, CVE-2024-58063, CVE-2025-21806, CVE-2021-47191, CVE-2025-21823, CVE-2025-21776, CVE-2025-21948, CVE-2024-58017, CVE-2024-57981, CVE-2025-21925, CVE-2024-58069, CVE-2024-58085, CVE-2025-21704, CVE-2025-21811, CVE-2025-21858, CVE-2025-21862, CVE-2024-58010, CVE-2025-21926, CVE-2025-21920, CVE-2025-21762, CVE-2025-21914, CVE-2025-21916, CVE-2023-52741, CVE-2025-21835, CVE-2025-21761, CVE-2025-21905, CVE-2024-50055, CVE-2024-57980, CVE-2025-21728, CVE-2025-21910, CVE-2025-21785, CVE-2025-21848, CVE-2024-58090, CVE-2025-21971, CVE-2024-58071, CVE-2025-21909, CVE-2025-21722, CVE-2025-21765, CVE-2025-21859, CVE-2025-21744, CVE-2025-21781, CVE-2025-21922, CVE-2024-57979, CVE-2024-58052, CVE-2025-21718, CVE-2024-58014, CVE-2024-58020, CVE-2025-21772, CVE-2025-21904, CVE-2025-21708, CVE-2025-21846, CVE-2025-21935, CVE-2025-21763, CVE-2025-21934, CVE-2024-57973, CVE-2025-21877, CVE-2025-21760, CVE-2024-58002, CVE-2025-21721, CVE-2025-21719, CVE-2024-58083, CVE-2025-21928, CVE-2025-21871, CVE-2024-58009, CVE-2025-21749, CVE-2025-21866, CVE-2024-58055, CVE-2025-21814, CVE-2024-26996, CVE-2025-21898, CVE-2025-21715, CVE-2024-57986, CVE-2024-58001, CVE-2025-21731, CVE-2025-21764, CVE-2025-21917, CVE-2024-26982, CVE-2025-21736, CVE-2025-21865, CVE-2025-21735)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21835, CVE-2025-21760, CVE-2025-21914, CVE-2025-21744, CVE-2024-57977, CVE-2024-58001, CVE-2025-21848, CVE-2024-57981, CVE-2024-58055, CVE-2025-21721, CVE-2025-21925, CVE-2025-21764, CVE-2025-21909, CVE-2024-26996, CVE-2024-56599, CVE-2025-21728, CVE-2025-21782, CVE-2025-21866, CVE-2024-58069, CVE-2025-21859, CVE-2024-58007, CVE-2024-58009, CVE-2025-21904, CVE-2024-58085, CVE-2025-21920, CVE-2024-58058, CVE-2025-21811, CVE-2025-21922, CVE-2025-21948, CVE-2024-58090, CVE-2024-57980, CVE-2025-21823, CVE-2024-58052, CVE-2025-21736, CVE-2025-21917, CVE-2021-47191, CVE-2024-58051, CVE-2024-58017, CVE-2025-21846, CVE-2025-21862, CVE-2025-21722, CVE-2024-57986, CVE-2025-21871, CVE-2025-21865, CVE-2023-52741, CVE-2025-21971, CVE-2025-21718, CVE-2025-21814, CVE-2025-21704, CVE-2025-21934, CVE-2025-21781, CVE-2025-21791, CVE-2025-21708, CVE-2025-21935, CVE-2025-21761, CVE-2025-21719, CVE-2025-21763, CVE-2025-21772, CVE-2025-21905, CVE-2025-21731, CVE-2024-58002, CVE-2024-58083, CVE-2025-21858, CVE-2025-21776, CVE-2025-21762, CVE-2025-21928, CVE-2025-21877, CVE-2025-21910, CVE-2024-58010, CVE-2025-21735, CVE-2024-50055, CVE-2025-21785, CVE-2024-57973, CVE-2025-21806, CVE-2025-21749, CVE-2024-58063, CVE-2024-57979, CVE-2025-21753, CVE-2024-26982, CVE-2025-21647, CVE-2025-21898, CVE-2024-58020, CVE-2024-58071, CVE-2025-21926, CVE-2025-21715, CVE-2025-21765, CVE-2025-21787, CVE-2025-21916, CVE-2024-58014, CVE-2024-58072)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Netfilter;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2024-58051, CVE-2025-21731, CVE-2025-21782, CVE-2025-21785, CVE-2025-21917, CVE-2025-21914, CVE-2025-21744, CVE-2025-21948, CVE-2025-21708, CVE-2024-58072, CVE-2024-57977, CVE-2024-26996, CVE-2025-21787, CVE-2025-21859, CVE-2024-58007, CVE-2023-52664, CVE-2025-21722, CVE-2025-21971, CVE-2025-21928, CVE-2025-21791, CVE-2024-58090, CVE-2024-57981, CVE-2025-21865, CVE-2024-58001, CVE-2025-21926, CVE-2024-58071, CVE-2025-21