Every CVE Search/ Get API key

CVE-2025-21853

bpf: avoid holding freeze_mutex during mmap operation

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

bpf: avoid holding freeze_mutex during mmap operation

We use map->freeze_mutex to prevent races between map_freeze() and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freeze_mutex for entire duration of all the mm and VMA manipulations, which is completely unnecessary. This can potentially also lead to deadlocks, as reported by syzbot in [0].

So, instead, hold freeze_mutex only during writeability checks, bump (proactively) "write active" count for the map, unlock the mutex and proceed with mmap logic. And only if something went wrong during mmap logic, then undo that "write active" counter increment.

[0] https://lore.kernel.org/bpf/[email protected]/

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.25%Up 0.2 points since Mar 13, 2025
90%50%10%1%

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

bpf: avoid holding freeze_mutex during mmap operation

We use map->freeze_mutex to prevent races between map_freeze() and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freeze_mutex for entire duration of all the mm and VMA manipulations, which is completely unnecessary. This can potentially also lead to deadlocks, as reported by syzbot in [0].

So, instead, hold freeze_mutex only during writeability checks, bump (proactively) "write active" count for the map, unlock the mutex and proceed with mmap logic. And only if something went wrong during mmap logic, then undo that "write active" counter increment.

[0] https://lore.kernel.org/bpf/[email protected]/

Record
CVE-2025-21853
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
CVE List No score

bpf: avoid holding freeze_mutex during mmap operation

In the Linux kernel, the following vulnerability has been resolved:

bpf: avoid holding freeze_mutex during mmap operation

We use map->freeze_mutex to prevent races between map_freeze() and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freeze_mutex for entire duration of all the mm and VMA manipulations, which is completely unnecessary. This can potentially also lead to deadlocks, as reported by syzbot in [0].

So, instead, hold freeze_mutex only during writeability checks, bump (proactively) "write active" count for the map, unlock the mutex and proceed with mmap logic. And only if something went wrong during mmap logic, then undo that "write active" counter increment.

[0] https://lore.kernel.org/bpf/[email protected]/

Record
CVE-2025-21853
Updated
2026-11-05
EUVDEUVD-2025-6392 No score

In the Linux kernel, the following vulnerability has been resolved:

bpf: avoid holding freeze_mutex during mmap operation

We use map->freeze_mutex to prevent races between map_freeze() and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freeze_mutex for entire duration of all the mm and VMA manipulations, which is completely unnecessary. This can potentially also lead to deadlocks, as reported by syzbot in [0].

So, instead, hold freeze_mutex only during writeability checks, bump (proactively) "write active" count for the map, unlock the mutex and proceed with mmap logic. And only if something went wrong during mmap logic, then undo that "write active" counter increment.

[0] https://lore.kernel.org/bpf/[email protected]/

Record
EUVD-2025-6392
Updated
2026-11-05
GitHub AdvisoriesGHSA-xgr9-crfp-4qg4 5.5

In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding...

In the Linux kernel, the following vulnerability has been resolved:

bpf: avoid holding freeze_mutex during mmap operation

We use map->freeze_mutex to prevent races between map_freeze() and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freeze_mutex for entire duration of all the mm and VMA manipulations, which is completely unnecessary. This can potentially also lead to deadlocks, as reported by syzbot in [0].

So, instead, hold freeze_mutex only during writeability checks, bump (proactively) "write active" count for the map, unlock the mutex and proceed with mmap logic. And only if something went wrong during mmap logic, then undo that "write active" counter increment.

[0] https://lore.kernel.org/bpf/[email protected]/

Record
GHSA-xgr9-crfp-4qg4
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-58487 5.5

CVE-2025-21853 affecting package kernel for versions less than 6.6.82.1-1

In the Linux kernel, the following vulnerability has been resolved:

bpf: avoid holding freeze_mutex during mmap operation

We use map->freeze_mutex to prevent races between map_freeze() and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freeze_mutex for entire duration of all the mm and VMA manipulations, which is completely unnecessary. This can potentially also lead to deadlocks, as reported by syzbot in [0].

So, instead, hold freeze_mutex only during writeability checks, bump (proactively) "write active" count for the map, unlock the mutex and proceed with mmap logic. And only if something went wrong during mmap logic, then undo that "write active" counter increment.

[0] https://lore.kernel.org/bpf/[email protected]/

Record
AZL-58487
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-58536 5.5

CVE-2025-21853 affecting package kernel for versions less than 5.15.182.1-1

In the Linux kernel, the following vulnerability has been resolved:

bpf: avoid holding freeze_mutex during mmap operation

We use map->freeze_mutex to prevent races between map_freeze() and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freeze_mutex for entire duration of all the mm and VMA manipulations, which is completely unnecessary. This can potentially also lead to deadlocks, as reported by syzbot in [0].

So, instead, hold freeze_mutex only during writeability checks, bump (proactively) "write active" count for the map, unlock the mutex and proceed with mmap logic. And only if something went wrong during mmap logic, then undo that "write active" counter increment.

[0] https://lore.kernel.org/bpf/[email protected]/

Record
AZL-58536
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 45 moreShow less
OSVBELL-CVE-2025-21853 5.5
Record
BELL-CVE-2025-21853
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2025-21853 5.5

In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freeze_mutex during mmap operation We use map->freeze_mutex to prevent races between map_freeze() and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freeze_mutex for entire duration of all the mm and VMA manipulations, which is completely unnecessary. This can potentially also lead to deadlocks, as reported by syzbot in [0]. So, instead, hold freeze_mutex only during writeability checks, bump (proactively) "write active" count for the map, unlock the mutex and proceed with mmap logic. And only if something went wrong during mmap logic, then undo that "write active" counter increment. [0] https://lore.kernel.org/bpf/[email protected]/

Record
DEBIAN-CVE-2025-21853
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1339 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

dma-debug: fix a possible deadlock on radix_lock

radix_lock() shouldn't be held while holding dma_hash_entry[idx].lock otherwise, there's a possible deadlock scenario when dma debug API is called holding rq_lock():

CPU0 CPU1 CPU2 dma_free_attrs() check_unmap() add_dma_entry() __schedule() //out (A) rq_lock() get_hash_bucket() (A) dma_entry_hash check_sync() (A) radix_lock() (W) dma_entry_hash dma_entry_free() (W) radix_lock() // CPU2's one (W) rq_lock()

CPU1 situation can happen when it extending radix tree and it tries to wake up kswapd via wake_all_kswapd().

CPU2 situation can happen while perf_event_task_sched_out() (i.e. dma sync operation is called while deleting perf_event using etm and etr tmc which are Arm Coresight hwtracing driver backends).

To remove this possible situation, call dma_entry_free() after put_hash_bucket() in check_unmap().(CVE-2024-47143)

In the Linux kernel, the following vulnerability has been resolved:

dlm: fix possible lkb_resource null dereference

This patch fixes a possible null pointer dereference when this function is called from request_lock() as lkb->lkb_resource is not assigned yet, only after validate_lock_args() by calling attach_lkb(). Another issue is that a resource name could be a non printable bytearray and we cannot assume to be ASCII coded.

The log functionality is probably never being hit when DLM is used in normal way and no debug logging is enabled. The null pointer dereference can only occur on a new created lkb that does not have the resource assigned yet, it probably never hits the null pointer dereference but we should be sure that other changes might not change this behaviour and we actually can hit the mentioned null pointer dereference.

In this patch we just drop the printout of the resource name, the lkb id is enough to make a possible connection to a resource name if this exists.(CVE-2024-47809)

In the Linux kernel, the following vulnerability has been resolved:

bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again

Commit 028ddcac477b ("bcache: Remove unnecessary NULL point check in node allocations") leads a NULL pointer deference in cache_set_flush().

1721 if (!IS_ERR_OR_NULL(c->root)) 1722 list_add(&c->root->list, &c->btree_cache);

>From the above code in cache_set_flush(), if previous registration code fails before allocating c->root, it is possible c->root is NULL as what it is initialized. __bch_btree_node_alloc() never returns NULL but c->root is possible to be NULL at above line 1721.

This patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.(CVE-2024-48881)

In the Linux kernel, the following vulnerability has been resolved:

vfio/pci: Properly hide first-in-list PCIe extended capability

There are cases where a PCIe extended capability should be hidden from the user. For example, an unknown capability (i.e., capability with ID greater than PCI_EXT_CAP_ID_MAX) or a capability that is intentionally chosen to be hidden from the user.

Hiding a capability is done by virtualizing and modifying the 'Next Capability Offset' field of the previous capability so it points to the capability after the one that should be hidden.

The special case where the first capability in the list should be hidden is handled differently because there is no previous capability that can be modified. In this case, the capability ID and version are zeroed while leaving the next pointer intact. This hides the capability and leaves an anchor for the rest of the capability list.

However, today,…

Record
OESA-2025-1339
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1340 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

tipc: Fix use-after-free of kernel socket in cleanup_bearer().

syzkaller reported a use-after-free of UDP kernel socket in cleanup_bearer() without repro. [0][1]

When bearer_disable() calls tipc_udp_disable(), cleanup of the UDP kernel socket is deferred by work calling cleanup_bearer().

tipc_exit_net() waits for such works to finish by checking tipc_net(net)->wq_count. However, the work decrements the count too early before releasing the kernel socket, unblocking cleanup_net() and resulting in use-after-free.

Let's move the decrement after releasing the socket in cleanup_bearer().