721, CVE-2025-21772, CVE-2025-21764, CVE-2024-58017, CVE-2024-57973, CVE-2025-21761, CVE-2025-21866, CVE-2025-21920, CVE-2025-21704, CVE-2024-58055, CVE-2024-56599, CVE-2025-21935, CVE-2023-52927, CVE-2025-21811, CVE-2024-50055, CVE-2025-21781, CVE-2025-21760, CVE-2025-21922, CVE-2024-58009, CVE-2024-58069, CVE-2025-21877, CVE-2024-58058, CVE-2024-57980, CVE-2025-21905, CVE-2024-26982, CVE-2025-21916, CVE-2024-58020, CVE-2025-21835, CVE-2025-21719, CVE-2025-21858, CVE-2024-58085, CVE-2025-21814, CVE-2025-21762, CVE-2025-21862, CVE-2024-58014, CVE-2025-21898, CVE-2025-21904, CVE-2025-21736, CVE-2025-21765, CVE-2025-21647, CVE-2024-58010, CVE-2025-21763, CVE-2025-21718, CVE-2021-47191, CVE-2024-58052, CVE-2025-21846, CVE-2024-58063, CVE-2024-26689, CVE-2025-21806, CVE-2025-21753, CVE-2025-21910, CVE-2025-21848, CVE-2025-21749, CVE-2025-21871, CVE-2024-57979, CVE-2025-21728, CVE-2025-21925, CVE-2024-58002, CVE-2025-21909, CVE-2025-21715, CVE-2024-58083, CVE-2025-21735, CVE-2025-21776, CVE-2025-21823, CVE-2025-21934, CVE-2023-52741, CVE-2024-57986)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Netfilter;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2024-57979, CVE-2024-58090, CVE-2024-57973, CVE-2025-21925, CVE-2025-21763, CVE-2024-58069, CVE-2025-21718, CVE-2024-57986, CVE-2025-21871, CVE-2025-21898, CVE-2025-21760, CVE-2025-21814, CVE-2025-21731, CVE-2025-21772, CVE-2024-58001, CVE-2025-21708, CVE-2024-58009, CVE-2024-58002, CVE-2024-58085, CVE-2025-21920, CVE-2024-50055, CVE-2025-21791, CVE-2025-21904, CVE-2025-21917, CVE-2025-21971, CVE-2025-21736, CVE-2023-52741, CVE-2025-21753, CVE-2025-21910, CVE-2024-57980, CVE-2025-21948, CVE-2025-21762, CVE-2024-58072, CVE-2025-21858, CVE-2023-52664, CVE-2025-21922, CVE-2025-21715, CVE-2024-58051, CVE-2024-57981, CVE-2025-21909, CVE-2025-21934, CVE-2025-21728, CVE-2025-21764, CVE-2025-21782, CVE-2025-21744, CVE-2021-47191, CVE-2025-21866, CVE-2025-21859, CVE-2025-21846, CVE-2025-21877, CVE-2023-52927, CVE-2024-58017, CVE-2024-58007, CVE-2025-21914, CVE-2024-58052, CVE-2024-26689, CVE-2025-21647, CVE-2025-21806, CVE-2025-21835, CVE-2025-21916, CVE-2025-21935, CVE-2025-21905, CVE-2025-21787, CVE-2025-21721, CVE-2024-57977, CVE-2025-21722, CVE-2025-21865, CVE-2024-58058, CVE-2025-21926, CVE-2024-58071, CVE-2025-21785, CVE-2024-58020, CVE-2024-58010, CVE-2025-21811, CVE-2025-21776, CVE-2025-21749, CVE-2024-58014, CVE-2024-58055, CVE-2024-58063, CVE-2025-21761, CVE-2024-26996, CVE-2025-21862, CVE-2025-21928, CVE-2025-21719, CVE-2025-21765, CVE-2024-56599, CVE-2025-21735, CVE-2025-21848, CVE-2025-21704, CVE-2025-21781, CVE-2025-21823, CVE-2024-58083, CVE-2024-26982)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Netfilter;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2024-58055, CVE-2025-21715, CVE-2024-26982, CVE-2025-21806, CVE-2024-58052, CVE-2024-57981, CVE-2025-21935, CVE-2025-21763, CVE-2024-58002, CVE-2025-21736, CVE-2025-21704, CVE-2024-57986, CVE-2025-21761, CVE-2024-58069, CVE-2025-21934, CVE-2024-58017, CVE-2025-21862, CVE-2024-26689, CVE-2025-21744, CVE-2025-21776, CVE-2024-56599, CVE-2025-21858, CVE-2025-21722, CVE-2025-21791, CVE-2025-21735, CVE-2025-21926, CVE-2025-21904, CVE-2024-58009, CVE-2024-58010, CVE-2024-58063, CVE-2025-21765, CVE-2025-21914, CVE