[0]: ref_tracker: net notrefcnt@000000009b3d1faf has 1/1 users at sk_alloc+0x438/0x608 inet_create+0x4c8/0xcb0 __sock_create+0x350/0x6b8 sock_create_kern+0x58/0x78 udp_sock_create4+0x68/0x398 udp_sock_create+0x88/0xc8 tipc_udp_enable+0x5e8/0x848 __tipc_nl_bearer_enable+0x84c/0xed8 tipc_nl_bearer_enable+0x38/0x60 genl_family_rcv_msg_doit+0x170/0x248 genl_rcv_msg+0x400/0x5b0 netlink_rcv_skb+0x1dc/0x398 genl_rcv+0x44/0x68 netlink_unicast+0x678/0x8b0 netlink_sendmsg+0x5e4/0x898 ____sys_sendmsg+0x500/0x830

[1]: BUG: KMSAN: use-after-free in udp_hashslot include/net/udp.h:85 [inline] BUG: KMSAN: use-after-free in udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979 udp_hashslot include/net/udp.h:85 [inline] udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979 sk_common_release+0xaf/0x3f0 net/core/sock.c:3820 inet_release+0x1e0/0x260 net/ipv4/af_inet.c:437 inet6_release+0x6f/0xd0 net/ipv6/af_inet6.c:489 __sock_release net/socket.c:658 [inline] sock_release+0xa0/0x210 net/socket.c:686 cleanup_bearer+0x42d/0x4c0 net/tipc/udp_media.c:819 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310 worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391 kthread+0x531/0x6b0 kernel/kthread.c:389 ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244

Uninit was created at: slab_free_hook mm/slub.c:2269 [inline] slab_free mm/slub.c:4580 [inline] kmem_cache_free+0x207/0xc40 mm/slub.c:4682 net_free net/core/net_namespace.c:454 [inline] cleanup_net+0x16f2/0x19d0 net/core/net_namespace.c:647 process_one_work kernel/workqueue.c:3229 [inline] process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310 worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391 kthread+0x531/0x6b0 kernel/kthread.c:389 ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244

CPU: 0 UID: 0 PID: 54 Comm: kworker/0:2 Not tainted 6.12.0-rc1-00131-gf66ebf37d69c #7 91723d6f74857f70725e1583cba3cf4adc716cfa Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 Workqueue: events cleanup_bearer(CVE-2024-56642)

In the Linux kernel, the following vulnerability has been resolved:

net: hsr: avoid potential out-of-bound access in fill_frame_info()

syzbot is able to feed a packet with 14 bytes, pretending it is a vlan one.

Since fill_frame_info() is relying on skb->mac_len already, extend the check to cover this case.

BUG: KMSAN: uninit-value in fill_frame_info net/hsr/hsr_forward.c:709 [inline] BUG: KMSAN: uninit-value in hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724 fill_frame_info net/hsr/hsr_forward.c:709 [inline] hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724 hsr_dev_xmit+0x2f0/0x350 net/hsr/hsr_device.c:235 __netdev_start_xmit include/linux/netdevice.h:5002 [inline] netdev_start_xmit include/linux/netdevice.h:5011 [inline] xmit_one net/core/dev.c:3590 [inline] dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3606 __dev_queue_xmit+0x366a/0x57d0 net/core/dev.c:4434 dev_queue_xmit…

Record
OESA-2025-1340
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:20095 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:20095
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:20518 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:20518
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:20095 7.8

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)

  • kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)

  • kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)

  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)

  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)

  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)

  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)

  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)

  • kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)

  • kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)

  • kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633)

  • kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)

  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)

  • kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)

  • kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)

  • kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)

  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)

  • kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)

  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)

  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)

  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)

  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)

  • kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)

  • kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)

  • kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)

  • kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)

  • kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)

  • kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)

  • kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)

  • kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)

  • kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)

  • kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)

  • kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)

  • kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)

  • kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)

  • kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)

  • kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)

  • kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)

  • kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)

  • kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)

  • kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)

  • kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)

  • kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)

  • kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)

  • kernel: HID: multitouch: Add NULL check in mt_input_configured…

Record
RLSA-2025:20095
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:20518 7.8

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830)

  • kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689)

  • kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744)

  • kernel: vfs: fix race between evice_inodes() and find_inode()&iput() (CVE-2024-47679)

  • kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727)

  • kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864)

  • kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060)

  • kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024)

  • kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195)

  • kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294)

  • kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052)

  • kernel: afs: Fix lock recursion (CVE-2024-53090)

  • kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)

  • kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)

  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)

  • kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229)

  • kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170)

  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)

  • kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)

  • kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)

  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)

  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)

  • kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)

  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)

  • kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709)

  • kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)

  • kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786)

  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)

  • kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)

  • kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)

  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)

  • kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)

  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)

  • kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672)

  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)

  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)

  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)

  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)

  • kernel: usbnet: fix memory leak in error case (CVE-2022-49657)

  • kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432)

  • kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672)

  • kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353)

  • kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437)

  • kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627)

  • kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670)

  • kernel: can: isotp: sanitize CAN ID checks in isotp_bind() (CVE-2022-49269)

  • kernel:…

Record
RLSA-2025:20518
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2025-21853 5.5

CVE-2025-21853 in linux - Patched by Root

Root has patched CVE-2025-21853 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2025-21853
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2025-21853 5.5

CVE-2025-21853 in linux - Patched by Root

Root has patched CVE-2025-21853 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2025-21853
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2025-21853 5.7

In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freeze_mutex during mmap operation We use map->freeze_mutex to prevent races between map_freeze() and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freeze_mutex for entire duration of all the mm and VMA manipulations, which is completely unnecessary. This can potentially also lead to deadlocks, as reported by syzbot in [0]. So, instead, hold freeze_mutex only during writeability checks, bump (proactively) "write active" count for the map, unlock the mutex and proceed with mmap logic. And only if something went wrong during mmap logic, then undo that "write active" counter increment. [0] https://lore.kernel.org/bpf/[email protected]/

Record
UBUNTU-CVE-2025-21853
CVSS 4.0
5.7 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2025:20095 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  • kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)
  • kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)
  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  • kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)
  • kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)
  • kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633)
  • kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)
  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  • kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)
  • kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)
  • kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)
  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  • kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)
  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
  • kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)
  • kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)
  • kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)
  • kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)
  • kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)
  • kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)
  • kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)
  • kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)
  • kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)
  • kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)
  • kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)
  • kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)
  • kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)
  • kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
  • kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)
  • kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)
  • kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)
  • kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)
  • kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)
  • kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)
  • kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)
  • kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)
  • kernel: HID:…
Record
ALSA-2025:20095
Updated
2026-11-02
OSVALSA-2025:20518 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv() (CVE-2022-48830)
  • kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB (CVE-2024-46689)
  • kernel: Squashfs: sanity check symbolic link size (CVE-2024-46744)
  • kernel: vfs: fix race between evice_inodes() and find_inode()&iput() (CVE-2024-47679)
  • kernel: x86/tdx: Fix "in-kernel MMIO" check (CVE-2024-47727)
  • kernel: rxrpc: Fix a race between socket set up and I/O thread creation (CVE-2024-49864)
  • kernel: io_uring: check if we need to reschedule during overflow flush (CVE-2024-50060)
  • kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (CVE-2022-49024)
  • kernel: posix-clock: Fix missing timespec64 check in pc_clock_settime() (CVE-2024-50195)
  • kernel: rxrpc: Fix missing locking causing hanging calls (CVE-2024-50294)
  • kernel: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (CVE-2024-53052)
  • kernel: afs: Fix lock recursion (CVE-2024-53090)
  • kernel: virtio/vsock: Fix accept_queue memory leak (CVE-2024-53119)
  • kernel: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (CVE-2024-53135)
  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  • kernel: RDMA/rxe: Fix the qp flush warnings in req (CVE-2024-53229)
  • kernel: block: fix uaf for flush rq while iterating tags (CVE-2024-53170)
  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  • kernel: net: af_can: do not leave a dangling sk pointer in can_create() (CVE-2024-56603)
  • kernel: blk-cgroup: Fix UAF in blkcg_unpin_online() (CVE-2024-56672)
  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  • kernel: can: j1939: j1939_session_new(): fix skb reference counting (CVE-2024-56645)
  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  • kernel: io_uring: check if iowq is killed before queuing (CVE-2024-56709)
  • kernel: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (CVE-2024-56739)
  • kernel: bpf: put bpf_link's program when link is safe to be deallocated (CVE-2024-56786)
  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  • kernel: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (CVE-2024-53680)
  • kernel: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (CVE-2025-21648)
  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  • kernel: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (CVE-2025-21631)
  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  • kernel: afs: Fix merge preference rule failure condition (CVE-2025-21672)
  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
  • kernel: usbnet: fix memory leak in error case (CVE-2022-49657)
  • kernel: powerpc/xics: fix refcount leak in icp_opal_init() (CVE-2022-49432)
  • kernel: net: tun: unlink NAPI from device on destruction (CVE-2022-49672)
  • kernel: powerpc/papr_scm: don't requests stats with '0' sized stats buffer (CVE-2022-49353)
  • kernel: powerpc/xive: Fix refcount leak in xive_spapr_init (CVE-2022-49437)
  • kernel: ima: Fix potential memory leak in ima_init_crypto() (CVE-2022-49627)
  • kernel: linux/dim: Fix divide by 0 in RDMA DIM (CVE-2022-49670)
  • kernel: can: isotp: sanitize CAN ID…
Record
ALSA-2025:20518
Updated
2026-11-02
OSVCLSA-2026-1778787063 No score

kernel: Fix of 123 CVEs

  • net: skbuff: propagate shared-frag marker through pskb_copy()
  • mptcp: always handle address removal under msk socket lock {CVE-2025-21875}
  • uprobes: Reject the shared zeropage in uprobe_write_opcode() {CVE-2025-21881}
  • net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error {CVE-2025-21924}
  • wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() {CVE-2025-21744}
  • mptcp: fix NULL pointer in can_accept_new_subflow {CVE-2025-23145}
  • bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock {CVE-2025-21951}
  • blk-cgroup: Fix class @block_class's subsystem refcount leakage {CVE-2025-21745}
  • net/mlx5: handle errors in mlx5_chains_create_table() {CVE-2025-21975}
  • USB: hub: Ignore non-compliant devices with too many configs or interfaces {CVE-2025-21776}
  • wifi: iwlwifi: don't warn when if there is a FW error {CVE-2025-38096}
  • ice: fix memory leak in aRFS after reset {CVE-2025-21981}
  • KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel {CVE-2025-21779}
  • Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken {CVE-2025-38099}
  • regulator: check that dummy regulator has been probed before using it {CVE-2025-22008}
  • acpi: nfit: fix narrowing conversion in acpi_nfit_ctl {CVE-2025-22044}
  • drm/scheduler: signal scheduled fence when kill job {CVE-2025-38436}
  • nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request {CVE-2025-38430}
  • net: decrease cached dst counters in dst_release {CVE-2025-22057}
  • bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT {CVE-2025-38439}
  • net: fix NULL pointer dereference in l3mdev_l3_rcv {CVE-2025-22103}
  • dlm: prevent NPD when writing a positive value to event_done {CVE-2025-23131}
  • drm/amd/display: fix a Null pointer dereference vulnerability {CVE-2025-39705}
  • net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree {CVE-2025-38468}
  • drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params {CVE-2025-21941}
  • drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities {CVE-2025-39707}
  • HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948}
  • usb: net: sierra: check for no status endpoint {CVE-2025-38474}
  • drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() {CVE-2025-21996}
  • wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() {CVE-2025-38643}
  • netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets {CVE-2025-22063}
  • vxlan: Fix NPD when refreshing an FDB entry with a nexthop object {CVE-2025-39851}
  • thermal: int340x: Add NULL check for adev {CVE-2025-23136}
  • Bluetooth: l2cap: Check encryption key size on incoming connection {CVE-2025-39889}
  • dm thin: make get_first_thin use rcu-safe list first function {CVE-2025-21664}
  • tracing: Add down_write(trace_event_sem) when adding trace event {CVE-2025-38539}
  • usbnet: Fix using smp_processor_id() in preemptible code warnings {CVE-2025-40164}
  • bpf: Send signals asynchronously if !preemptible {CVE-2025-21728}
  • ima: Fix a potential integer overflow in ima_appraise_measurement {CVE-2022-49643}
  • dm-stripe: fix a possible integer overflow {CVE-2025-39940}
  • usbnet: gl620a: fix endpoint checking in genelink_bind() {CVE-2025-21877}
  • fs: dlm: fix use after free in midcomms commit {CVE-2023-53629}
  • usbnet: fix memory leak in error case {CVE-2022-49657}
  • wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
  • can: j1939: j1939_send_one(): fix missing CAN header initialization {CVE-2022-49845}
  • ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
  • posix-clock: Fix missing timespec64 check in pc_clock_settime() {CVE-2024-50195}
  • net_sched: Prevent creation of classes with TC_H_ROOT {CVE-2025-21971}
  • mm/slub: avoid accessing metadata when pointer is invalid in object_err() {CVE-2025-39902}
  • RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow…
Record
CLSA-2026-1778787063
Updated
2026-11-02
OSVCLSA-2026-1783791447 No score

kernel: Fix of 307 CVEs

  • gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully {CVE-2022-48660}
  • ipv4: check for NULL idev in ip_route_use_hint() {CVE-2024-36008}
  • KEYS: trusted: Do not use WARN when encode fails {CVE-2024-36975}
  • Fix userfaultfd_api to return EINVAL as expected {CVE-2024-41027}
  • xhci: Fix null pointer dereference when host dies {CVE-2023-52898}
  • sctp: sysctl: auth_enable: avoid using current->nsproxy {CVE-2025-21638}
  • blk-mq: fix IO hang from sbitmap wakeup race {CVE-2024-26671}
  • net: openvswitch: fix flow memory leak in ovs_flow_cmd_new {CVE-2023-52977}
  • gpiolib: fix memory leak in gpiochip_setup_dev() {CVE-2022-48975}
  • HID: betop: check shape of output reports {CVE-2023-53015}
  • mm/swapfile: add cond_resched() in get_swap_pages() {CVE-2023-52932}
  • HV: hv_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-52937}
  • drm/i915: Fix a memory leak with reused mmap_offset {CVE-2023-53002}
  • ptdma: pt_core_execute_cmd() should use spinlock {CVE-2023-53013}
  • RDMA/core: Fix ib block iterator counter overflow {CVE-2023-53026}
  • Bluetooth: hci_conn: Fix memory leaks {CVE-2023-53018}
  • scsi: target: pscsi: Fix bio_put() for error case {CVE-2024-26760}
  • sctp: Prevent TOCTOU out-of-bounds write {CVE-2025-40331}
  • pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() {CVE-2026-23038}
  • cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() {CVE-2025-40194}
  • ALSA: hda/cs8409: Fix possible NULL dereference {CVE-2024-50160}
  • nbd: don't allow reconnect after disconnect {CVE-2025-21731}
  • openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
  • ext4: detect invalid INLINE_DATA + EXTENTS flag combination {CVE-2025-40167}
  • ext4: xattr: fix null pointer deref in ext4_raw_inode() {CVE-2025-68820}
  • net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
  • wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode {CVE-2025-40321}
  • ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
  • ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping {CVE-2025-40121}
  • i40e: Fix macvlan leak by synchronizing access to mac_filter_hash {CVE-2024-50041}
  • net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() {CVE-2024-50000}
  • bpf: Fix reference count leak in bpf_prog_test_run_xdp() {CVE-2026-22994}
  • xsk: check IFF_UP earlier in Tx path {CVE-2023-53240}
  • firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038}
  • virtgpu: don't reset on shutdown {CVE-2025-38064}
  • xen/netfront: fix crash when removing device {CVE-2022-48969}
  • mptcp: do not fallback when OoO is present {CVE-2024-50185}
  • can: j1939: add missing calls in NETDEV_UNREGISTER notification handler {CVE-2025-39925}
  • netfilter: nf_tables: remove redundant chain validation on register store {CVE-2025-71160}
  • xfs: fix use-after-free in xattr node block inactivation {CVE-2026-43053}
  • ext4: fix racy may inline data check in dio write {CVE-2023-52786}
  • drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini {CVE-2023-52738}
  • macsec: fix UAF bug for real_dev {CVE-2022-49390}
  • drm/i915/gem: Fix Virtual Memory mapping boundaries calculation {CVE-2024-42259}
  • mm/shmem: disable PMD-sized page cache if needed {CVE-2024-42241}
  • driver: iio: add missing checks on iio_info's callback access {CVE-2024-46715}
  • udmabuf: fix memory leak on last export_udmabuf() error path {CVE-2024-56712}
  • ALSA: control: Avoid WARN() for symlink errors {CVE-2024-56657}
  • mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM {CVE-2024-56611}
  • eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682}
  • net: annotate data-races around sk->sk_{data_ready,write_space} {CVE-2026-23302}
  • udmabuf: change folios array from kmalloc to kvmalloc {CVE-2024-56544}
  • RDMA/mlx5: Move events notifier registration to be after device registration {CVE-2024-53224}
  • dlm: fix possible lkb_resource…
Record
CLSA-2026-1783791447
Updated
2026-11-02
OSV No score

bpf: avoid holding freeze_mutex during mmap operation

In the Linux kernel, the following vulnerability has been resolved:

bpf: avoid holding freeze_mutex during mmap operation

We use map->freeze_mutex to prevent races between map_freeze() and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freeze_mutex for entire duration of all the mm and VMA manipulations, which is completely unnecessary. This can potentially also lead to deadlocks, as reported by syzbot in [0].

So, instead, hold freeze_mutex only during writeability checks, bump (proactively) "write active" count for the map, unlock the mutex and proceed with mmap logic. And only if something went wrong during mmap logic, then undo that "write active" counter increment.