-2025-21866, CVE-2025-21760, CVE-2024-57979, CVE-2024-58071, CVE-2025-21781, CVE-2025-21772, CVE-2025-21928, CVE-2025-21762, CVE-2024-58014, CVE-2024-57980, CVE-2024-26996, CVE-2025-21708, CVE-2025-21922, CVE-2024-58051, CVE-2023-52927, CVE-2024-58085, CVE-2025-21721, CVE-2025-21782, CVE-2025-21871, CVE-2024-50055, CVE-2025-21749, CVE-2025-21835, CVE-2024-58007, CVE-2025-21971, CVE-2024-58083, CVE-2025-21731, CVE-2024-57973, CVE-2025-21811, CVE-2025-21728, CVE-2023-52741, CVE-2025-21865, CVE-2025-21859, CVE-2025-21823, CVE-2025-21877, CVE-2024-57977, CVE-2025-21917, CVE-2025-21909, CVE-2025-21846, CVE-2024-58072, CVE-2025-21848, CVE-2023-52664, CVE-2025-21785, CVE-2021-47191, CVE-2025-21910, CVE-2025-21925, CVE-2025-21814, CVE-2024-58020, CVE-2025-21764, CVE-2024-58058, CVE-2025-21905, CVE-2025-21787, CVE-2024-58001, CVE-2025-21647, CVE-2025-21719, CVE-2024-58090, CVE-2025-21753, CVE-2025-21718, CVE-2025-21948, CVE-2025-21898, CVE-2025-21920, CVE-2025-21916)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• Block layer subsystem;
• Drivers core;
• Network block device driver;
• Character device driver;
• GPU drivers;
• HID subsystem;
• InfiniBand drivers;
• Media drivers;
• Network drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• RapidIO drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SLIMbus drivers;
• QCOM SoC drivers;
• Trusted Execution Environment drivers;
• USB DSL drivers;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Renesas USBHS Controller drivers;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• NILFS2 file system;
• UBI file system;
• KVM subsystem;
• L3 Master device support module;
• Netfilter;
• Process Accounting mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Tracing infrastructure;
• Memory management;
• 802.1Q VLAN protocol;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Networking core;
• IPv4 networking;
• IPv6 networking;
• Logical Link layer;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• Network traffic control;
• Wireless networking;
• Tomoyo security module; (CVE-2025-21760, CVE-2025-21928, CVE-2025-21877, CVE-2024-58069, CVE-2025-21909, CVE-2025-21926, CVE-2025-21731, CVE-2025-21718, CVE-2025-21763, CVE-2025-21866, CVE-2024-58009, CVE-2025-21971, CVE-2025-21787, CVE-2025-21721, CVE-2024-58072, CVE-2025-21791, CVE-2021-47191, CVE-2025-21865, CVE-2025-21762, CVE-2024-58063, CVE-2025-21910, CVE-2025-21823, CVE-2025-21905, CVE-2025-21708, CVE-2024-58090, CVE-2025-21917, CVE-2024-58051, CVE-2025-21781, CVE-2025-21898, CVE-2025-21922, CVE-2024-58002, CVE-2024-58017, CVE-2024-57986, CVE-2024-58052, CVE-2024-26982, CVE-2025-21848, CVE-2025-21835, CVE-2025-21749, CVE-2024-58014, CVE-2024-58007, CVE-2024-57980, CVE-2025-21715, CVE-2025-21858, CVE-2025-21916, CVE-2025-21811, CVE-2025-21765, CVE-2025-21736, CVE-2025-21647, CVE-2025-21934, CVE-2025-21776, CVE-2025-21761, CVE-2025-21904, CVE-2024-57979, CVE-2024-58020, CVE-2025-21935, CVE-2025-21871, CVE-2025-21704, CVE-2024-57977, CVE-2024-58083, CVE-2025-21764, CVE-2025-21814, CVE-2025-21772, CVE-2025-21719, CVE-2024-58055, CVE-2023-52664, CVE-2024-56599, CVE-2024-58001, CVE-2025-21744, CVE-2024-58085, CVE-2025-21753, CVE-2025-21846, CVE-2024-58010, CVE-2024-26996, CVE-2023-52927, CVE-2024-50055, CVE-2025-21925, CVE-2025-21782, CVE-2024-57973, CVE-2024-58071, CVE-2025-21785, CVE-2025-21859, CVE-2025-21920, CVE-2024-26689, CVE-2023-52741, CVE-2025-21806, CVE-2024-58058, CVE-2025-21722, CVE-2025-21728, CVE-2024-57981, CVE-2025-21948, CVE-2025-21914, CVE-2025-21862, CVE-2025-21735)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Network block device driver;