[0] https://lore.kernel.org/bpf/[email protected]/

Record
CVE-2025-21853
Updated
2026-11-07
OSVMGASA-2025-0111 No score

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.83 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record
MGASA-2025-0111
Updated
2026-11-02
OSVMGASA-2025-0112 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.83 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2025-0112
Updated
2026-11-02
OSVSUSE-SU-2025:01614-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
  • CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
  • CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
  • CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
  • CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
  • CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
  • CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
  • CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
  • CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
  • CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
  • CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
  • CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
  • CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
  • CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
  • CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
  • CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
  • CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
  • CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
  • CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
  • CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
  • CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
  • CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
  • CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
  • CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
  • CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
  • CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
  • CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
  • CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
  • CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
  • CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
  • CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
  • CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
  • CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
  • CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
  • CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
  • CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
  • CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).
  • CVE-2025-21924: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (bsc#1240720). -…
Record
SUSE-SU-2025:01614-1
Updated
2026-11-02
OSVSUSE-SU-2025:01707-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-27415: netfilter: bridge: confirm multicast packets before passing them up the stack (bsc#1224757).
  • CVE-2024-28956: Intel CPU: Indirect Target Selection (ITS) (bsc#1242006).
  • CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
  • CVE-2024-46763: fou: Fix null-ptr-deref in GRO (bsc#1230764).
  • CVE-2024-50038: netfilter: xtables: avoid NFPROTO_UNSPEC where needed (bsc#1231910).
  • CVE-2024-50162: bpf: devmap: provide rxq after redirect (bsc#1233075).
  • CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
  • CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
  • CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
  • CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
  • CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
  • CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
  • CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
  • CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
  • CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
  • CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
  • CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
  • CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
  • CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
  • CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
  • CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
  • CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
  • CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
  • CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
  • CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
  • CVE-2025-21854: sockmap, vsock: For connectible sockets allow only connected (bsc#1239470).
  • CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
  • CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
  • CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
  • CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
  • CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
  • CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
  • CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
  • CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
  • CVE-2025-21894: net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (bsc#1240581).
  • CVE-2025-21895: perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (bsc#1240585).
  • CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
  • CVE-2025-21906: wifi: iwlwifi: mvm: clean up ROC on failure (bsc#1240587).
  • CVE-2025-21908: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (bsc#1240600).
  • CVE-2025-21913: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (bsc#1240591).
  • CVE-2025-21922: ppp: Fix KMSAN uninit-value warning with bpf (bsc#1240639).…
Record
SUSE-SU-2025:01707-1
Updated
2026-11-02
OSVSUSE-SU-2025:01919-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
  • CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
  • CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-43869: perf: Fix hang while freeing sigtrap event (bsc#1229491).
  • CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
  • CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
  • CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
  • CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
  • CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
  • CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
  • CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
  • CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
  • CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
  • CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
  • CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086). -…
Record
SUSE-SU-2025:01919-1
Updated
2026-11-02
OSVSUSE-SU-2025:01951-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
  • CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
  • CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
  • CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
  • CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
  • CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
  • CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
  • CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
  • CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
  • CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
  • CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
  • CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
  • CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
  • CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
  • CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
  • CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
  • CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
  • CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
  • CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
  • CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
  • CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). -…
Record
SUSE-SU-2025:01951-1
Updated
2026-11-02
OSVSUSE-SU-2025:01964-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
  • CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
  • CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
  • CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
  • CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
  • CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
  • CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
  • CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
  • CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
  • CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
  • CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
  • CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
  • CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
  • CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
  • CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
  • CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
  • CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
  • CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
  • CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
  • CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
  • CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
  • CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
  • CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
  • CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
  • CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
  • CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
  • CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
  • CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
  • CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
  • CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
  • CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
  • CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
  • CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
  • CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
  • CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
  • CVE-2025-21894: net: enetc: VFs do not…
Record
SUSE-SU-2025:01964-1
Updated
2026-11-02
OSVSUSE-SU-2025:01967-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
  • CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
  • CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
  • CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
  • CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
  • CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
  • CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
  • CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
  • CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
  • CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
  • CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
  • CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
  • CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
  • CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
  • CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
  • CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
  • CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
  • CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
  • CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
  • CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
  • CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). -…
Record
SUSE-SU-2025:01967-1
Updated
2026-11-02
OSVSUSE-SU-2025:01972-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
  • CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
  • CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
  • CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
  • CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
  • CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
  • CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
  • CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
  • CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
  • CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
  • CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
  • CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
  • CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
  • CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593).
  • CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
  • CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
  • CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
  • CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
  • CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
  • CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376).
  • CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
  • CVE-2025-22057: net: decrease cached dst counters in dst_release (bsc#1241533).
  • CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
  • CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
  • CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
  • CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305).
  • CVE-2025-22094: powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu' (bsc#1241512).
  • CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456).
  • CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448).
  • CVE-2025-22104: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550).
  • CVE-2025-22107: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() (bsc#1241575).
  • CVE-2025-22109: ax25: Remove broken autobind (bsc#1241573).
  • CVE-2025-23138: watch_queue: fix pipe accounting mismatch (bsc#1241648).
  • CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (bsc#1242763).
  • CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242596).
  • CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
  • CVE-2025-23154: io_uring/net: fix io_req_post_cqe abuse by send bundle (bsc#1242533).
  • CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (bsc#1242507).
  • CVE-2025-37747: kABI workaround for perf-Fix-hang-while-freeing-sigtrap-event (References: bsc#1242520).
  • CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523).
  • CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung…
Record
SUSE-SU-2025:01972-1
Updated
2026-11-02
OSVSUSE-SU-2025:20343-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
  • CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
  • CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
  • CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
  • CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
  • CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
  • CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
  • CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
  • CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
  • CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
  • CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
  • CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
  • CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
  • CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
  • CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
  • CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
  • CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
  • CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
  • CVE-2025-21925: llc: do not use skb_get() before dev_queue_xmit() (bsc#1240713).
  • CVE-2025-21926: net: gso: fix ownership in __udp_gso_segment (bsc#1240712).
  • CVE-2025-21931: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709).
  • CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
  • CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
  • CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
  • CVE-2025-21980: sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1240809).
  • CVE-2025-21985: drm/amd/display: Fix out-of-bound accesses (bsc#1240811).
  • CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1240802).
  • CVE-2025-22004: net: atm: fix use after free in lec_send() (bsc#1240835).
  • CVE-2025-22015: mm/migrate: fix shmem xarray update during migration (bsc#1240944).
  • CVE-2025-22016: dpll: fix xa_alloc_cyclic() error handling (bsc#1240934).
  • CVE-2025-22017: devlink: fix xa_alloc_cyclic() error handling (bsc#1240936).
  • CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
  • CVE-2025-22029: exec: fix the racy usage of fs_struct->in_exec (bsc#1241378).
  • CVE-2025-22036: exfat: fix random stack corruption after get_block (bsc#1241426).
  • CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433).
  • CVE-2025-22053: net: ibmveth: make veth_pool_store stop hanging (bsc#1241373).
  • CVE-2025-22055: net: fix geneve_opt length integer overflow (bsc#1241371).
  • CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
  • CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526).
  • CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
  • CVE-2025-22080: fs/ntfs3: Prevent integer overflow in hdr_first_de() (bsc#1241416).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during FW…
Record
SUSE-SU-2025:20343-1
Updated
2026-11-02
OSVSUSE-SU-2025:20344-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
  • CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
  • CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
  • CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
  • CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
  • CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
  • CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
  • CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
  • CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
  • CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
  • CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
  • CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
  • CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
  • CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
  • CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
  • CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
  • CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
  • CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
  • CVE-2025-21925: llc: do not use skb_get() before dev_queue_xmit() (bsc#1240713).
  • CVE-2025-21926: net: gso: fix ownership in __udp_gso_segment (bsc#1240712).
  • CVE-2025-21931: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709).
  • CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
  • CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
  • CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
  • CVE-2025-21980: sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1240809).
  • CVE-2025-21985: drm/amd/display: Fix out-of-bound accesses (bsc#1240811).
  • CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1240802).
  • CVE-2025-22004: net: atm: fix use after free in lec_send() (bsc#1240835).
  • CVE-2025-22015: mm/migrate: fix shmem xarray update during migration (bsc#1240944).
  • CVE-2025-22016: dpll: fix xa_alloc_cyclic() error handling (bsc#1240934).
  • CVE-2025-22017: devlink: fix xa_alloc_cyclic() error handling (bsc#1240936).
  • CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
  • CVE-2025-22029: exec: fix the racy usage of fs_struct->in_exec (bsc#1241378).
  • CVE-2025-22036: exfat: fix random stack corruption after get_block (bsc#1241426).
  • CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433).
  • CVE-2025-22053: net: ibmveth: make veth_pool_store stop hanging (bsc#1241373).
  • CVE-2025-22055: net: fix geneve_opt length integer overflow (bsc#1241371).
  • CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
  • CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526).
  • CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
  • CVE-2025-22080: fs/ntfs3: Prevent integer overflow in hdr_first_de() (bsc#1241416).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during…
Record
SUSE-SU-2025:20344-1
Updated
2026-11-02
OSVSUSE-SU-2025:20354-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
  • CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
  • CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
  • CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
  • CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
  • CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
  • CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
  • CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
  • CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
  • CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
  • CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
  • CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
  • CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
  • CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
  • CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
  • CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
  • CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
  • CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
  • CVE-2025-21925: llc: do not use skb_get() before dev_queue_xmit() (bsc#1240713).
  • CVE-2025-21926: net: gso: fix ownership in __udp_gso_segment (bsc#1240712).
  • CVE-2025-21931: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709).
  • CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
  • CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
  • CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
  • CVE-2025-21980: sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1240809).
  • CVE-2025-21985: drm/amd/display: Fix out-of-bound accesses (bsc#1240811).
  • CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1240802).
  • CVE-2025-22004: net: atm: fix use after free in lec_send() (bsc#1240835).
  • CVE-2025-22015: mm/migrate: fix shmem xarray update during migration (bsc#1240944).
  • CVE-2025-22016: dpll: fix xa_alloc_cyclic() error handling (bsc#1240934).
  • CVE-2025-22017: devlink: fix xa_alloc_cyclic() error handling (bsc#1240936).
  • CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
  • CVE-2025-22029: exec: fix the racy usage of fs_struct->in_exec (bsc#1241378).
  • CVE-2025-22036: exfat: fix random stack corruption after get_block (bsc#1241426).
  • CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433).
  • CVE-2025-22053: net: ibmveth: make veth_pool_store stop hanging (bsc#1241373).
  • CVE-2025-22055: net: fix geneve_opt length integer overflow (bsc#1241371).
  • CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
  • CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526).
  • CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
  • CVE-2025-22080: fs/ntfs3: Prevent integer overflow in hdr_first_de() (bsc#1241416).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during FW…
Record
SUSE-SU-2025:20354-1
Updated
2026-11-02
OSVSUSE-SU-2025:20355-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
  • CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
  • CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
  • CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
  • CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
  • CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
  • CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
  • CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
  • CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
  • CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
  • CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
  • CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
  • CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
  • CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
  • CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
  • CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
  • CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
  • CVE-2025-21904: caif_virtio: fix wrong pointer check in cfv_probe() (bsc#1240576).
  • CVE-2025-21925: llc: do not use skb_get() before dev_queue_xmit() (bsc#1240713).
  • CVE-2025-21926: net: gso: fix ownership in __udp_gso_segment (bsc#1240712).
  • CVE-2025-21931: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (bsc#1240709).
  • CVE-2025-21962: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655).
  • CVE-2025-21963: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717).
  • CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740).
  • CVE-2025-21980: sched: address a potential NULL pointer dereference in the GRED scheduler (bsc#1240809).
  • CVE-2025-21985: drm/amd/display: Fix out-of-bound accesses (bsc#1240811).
  • CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1240802).
  • CVE-2025-22004: net: atm: fix use after free in lec_send() (bsc#1240835).
  • CVE-2025-22015: mm/migrate: fix shmem xarray update during migration (bsc#1240944).
  • CVE-2025-22016: dpll: fix xa_alloc_cyclic() error handling (bsc#1240934).
  • CVE-2025-22017: devlink: fix xa_alloc_cyclic() error handling (bsc#1240936).
  • CVE-2025-22018: atm: Fix NULL pointer dereference (bsc#1241266).
  • CVE-2025-22029: exec: fix the racy usage of fs_struct->in_exec (bsc#1241378).
  • CVE-2025-22036: exfat: fix random stack corruption after get_block (bsc#1241426).
  • CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433).
  • CVE-2025-22053: net: ibmveth: make veth_pool_store stop hanging (bsc#1241373).
  • CVE-2025-22055: net: fix geneve_opt length integer overflow (bsc#1241371).
  • CVE-2025-22058: udp: Fix memory accounting leak (bsc#1241332).
  • CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption (bsc#1241526).
  • CVE-2025-22064: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413).
  • CVE-2025-22080: fs/ntfs3: Prevent integer overflow in hdr_first_de() (bsc#1241416).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-22102: Bluetooth: btnxpuart: Fix kernel panic during…
Record
SUSE-SU-2025:20355-1
Updated
2026-11-02
OSVUSN-7521-1 No score

linux, linux-azure, linux-azure-6.11, linux-gcp, linux-gcp-6.11, linux-hwe-6.11, linux-oem-6.11, linux-raspi, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Hardware crypto device drivers;
  • FireWire subsystem;
  • EFI core;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • Network drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • x86 platform drivers;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • Remote Processor subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Framebuffer layer;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • BPF subsystem;
  • Timer subsystem;
  • KVM subsystem;
  • Networking core;
  • ptr_ring data structure definitions;
  • Networking subsytem;
  • Amateur Radio drivers;
  • L3 Master device support module;
  • TCP network protocol;
  • XFRM subsystem;
  • Tracing infrastructure;
  • io_uring subsystem;
  • Process Accounting mechanism;
  • Perf events;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Workqueue subsystem;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • RxRPC session sockets;
  • Network traffic control;
  • Wireless networking;
  • Key management;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module;
  • SoC audio core drivers;
  • SOF drivers; (CVE-2025-21737, CVE-2025-21711, CVE-2025-21987, CVE-2025-21848, CVE-2024-49570, CVE-2025-21762, CVE-2025-21738, CVE-2025-21712, CVE-2025-21719, CVE-2025-21870, CVE-2024-57984, CVE-2025-21815, CVE-2025-21744, CVE-2024-58058, CVE-2024-58078, CVE-2024-57990, CVE-2024-54458, CVE-2025-21899, CVE-2025-21814, CVE-2025-21746, CVE-2024-54456, CVE-2025-21739, CVE-2024-58057, CVE-2025-21855, CVE-2025-21758, CVE-2024-58006, CVE-2024-58007, CVE-2025-21720, CVE-2024-58090, CVE-2025-21852, CVE-2024-57982, CVE-2024-58013, CVE-2024-58082, CVE-2025-21825, CVE-2024-58072, CVE-2024-57996, CVE-2025-21787, CVE-2025-21742, CVE-2025-21705, CVE-2025-21829, CVE-2024-58060, CVE-2025-21811, CVE-2025-21900, CVE-2025-21853, CVE-2025-21809, CVE-2025-21938, CVE-2025-21728, CVE-2025-21785, CVE-2025-21732, CVE-2025-21888, CVE-2025-21768, CVE-2025-21875, CVE-2025-21721, CVE-2025-21766, CVE-2025-21892, CVE-2024-57953, CVE-2025-21772, CVE-2025-21735, CVE-2024-58017, CVE-2024-58086, CVE-2024-58084, CVE-2025-21761, CVE-2024-58008, CVE-2024-57988, CVE-2025-21874, CVE-2024-58011, CVE-2025-21706, CVE-2024-57999, CVE-2025-21858, CVE-2024-58061, CVE-2025-21727, CVE-2025-21780, CVE-2024-58051, CVE-2025-21791, CVE-2025-21788, CVE-2025-21786, CVE-2024-58012, CVE-2024-58010, CVE-2024-58001, CVE-2025-21844, CVE-2025-21708, CVE-2024-57834, CVE-2025-21873,…
Record
USN-7521-1
Updated
2026-11-02
OSVUSN-7521-3 No score

linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Hardware crypto device drivers;
  • FireWire subsystem;
  • EFI core;
  • Qualcomm firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • I3C subsystem;
  • InfiniBand drivers;
  • Input Device (Mouse) drivers;
  • IOMMU subsystem;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • Fastrpc Driver;
  • Network drivers;
  • Operating Performance Points (OPP) driver;
  • PCI subsystem;
  • x86 platform drivers;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • Remote Processor subsystem;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • SPI subsystem;
  • Media staging drivers;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • UFS subsystem;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Framebuffer layer;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • Overlay file system;
  • SMB network file system;
  • UBI file system;
  • BPF subsystem;
  • Timer subsystem;
  • KVM subsystem;
  • Networking core;
  • ptr_ring data structure definitions;
  • Networking subsytem;
  • Amateur Radio drivers;
  • L3 Master device support module;
  • TCP network protocol;
  • XFRM subsystem;
  • Tracing infrastructure;
  • io_uring subsystem;
  • Process Accounting mechanism;
  • Perf events;
  • Padata parallel execution mechanism;
  • printk logging mechanism;
  • Scheduler infrastructure;
  • Workqueue subsystem;
  • Memory management;
  • B.A.T.M.A.N. meshing protocol;
  • Bluetooth subsystem;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • RxRPC session sockets;
  • Network traffic control;
  • Wireless networking;
  • Key management;
  • Landlock security;
  • Linux Security Modules (LSM) Framework;
  • Tomoyo security module;
  • SoC audio core drivers;
  • SOF drivers; (CVE-2025-21799, CVE-2025-21765, CVE-2024-57834, CVE-2025-21971, CVE-2025-21855, CVE-2024-58019, CVE-2025-21987, CVE-2025-21754, CVE-2025-21779, CVE-2024-57986, CVE-2025-21809, CVE-2025-21887, CVE-2025-21744, CVE-2024-58014, CVE-2025-21892, CVE-2025-21848, CVE-2024-58051, CVE-2024-58085, CVE-2025-21862, CVE-2024-57981, CVE-2024-57987, CVE-2024-58053, CVE-2024-58063, CVE-2024-58079, CVE-2025-21875, CVE-2025-21715, CVE-2024-58004, CVE-2025-21857, CVE-2025-21856, CVE-2025-21938, CVE-2024-58082, CVE-2025-21815, CVE-2025-21864, CVE-2024-52559, CVE-2024-58078, CVE-2024-57989, CVE-2024-58001, CVE-2025-21889, CVE-2025-21739, CVE-2024-58005, CVE-2025-21829, CVE-2024-58069, CVE-2025-21712, CVE-2025-21846, CVE-2025-21883, CVE-2025-21852, CVE-2025-21808, CVE-2025-21900, CVE-2025-21888, CVE-2025-21784, CVE-2025-21838, CVE-2024-58054, CVE-2025-21781, CVE-2025-21737, CVE-2024-58013, CVE-2025-21885, CVE-2025-21877, CVE-2024-58010, CVE-2025-21844, CVE-2024-58012, CVE-2024-58083, CVE-2025-21783, CVE-2025-21798, CVE-2024-57973, CVE-2024-57982, CVE-2025-21708, CVE-2024-58003, CVE-2025-21786, CVE-2025-21750, CVE-2025-21870, CVE-2025-21745, CVE-2024-58081, CVE-2024-57979, CVE-2025-21718, CVE-2025-21816, CVE-2025-21868, CVE-2025-21731, CVE-2025-21814, CVE-2025-21826, CVE-2024-58006, CVE-2025-21821, CVE-2024-57852, CVE-2025-21746,…
Record
USN-7521-3
Updated
2026-11-02
OSVUSN-7654-1 No score

linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle, linux-oracle-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PA-RISC architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Bluetooth drivers;
  • Bus devices;
  • CPU frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • PCI Endpoint Test driver;
  • MTD block device drivers;
  • Network drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • TI SCI PM domains driver;
  • PWM drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Samsung SoC drivers;
  • TCM subsystem;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • File systems infrastructure;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • Proc file system;
  • SMB network file system;
  • Kernel stack handling interfaces;
  • Bluetooth subsystem;
  • Network traffic control;
  • SCTP protocol;
  • BPF subsystem;
  • Kernel command line parsing driver;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • Networking core;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Management Component Transport Protocol (MCTP);
  • Multipath TCP;
  • Netfilter;
  • Open vSwitch;
  • Phonet protocol;
  • TIPC protocol;
  • TLS protocol;
  • Virtio sound driver;
  • CPU Power monitoring subsystem; (CVE-2025-37790, CVE-2025-37871, CVE-2025-23147, CVE-2025-37803, CVE-2025-37909, CVE-2025-37840, CVE-2025-37989, CVE-2025-37927, CVE-2024-50280, CVE-2024-50272, CVE-2025-37850, CVE-2024-35866, CVE-2025-22027, CVE-2025-37812, CVE-2025-21853, CVE-2025-37810, CVE-2025-37766, CVE-2024-54458, CVE-2022-21546, CVE-2025-37757, CVE-2025-37839, CVE-2024-38540, CVE-2025-37990, CVE-2025-37794, CVE-2024-53203, CVE-2025-37964, CVE-2025-37819, CVE-2024-50125, CVE-2024-53128, CVE-2022-48893, CVE-2023-52572, CVE-2024-42322, CVE-2024-35943, CVE-2025-37740, CVE-2025-37739, CVE-2025-37838, CVE-2025-37995, CVE-2025-37789, CVE-2024-50258, CVE-2025-37970, CVE-2025-38024, CVE-2025-23146, CVE-2025-37780, CVE-2022-49168, CVE-2025-23145, CVE-2024-46774, CVE-2022-49063, CVE-2025-37742, CVE-2025-37940, CVE-2025-37781, CVE-2025-37796, CVE-2025-23159, CVE-2025-23144, CVE-2025-37875, CVE-2024-49989, CVE-2025-37867, CVE-2025-37892, CVE-2025-37913, CVE-2024-38541, CVE-2025-37983, CVE-2025-37923, CVE-2025-37836, CVE-2025-23151, CVE-2025-37765, CVE-2025-37817, CVE-2025-37991, CVE-2025-38009, CVE-2025-37858, CVE-2025-37841, CVE-2025-37771, CVE-2025-22062, CVE-2025-37912, CVE-2025-23156, CVE-2022-49535, CVE-2025-37829, CVE-2025-37851, CVE-2024-46816, CVE-2025-37998, CVE-2025-38023, CVE-2024-56751, CVE-2025-37844, CVE-2025-37967, CVE-2025-37930, CVE-2025-37994, CVE-2025-37805, CVE-2024-46742, CVE-2025-37883, CVE-2025-21839, CVE-2025-37823, CVE-2025-23157, CVE-2025-37787, CVE-2025-38094, CVE-2024-26686, CVE-2024-26739, CVE-2025-23142, CVE-2025-23163, CVE-2025-37915, CVE-2025-37885, CVE-2024-27402, CVE-2025-37749, CVE-2025-37738, CVE-2025-37905, CVE-2025-37773, CVE-2025-23140, CVE-2025-37792, CVE-2025-37808, CVE-2024-49960, CVE-2025-37857, CVE-2025-23158, CVE-2025-37824, CVE-2023-52757, CVE-2025-37767, CVE-2025-37758,…
Record
USN-7654-1
Updated
2026-11-03
OSVUSN-7654-2 No score