• Bluetooth drivers;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• Hardware crypto device drivers;
• FireWire subsystem;
• EFI core;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• I3C subsystem;
• InfiniBand drivers;
• Input Device (Mouse) drivers;
• IOMMU subsystem;
• Multiple devices driver;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Fastrpc Driver;
• Network drivers;
• Operating Performance Points (OPP) driver;
• PCI subsystem;
• x86 platform drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• Remote Processor subsystem;
• Real Time Clock drivers;
• S/390 drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• SPI subsystem;
• Media staging drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• UFS subsystem;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Framebuffer layer;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• BPF subsystem;
• Timer subsystem;
• KVM subsystem;
• Networking core;
• ptr_ring data structure definitions;
• Networking subsytem;
• Amateur Radio drivers;
• L3 Master device support module;
• TCP network protocol;
• XFRM subsystem;
• Tracing infrastructure;
• io_uring subsystem;
• Process Accounting mechanism;
• Perf events;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Workqueue subsystem;
• Memory management;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• RxRPC session sockets;
• Network traffic control;
• Wireless networking;
• Key management;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC audio core drivers;
• SOF drivers; (CVE-2025-21737, CVE-2025-21711, CVE-2025-21987, CVE-2025-21848, CVE-2024-49570, CVE-2025-21762, CVE-2025-21738, CVE-2025-21712, CVE-2025-21719, CVE-2025-21870, CVE-2024-57984, CVE-2025-21815, CVE-2025-21744, CVE-2024-58058, CVE-2024-58078, CVE-2024-57990, CVE-2024-54458, CVE-2025-21899, CVE-2025-21814, CVE-2025-21746, CVE-2024-54456, CVE-2025-21739, CVE-2024-58057, CVE-2025-21855, CVE-2025-21758, CVE-2024-58006, CVE-2024-58007, CVE-2025-21720, CVE-2024-58090, CVE-2025-21852, CVE-2024-57982, CVE-2024-58013, CVE-2024-58082, CVE-2025-21825, CVE-2024-58072, CVE-2024-57996, CVE-2025-21787, CVE-2025-21742, CVE-2025-21705, CVE-2025-21829, CVE-2024-58060, CVE-2025-21811, CVE-2025-21900, CVE-2025-21853, CVE-2025-21809, CVE-2025-21938, CVE-2025-21728, CVE-2025-21785, CVE-2025-21732, CVE-2025-21888, CVE-2025-21768, CVE-2025-21875, CVE-2025-21721, CVE-2025-21766, CVE-2025-21892, CVE-2024-57953, CVE-2025-21772, CVE-2025-21735, CVE-2024-58017, CVE-2024-58086, CVE-2024-58084, CVE-2025-21761, CVE-2024-58008, CVE-2024-57988, CVE-2025-21874, CVE-2024-58011, CVE-2025-21706, CVE-2024-57999, CVE-2025-21858, CVE-2024-58061, CVE-2025-21727, CVE-2025-21780, CVE-2024-58051, CVE-2025-21791, CVE-2025-21788, CVE-2025-21786, CVE-2024-58012, CVE-2024-58010, CVE-2024-58001, CVE-2025-21844, CVE-2025-21708, CVE-2024-57834, CVE-2025-21873,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Serial ATA and Parallel ATA drivers;