linux-intel-iot-realtime, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PA-RISC architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Bluetooth drivers;
  • Bus devices;
  • CPU frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • PCI Endpoint Test driver;
  • MTD block device drivers;
  • Network drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • TI SCI PM domains driver;
  • PWM drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Samsung SoC drivers;
  • TCM subsystem;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • File systems infrastructure;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • Proc file system;
  • SMB network file system;
  • Kernel stack handling interfaces;
  • Bluetooth subsystem;
  • Network traffic control;
  • SCTP protocol;
  • BPF subsystem;
  • Kernel command line parsing driver;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • Networking core;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Management Component Transport Protocol (MCTP);
  • Multipath TCP;
  • Netfilter;
  • Open vSwitch;
  • Phonet protocol;
  • TIPC protocol;
  • TLS protocol;
  • Virtio sound driver;
  • CPU Power monitoring subsystem; (CVE-2025-38024, CVE-2025-37787, CVE-2025-37741, CVE-2024-53128, CVE-2024-27402, CVE-2025-37794, CVE-2024-50280, CVE-2025-23146, CVE-2025-37862, CVE-2025-23151, CVE-2025-38023, CVE-2025-37797, CVE-2025-23140, CVE-2024-35866, CVE-2025-37940, CVE-2025-37738, CVE-2025-37905, CVE-2025-37766, CVE-2024-53203, CVE-2024-50125, CVE-2025-37995, CVE-2025-37949, CVE-2025-37915, CVE-2025-37839, CVE-2025-37812, CVE-2025-37857, CVE-2024-38541, CVE-2025-38094, CVE-2025-37789, CVE-2025-37867, CVE-2025-37770, CVE-2025-37927, CVE-2025-22062, CVE-2025-37805, CVE-2025-37841, CVE-2025-37970, CVE-2025-37913, CVE-2025-37859, CVE-2025-37830, CVE-2025-37780, CVE-2025-37994, CVE-2025-37840, CVE-2025-37967, CVE-2025-21853, CVE-2025-37790, CVE-2025-37914, CVE-2025-37982, CVE-2025-37808, CVE-2025-37740, CVE-2025-37803, CVE-2025-22027, CVE-2025-37765, CVE-2024-54458, CVE-2025-37912, CVE-2025-23161, CVE-2025-23159, CVE-2025-37875, CVE-2024-46774, CVE-2025-37991, CVE-2025-21839, CVE-2024-46751, CVE-2025-37998, CVE-2025-37810, CVE-2023-52757, CVE-2025-37851, CVE-2025-37749, CVE-2025-37871, CVE-2025-37792, CVE-2025-37757, CVE-2024-46816, CVE-2023-52572, CVE-2025-23150, CVE-2025-37923, CVE-2025-37964, CVE-2025-37892, CVE-2025-37989, CVE-2025-23142, CVE-2025-38009, CVE-2025-37767, CVE-2025-37911, CVE-2024-35943, CVE-2025-37844, CVE-2025-23158, CVE-2025-37796, CVE-2022-21546, CVE-2025-37829, CVE-2024-50272, CVE-2022-49063, CVE-2025-37969, CVE-2024-26686, CVE-2024-49989, CVE-2024-56751, CVE-2025-37742, CVE-2022-48893, CVE-2024-46742, CVE-2025-23157, CVE-2025-37781, CVE-2024-50258, CVE-2025-23148, CVE-2025-37983, CVE-2025-37771, CVE-2025-23144, CVE-2025-37858, CVE-2024-49960, CVE-2025-23163, CVE-2025-37881, CVE-2025-37883, CVE-2025-37773, CVE-2025-37836, CVE-2025-23156, CVE-2025-37885, CVE-2025-37811, CVE-2025-37758,…
Record
USN-7654-2
Updated
2026-11-03
OSVUSN-7654-3 No score

linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PA-RISC architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Bluetooth drivers;
  • Bus devices;
  • CPU frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • PCI Endpoint Test driver;
  • MTD block device drivers;
  • Network drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • TI SCI PM domains driver;
  • PWM drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Samsung SoC drivers;
  • TCM subsystem;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • File systems infrastructure;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • Proc file system;
  • SMB network file system;
  • Kernel stack handling interfaces;
  • Bluetooth subsystem;
  • Network traffic control;
  • SCTP protocol;
  • BPF subsystem;
  • Kernel command line parsing driver;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • Networking core;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Management Component Transport Protocol (MCTP);
  • Multipath TCP;
  • Netfilter;
  • Open vSwitch;
  • Phonet protocol;
  • TIPC protocol;
  • TLS protocol;
  • Virtio sound driver;
  • CPU Power monitoring subsystem; (CVE-2022-49535, CVE-2025-37773, CVE-2025-37982, CVE-2025-37990, CVE-2025-37859, CVE-2025-37765, CVE-2025-37768, CVE-2025-23142, CVE-2025-37911, CVE-2024-56751, CVE-2025-37767, CVE-2025-37940, CVE-2024-50272, CVE-2025-37858, CVE-2025-38094, CVE-2025-37905, CVE-2025-37994, CVE-2025-38024, CVE-2024-26686, CVE-2025-37992, CVE-2025-37983, CVE-2025-23157, CVE-2025-37867, CVE-2025-37771, CVE-2025-38005, CVE-2025-37989, CVE-2025-37991, CVE-2025-37796, CVE-2025-23151, CVE-2025-37738, CVE-2025-37790, CVE-2023-52757, CVE-2025-37949, CVE-2025-37969, CVE-2025-37823, CVE-2023-52572, CVE-2025-37844, CVE-2024-46816, CVE-2025-37851, CVE-2024-53128, CVE-2025-37927, CVE-2025-23147, CVE-2025-37930, CVE-2024-49989, CVE-2022-49168, CVE-2025-37794, CVE-2025-37998, CVE-2025-37810, CVE-2024-46751, CVE-2025-37995, CVE-2025-37742, CVE-2025-37883, CVE-2024-46742, CVE-2024-54458, CVE-2025-37964, CVE-2025-38023, CVE-2025-37780, CVE-2022-49063, CVE-2025-37740, CVE-2025-37915, CVE-2025-37850, CVE-2025-37758, CVE-2025-23159, CVE-2024-50258, CVE-2025-37811, CVE-2025-37885, CVE-2025-23158, CVE-2025-37787, CVE-2025-37792, CVE-2025-23144, CVE-2025-37805, CVE-2025-21853, CVE-2025-23145, CVE-2025-37803, CVE-2025-37739, CVE-2025-37749, CVE-2025-37841, CVE-2022-21546, CVE-2025-37923, CVE-2025-22027, CVE-2025-37836, CVE-2022-48893, CVE-2025-37797, CVE-2025-23161, CVE-2024-50125, CVE-2025-37857, CVE-2025-23163, CVE-2024-49960, CVE-2025-37808, CVE-2025-37766, CVE-2025-23140, CVE-2025-23150, CVE-2025-22062, CVE-2025-23148, CVE-2025-37875, CVE-2025-37819, CVE-2025-37817, CVE-2025-37824, CVE-2024-35867, CVE-2025-37781, CVE-2024-35790, CVE-2025-21839, CVE-2025-37829, CVE-2025-37788, CVE-2024-35943, CVE-2025-37892, CVE-2024-38540, CVE-2025-37830, CVE-2025-37757, CVE-2025-37871, CVE-2024-26739, CVE-2024-27402, CVE-2025-37756,…
Record
USN-7654-3
Updated
2026-11-03
OSVUSN-7654-4 No score

linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PA-RISC architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Bluetooth drivers;
  • Bus devices;
  • CPU frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • PCI Endpoint Test driver;
  • MTD block device drivers;
  • Network drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • TI SCI PM domains driver;
  • PWM drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Samsung SoC drivers;
  • TCM subsystem;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • File systems infrastructure;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • Proc file system;
  • SMB network file system;
  • Kernel stack handling interfaces;
  • Bluetooth subsystem;
  • Network traffic control;
  • SCTP protocol;
  • BPF subsystem;
  • Kernel command line parsing driver;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • Networking core;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Management Component Transport Protocol (MCTP);
  • Multipath TCP;
  • Netfilter;
  • Open vSwitch;
  • Phonet protocol;
  • TIPC protocol;
  • TLS protocol;
  • Virtio sound driver;
  • CPU Power monitoring subsystem; (CVE-2025-37767, CVE-2025-23151, CVE-2025-38005, CVE-2024-46816, CVE-2025-37812, CVE-2025-23159, CVE-2024-36908, CVE-2025-37930, CVE-2024-27402, CVE-2024-50125, CVE-2025-37881, CVE-2024-49989, CVE-2025-37964, CVE-2025-37739, CVE-2025-37792, CVE-2025-37742, CVE-2025-37875, CVE-2025-23144, CVE-2025-37836, CVE-2024-35866, CVE-2025-37738, CVE-2024-46774, CVE-2025-37817, CVE-2025-37781, CVE-2025-37757, CVE-2024-46751, CVE-2025-37867, CVE-2025-23158, CVE-2025-37885, CVE-2025-37756, CVE-2025-37788, CVE-2025-37994, CVE-2024-35867, CVE-2025-37905, CVE-2025-37883, CVE-2024-35943, CVE-2024-53128, CVE-2025-38009, CVE-2025-37940, CVE-2025-37992, CVE-2025-37796, CVE-2024-49960, CVE-2024-26686, CVE-2023-52757, CVE-2025-37841, CVE-2025-23148, CVE-2025-37851, CVE-2025-37808, CVE-2024-26739, CVE-2025-23161, CVE-2025-37859, CVE-2025-37839, CVE-2025-37982, CVE-2025-23142, CVE-2025-23140, CVE-2022-49168, CVE-2025-38024, CVE-2025-37949, CVE-2025-37790, CVE-2024-46742, CVE-2025-37780, CVE-2025-37911, CVE-2025-37840, CVE-2025-37768, CVE-2024-54458, CVE-2025-23150, CVE-2025-37969, CVE-2025-37749, CVE-2025-37995, CVE-2025-37789, CVE-2025-23146, CVE-2024-38541, CVE-2025-23163, CVE-2025-37770, CVE-2025-37871, CVE-2025-37740, CVE-2025-23157, CVE-2025-37741, CVE-2022-21546, CVE-2025-37909, CVE-2025-37991, CVE-2025-37913, CVE-2025-37803, CVE-2025-37797, CVE-2022-49063, CVE-2025-38023, CVE-2025-21839, CVE-2025-37811, CVE-2023-52572, CVE-2025-22027, CVE-2025-37765, CVE-2025-37892, CVE-2025-37810, CVE-2025-37914, CVE-2025-37850, CVE-2025-37858, CVE-2025-37794, CVE-2024-53203, CVE-2025-21853, CVE-2024-42322, CVE-2024-50258, CVE-2022-48893, CVE-2024-35790, CVE-2025-37787, CVE-2024-38540, CVE-2025-37915, CVE-2025-37819, CVE-2025-37838, CVE-2025-37998, CVE-2025-37771, CVE-2025-37983, CVE-2025-37844, CVE-2024-50272,…
Record
USN-7654-4
Updated
2026-11-03
OSVUSN-7654-5 No score

linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PA-RISC architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Bluetooth drivers;
  • Bus devices;
  • CPU frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • PCI Endpoint Test driver;
  • MTD block device drivers;
  • Network drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • TI SCI PM domains driver;
  • PWM drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Samsung SoC drivers;
  • TCM subsystem;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • File systems infrastructure;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • Proc file system;
  • SMB network file system;
  • Kernel stack handling interfaces;
  • Bluetooth subsystem;
  • Network traffic control;
  • SCTP protocol;
  • BPF subsystem;
  • Kernel command line parsing driver;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • Networking core;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Management Component Transport Protocol (MCTP);
  • Multipath TCP;
  • Netfilter;
  • Open vSwitch;
  • Phonet protocol;
  • TIPC protocol;
  • TLS protocol;
  • Virtio sound driver;
  • CPU Power monitoring subsystem; (CVE-2025-37758, CVE-2025-37983, CVE-2025-37768, CVE-2025-37810, CVE-2025-23140, CVE-2025-37757, CVE-2024-35943, CVE-2022-49168, CVE-2024-54458, CVE-2024-56751, CVE-2025-37985, CVE-2025-37969, CVE-2025-37930, CVE-2025-38094, CVE-2025-37749, CVE-2025-37796, CVE-2024-46751, CVE-2025-37780, CVE-2025-37738, CVE-2025-37765, CVE-2024-35866, CVE-2025-37771, CVE-2025-37892, CVE-2024-50280, CVE-2025-37789, CVE-2025-21839, CVE-2023-52757, CVE-2025-37781, CVE-2025-38024, CVE-2024-50258, CVE-2023-52572, CVE-2025-23148, CVE-2024-27402, CVE-2025-37824, CVE-2025-37875, CVE-2025-37940, CVE-2025-37998, CVE-2025-37883, CVE-2024-26739, CVE-2025-37858, CVE-2024-53203, CVE-2025-37970, CVE-2025-23150, CVE-2025-23163, CVE-2025-23144, CVE-2025-38023, CVE-2025-37773, CVE-2025-37811, CVE-2025-37792, CVE-2025-37739, CVE-2025-37991, CVE-2025-37836, CVE-2025-37812, CVE-2022-49535, CVE-2025-37927, CVE-2025-37885, CVE-2025-23142, CVE-2025-23161, CVE-2024-53128, CVE-2025-37850, CVE-2025-37857, CVE-2025-37992, CVE-2025-37790, CVE-2024-49960, CVE-2025-37756, CVE-2025-37808, CVE-2025-37905, CVE-2024-50272, CVE-2025-37742, CVE-2025-37967, CVE-2025-37994, CVE-2024-42322, CVE-2025-37794, CVE-2025-37949, CVE-2025-37787, CVE-2025-37995, CVE-2024-35790, CVE-2024-46816, CVE-2024-46742, CVE-2025-23159, CVE-2022-49063, CVE-2025-37788, CVE-2025-37797, CVE-2025-37913, CVE-2025-37740, CVE-2025-37989, CVE-2025-37914, CVE-2025-23151, CVE-2022-48893, CVE-2025-37851, CVE-2025-23157, CVE-2025-37923, CVE-2025-23158, CVE-2025-37871, CVE-2025-37982, CVE-2025-37862, CVE-2022-21546, CVE-2025-37841, CVE-2025-37844, CVE-2024-35867, CVE-2025-23147, CVE-2025-37819, CVE-2024-49989, CVE-2025-37830, CVE-2025-38009, CVE-2024-46774, CVE-2025-37990, CVE-2025-37859, CVE-2025-37911, CVE-2024-38540, CVE-2025-37767, CVE-2025-37770, CVE-2025-22062,…
Record
USN-7654-5
Updated
2026-11-03
OSVUSN-7655-1 No score

linux-intel-iotg-5.15 vulnerabilities

Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PA-RISC architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Bluetooth drivers;
  • Bus devices;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • MemoryStick subsystem;
  • Multifunction device drivers;
  • PCI Endpoint Test driver;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • NTB driver;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • TI SCI PM domains driver;
  • PWM drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • TCM subsystem;
  • Thermal drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • File systems infrastructure;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • Kernel stack handling interfaces;
  • Bluetooth subsystem;
  • IPv6 networking;
  • Network traffic control;
  • SCTP protocol;
  • RDMA verbs API;
  • SoC audio core drivers;
  • BPF subsystem;
  • Kernel command line parsing driver;
  • Tracing infrastructure;
  • Watch queue notification mechanism;
  • Memory management;
  • 802.1Q VLAN protocol;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • Networking core;
  • IPv4 networking;
  • MAC80211 subsystem;
  • Management Component Transport Protocol (MCTP);
  • Multipath TCP;
  • Netfilter;
  • Open vSwitch;
  • Phonet protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • SoC Audio for Freescale CPUs drivers;
  • Virtio sound driver;
  • CPU Power monitoring subsystem; (CVE-2025-37989, CVE-2025-22071, CVE-2025-37808, CVE-2025-37983, CVE-2025-38001, CVE-2024-46816, CVE-2024-50125, CVE-2025-38575, CVE-2025-37766, CVE-2022-49168, CVE-2025-22025, CVE-2025-22035, CVE-2025-37923, CVE-2024-49989, CVE-2025-23148, CVE-2024-53051, CVE-2025-39728, CVE-2025-21956, CVE-2025-37741, CVE-2025-37970, CVE-2025-37798, CVE-2025-23157, CVE-2025-38177, CVE-2022-49535, CVE-2025-22027, CVE-2025-37756, CVE-2025-38023, CVE-2025-22066, CVE-2025-37780, CVE-2025-37995, CVE-2025-37739, CVE-2025-37932, CVE-2025-37982, CVE-2025-37812, CVE-2025-23156, CVE-2025-38005, CVE-2025-21839, CVE-2025-37892, CVE-2025-22073, CVE-2024-35866, CVE-2023-52757, CVE-2025-37785, CVE-2025-23150, CVE-2024-58093, CVE-2025-21992, CVE-2025-37905, CVE-2025-37836, CVE-2025-21964, CVE-2025-23140, CVE-2025-22056, CVE-2025-37915, CVE-2025-22054,…
Record
USN-7655-1
Updated
2026-11-03
OSVUSN-7686-1 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PA-RISC architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Bluetooth drivers;
  • Bus devices;
  • CPU frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • PCI Endpoint Test driver;
  • MTD block device drivers;
  • Network drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • TI SCI PM domains driver;
  • PWM drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Samsung SoC drivers;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • File systems infrastructure;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • Proc file system;
  • SMB network file system;
  • Kernel stack handling interfaces;
  • Bluetooth subsystem;
  • Network traffic control;
  • SCTP protocol;
  • BPF subsystem;
  • Kernel command line parsing driver;
  • Tracing infrastructure;
  • Memory management;
  • 802.1Q VLAN protocol;
  • Networking core;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Management Component Transport Protocol (MCTP);
  • Multipath TCP;
  • Netfilter;
  • Open vSwitch;
  • Phonet protocol;
  • TIPC protocol;
  • TLS protocol;
  • Virtio sound driver;
  • CPU Power monitoring subsystem; (CVE-2024-50280, CVE-2025-23159, CVE-2024-26686, CVE-2025-37797, CVE-2024-50047, CVE-2025-37810, CVE-2025-37796, CVE-2024-26739, CVE-2022-49535, CVE-2025-37808, CVE-2025-37824, CVE-2025-37923, CVE-2025-37885, CVE-2025-23145, CVE-2025-37913, CVE-2025-23144, CVE-2025-37767, CVE-2024-50258, CVE-2024-46742, CVE-2025-37819, CVE-2025-37794, CVE-2025-21853, CVE-2025-37858, CVE-2025-37766, CVE-2025-23156, CVE-2025-38083, CVE-2024-46787, CVE-2025-38009, CVE-2025-37881, CVE-2024-54458, CVE-2025-37940, CVE-2025-37911, CVE-2025-37792, CVE-2024-46816, CVE-2025-37738, CVE-2025-37851, CVE-2025-37749, CVE-2025-37994, CVE-2024-50272, CVE-2025-37915, CVE-2025-23140, CVE-2024-53203, CVE-2025-37969, CVE-2025-37995, CVE-2025-37930, CVE-2024-56751, CVE-2025-23146, CVE-2024-50125, CVE-2025-37998, CVE-2025-37787, CVE-2025-37798, CVE-2025-37742, CVE-2025-23148, CVE-2024-35866, CVE-2025-37982, CVE-2025-23142, CVE-2025-37964, CVE-2025-37768, CVE-2022-49063, CVE-2025-37949, CVE-2025-37990, CVE-2025-38094, CVE-2025-37788, CVE-2025-37857, CVE-2024-49960, CVE-2022-49168, CVE-2022-48893, CVE-2024-46774, CVE-2025-37905, CVE-2025-38001, CVE-2025-37992, CVE-2025-37841, CVE-2024-38541, CVE-2025-37862, CVE-2025-37912, CVE-2025-37838, CVE-2025-37771, CVE-2024-35867, CVE-2025-38023, CVE-2024-49989, CVE-2025-37997, CVE-2025-37970, CVE-2025-23151, CVE-2025-37758, CVE-2025-37844, CVE-2025-37871, CVE-2025-38024, CVE-2025-37914, CVE-2024-53051, CVE-2025-37829, CVE-2025-37770, CVE-2025-38000, CVE-2025-23163, CVE-2025-37875, CVE-2025-37927, CVE-2025-37850, CVE-2025-37839, CVE-2025-37780, CVE-2024-53128, CVE-2025-37883, CVE-2025-37740, CVE-2025-37840, CVE-2025-23150, CVE-2024-50073, CVE-2025-23158, CVE-2025-37909, CVE-2025-37789, CVE-2024-35943, CVE-2024-38540, CVE-2025-37739, CVE-2025-37985, CVE-2025-37932,…
Record
USN-7686-1
Updated
2026-11-03
OSVUSN-7703-1 No score