• Drivers core;
• Network block device driver;
• Bluetooth drivers;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• Hardware crypto device drivers;
• FireWire subsystem;
• EFI core;
• Qualcomm firmware drivers;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• I2C subsystem;
• I3C subsystem;
• InfiniBand drivers;
• Input Device (Mouse) drivers;
• IOMMU subsystem;
• Multiple devices driver;
• Media drivers;
• NVIDIA Tegra memory controller driver;
• Fastrpc Driver;
• Network drivers;
• Operating Performance Points (OPP) driver;
• PCI subsystem;
• x86 platform drivers;
• PPS (Pulse Per Second) driver;
• PTP clock framework;
• Remote Processor subsystem;
• Real Time Clock drivers;
• S/390 drivers;
• SCSI subsystem;
• QCOM SoC drivers;
• SPI subsystem;
• Media staging drivers;
• Trusted Execution Environment drivers;
• TTY drivers;
• UFS subsystem;
• USB Device Class drivers;
• USB core drivers;
• USB Gadget drivers;
• USB Host Controller drivers;
• Framebuffer layer;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• Overlay file system;
• SMB network file system;
• UBI file system;
• BPF subsystem;
• Timer subsystem;
• KVM subsystem;
• Networking core;
• ptr_ring data structure definitions;
• Networking subsytem;
• Amateur Radio drivers;
• L3 Master device support module;
• TCP network protocol;
• XFRM subsystem;
• Tracing infrastructure;
• io_uring subsystem;
• Process Accounting mechanism;
• Perf events;
• Padata parallel execution mechanism;
• printk logging mechanism;
• Scheduler infrastructure;
• Workqueue subsystem;
• Memory management;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• Multipath TCP;
• Netfilter;
• NFC subsystem;
• Open vSwitch;
• Rose network layer;
• RxRPC session sockets;
• Network traffic control;
• Wireless networking;
• Key management;
• Landlock security;
• Linux Security Modules (LSM) Framework;
• Tomoyo security module;
• SoC audio core drivers;
• SOF drivers; (CVE-2025-21799, CVE-2025-21765, CVE-2024-57834, CVE-2025-21971, CVE-2025-21855, CVE-2024-58019, CVE-2025-21987, CVE-2025-21754, CVE-2025-21779, CVE-2024-57986, CVE-2025-21809, CVE-2025-21887, CVE-2025-21744, CVE-2024-58014, CVE-2025-21892, CVE-2025-21848, CVE-2024-58051, CVE-2024-58085, CVE-2025-21862, CVE-2024-57981, CVE-2024-57987, CVE-2024-58053, CVE-2024-58063, CVE-2024-58079, CVE-2025-21875, CVE-2025-21715, CVE-2024-58004, CVE-2025-21857, CVE-2025-21856, CVE-2025-21938, CVE-2024-58082, CVE-2025-21815, CVE-2025-21864, CVE-2024-52559, CVE-2024-58078, CVE-2024-57989, CVE-2024-58001, CVE-2025-21889, CVE-2025-21739, CVE-2024-58005, CVE-2025-21829, CVE-2024-58069, CVE-2025-21712, CVE-2025-21846, CVE-2025-21883, CVE-2025-21852, CVE-2025-21808, CVE-2025-21900, CVE-2025-21888, CVE-2025-21784, CVE-2025-21838, CVE-2024-58054, CVE-2025-21781, CVE-2025-21737, CVE-2024-58013, CVE-2025-21885, CVE-2025-21877, CVE-2024-58010, CVE-2025-21844, CVE-2024-58012, CVE-2024-58083, CVE-2025-21783, CVE-2025-21798, CVE-2024-57973, CVE-2024-57982, CVE-2025-21708, CVE-2024-58003, CVE-2025-21786, CVE-2025-21750, CVE-2025-21870, CVE-2025-21745, CVE-2024-58081, CVE-2024-57979, CVE-2025-21718, CVE-2025-21816, CVE-2025-21868, CVE-2025-21731, CVE-2025-21814, CVE-2025-21826, CVE-2024-58006, CVE-2025-21821, CVE-2024-57852, CVE-2025-21746,…