linux, linux-aws, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Input Device (Mouse) drivers;
  • Multiple devices driver;
  • Media drivers;
  • Network drivers;
  • PCI subsystem;
  • S/390 drivers;
  • SPI subsystem;
  • Trusted Execution Environment drivers;
  • UFS subsystem;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • Framebuffer layer;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File systems infrastructure;
  • SMB network file system;
  • Networking core;
  • L3 Master device support module;
  • TCP network protocol;
  • io_uring subsystem;
  • Process Accounting mechanism;
  • BPF subsystem;
  • Timer subsystem;
  • Workqueue subsystem;
  • Memory management;
  • Amateur Radio drivers;
  • B.A.T.M.A.N. meshing protocol;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Open vSwitch;
  • Network traffic control;
  • SOF drivers; (CVE-2025-21776, CVE-2025-21768, CVE-2025-21848, CVE-2025-21855, CVE-2025-21791, CVE-2025-21838, CVE-2025-21762, CVE-2025-21846, CVE-2025-21765, CVE-2025-21869, CVE-2025-21783, CVE-2025-21868, CVE-2025-21857, CVE-2025-21773, CVE-2024-54458, CVE-2025-21871, CVE-2025-21763, CVE-2024-58088, CVE-2025-21835, CVE-2025-21793, CVE-2025-21867, CVE-2025-21784, CVE-2025-21839, CVE-2025-21786, CVE-2025-21764, CVE-2025-21761, CVE-2025-21767, CVE-2024-58020, CVE-2025-21847, CVE-2025-21792, CVE-2025-21785, CVE-2025-21863, CVE-2025-21854, CVE-2025-21704, CVE-2024-52559, CVE-2025-21775, CVE-2025-21758, CVE-2025-21858, CVE-2025-21866, CVE-2025-21870, CVE-2024-57977, CVE-2024-54456, CVE-2025-21759, CVE-2025-21781, CVE-2025-21760, CVE-2025-21706, CVE-2024-57834, CVE-2025-21712, CVE-2025-21864, CVE-2025-21780, CVE-2025-21790, CVE-2025-21856, CVE-2025-21796, CVE-2025-21859, CVE-2025-21782, CVE-2024-58093, CVE-2025-21844, CVE-2025-21795, CVE-2025-21823, CVE-2025-21853, CVE-2025-21772, CVE-2025-21746, CVE-2025-21821, CVE-2024-58086, CVE-2025-21787, CVE-2025-21836, CVE-2025-21861, CVE-2025-21766, CVE-2025-21862, CVE-2025-21779)
Record
USN-7703-1
Updated
2026-11-02
OSVUSN-7703-2 No score

linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-gkeop, linux-ibm, linux-ibm-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Input Device (Mouse) drivers;
  • Multiple devices driver;
  • Media drivers;
  • Network drivers;
  • PCI subsystem;
  • S/390 drivers;
  • SPI subsystem;
  • Trusted Execution Environment drivers;
  • UFS subsystem;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • Framebuffer layer;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File systems infrastructure;
  • SMB network file system;
  • Networking core;
  • L3 Master device support module;
  • TCP network protocol;
  • io_uring subsystem;
  • Process Accounting mechanism;
  • BPF subsystem;
  • Timer subsystem;
  • Workqueue subsystem;
  • Memory management;
  • Amateur Radio drivers;
  • B.A.T.M.A.N. meshing protocol;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Open vSwitch;
  • Network traffic control;
  • SOF drivers; (CVE-2025-21776, CVE-2025-21768, CVE-2025-21848, CVE-2025-21855, CVE-2025-21791, CVE-2025-21838, CVE-2025-21762, CVE-2025-21846, CVE-2025-21765, CVE-2025-21869, CVE-2025-21783, CVE-2025-21868, CVE-2025-21857, CVE-2025-21773, CVE-2024-54458, CVE-2025-21871, CVE-2025-21763, CVE-2024-58088, CVE-2025-21835, CVE-2025-21793, CVE-2025-21867, CVE-2025-21784, CVE-2025-21839, CVE-2025-21786, CVE-2025-21764, CVE-2025-21761, CVE-2025-21767, CVE-2024-58020, CVE-2025-21847, CVE-2025-21792, CVE-2025-21785, CVE-2025-21863, CVE-2025-21854, CVE-2025-21704, CVE-2024-52559, CVE-2025-21775, CVE-2025-21758, CVE-2025-21858, CVE-2025-21866, CVE-2025-21870, CVE-2024-57977, CVE-2024-54456, CVE-2025-21759, CVE-2025-21781, CVE-2025-21760, CVE-2025-21706, CVE-2024-57834, CVE-2025-21712, CVE-2025-21864, CVE-2025-21780, CVE-2025-21790, CVE-2025-21856, CVE-2025-21796, CVE-2025-21859, CVE-2025-21782, CVE-2024-58093, CVE-2025-21844, CVE-2025-21795, CVE-2025-21823, CVE-2025-21853, CVE-2025-21772, CVE-2025-21746, CVE-2025-21821, CVE-2024-58086, CVE-2025-21787, CVE-2025-21836, CVE-2025-21861, CVE-2025-21766, CVE-2025-21862, CVE-2025-21779)
Record
USN-7703-2
Updated
2026-11-02
OSVUSN-7703-3 No score

linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Input Device (Mouse) drivers;
  • Multiple devices driver;
  • Media drivers;
  • Network drivers;
  • PCI subsystem;
  • S/390 drivers;
  • SPI subsystem;
  • Trusted Execution Environment drivers;
  • UFS subsystem;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • Framebuffer layer;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File systems infrastructure;
  • SMB network file system;
  • Networking core;
  • L3 Master device support module;
  • TCP network protocol;
  • io_uring subsystem;
  • Process Accounting mechanism;
  • BPF subsystem;
  • Timer subsystem;
  • Workqueue subsystem;
  • Memory management;
  • Amateur Radio drivers;
  • B.A.T.M.A.N. meshing protocol;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Open vSwitch;
  • Network traffic control;
  • SOF drivers; (CVE-2025-21776, CVE-2025-21768, CVE-2025-21848, CVE-2025-21855, CVE-2025-21791, CVE-2025-21838, CVE-2025-21762, CVE-2025-21846, CVE-2025-21765, CVE-2025-21869, CVE-2025-21783, CVE-2025-21868, CVE-2025-21857, CVE-2025-21773, CVE-2024-54458, CVE-2025-21871, CVE-2025-21763, CVE-2024-58088, CVE-2025-21835, CVE-2025-21793, CVE-2025-21867, CVE-2025-21784, CVE-2025-21839, CVE-2025-21786, CVE-2025-21764, CVE-2025-21761, CVE-2025-21767, CVE-2024-58020, CVE-2025-21847, CVE-2025-21792, CVE-2025-21785, CVE-2025-21863, CVE-2025-21854, CVE-2025-21704, CVE-2024-52559, CVE-2025-21775, CVE-2025-21758, CVE-2025-21858, CVE-2025-21866, CVE-2025-21870, CVE-2024-57977, CVE-2024-54456, CVE-2025-21759, CVE-2025-21781, CVE-2025-21760, CVE-2025-21706, CVE-2024-57834, CVE-2025-21712, CVE-2025-21864, CVE-2025-21780, CVE-2025-21790, CVE-2025-21856, CVE-2025-21796, CVE-2025-21859, CVE-2025-21782, CVE-2024-58093, CVE-2025-21844, CVE-2025-21795, CVE-2025-21823, CVE-2025-21853, CVE-2025-21772, CVE-2025-21746, CVE-2025-21821, CVE-2024-58086, CVE-2025-21787, CVE-2025-21836, CVE-2025-21861, CVE-2025-21766, CVE-2025-21862, CVE-2025-21779)
Record
USN-7703-3
Updated
2026-11-02
OSVUSN-7703-4 No score

linux-gke, linux-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Input Device (Mouse) drivers;
  • Multiple devices driver;
  • Media drivers;
  • Network drivers;
  • PCI subsystem;
  • S/390 drivers;
  • SPI subsystem;
  • Trusted Execution Environment drivers;
  • UFS subsystem;
  • USB Device Class drivers;
  • USB core drivers;
  • USB Gadget drivers;
  • Framebuffer layer;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File systems infrastructure;
  • SMB network file system;
  • Networking core;
  • L3 Master device support module;
  • TCP network protocol;
  • io_uring subsystem;
  • Process Accounting mechanism;
  • BPF subsystem;
  • Timer subsystem;
  • Workqueue subsystem;
  • Memory management;
  • Amateur Radio drivers;
  • B.A.T.M.A.N. meshing protocol;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Open vSwitch;
  • Network traffic control;
  • SOF drivers; (CVE-2025-21776, CVE-2025-21768, CVE-2025-21848, CVE-2025-21855, CVE-2025-21791, CVE-2025-21838, CVE-2025-21762, CVE-2025-21846, CVE-2025-21765, CVE-2025-21869, CVE-2025-21783, CVE-2025-21868, CVE-2025-21857, CVE-2025-21773, CVE-2024-54458, CVE-2025-21871, CVE-2025-21763, CVE-2024-58088, CVE-2025-21835, CVE-2025-21793, CVE-2025-21867, CVE-2025-21784, CVE-2025-21839, CVE-2025-21786, CVE-2025-21764, CVE-2025-21761, CVE-2025-21767, CVE-2024-58020, CVE-2025-21847, CVE-2025-21792, CVE-2025-21785, CVE-2025-21863, CVE-2025-21854, CVE-2025-21704, CVE-2024-52559, CVE-2025-21775, CVE-2025-21758, CVE-2025-21858, CVE-2025-21866, CVE-2025-21870, CVE-2024-57977, CVE-2024-54456, CVE-2025-21759, CVE-2025-21781, CVE-2025-21760, CVE-2025-21706, CVE-2024-57834, CVE-2025-21712, CVE-2025-21864, CVE-2025-21780, CVE-2025-21790, CVE-2025-21856, CVE-2025-21796, CVE-2025-21859, CVE-2025-21782, CVE-2024-58093, CVE-2025-21844, CVE-2025-21795, CVE-2025-21823, CVE-2025-21853, CVE-2025-21772, CVE-2025-21746, CVE-2025-21821, CVE-2024-58086, CVE-2025-21787, CVE-2025-21836, CVE-2025-21861, CVE-2025-21766, CVE-2025-21862, CVE-2025-21779)
Record
USN-7703-4
Updated
2026-11-02
OSVUSN-7711-1 No score

linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PA-RISC architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Bluetooth drivers;
  • Bus devices;
  • CPU frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • PCI Endpoint Test driver;
  • MTD block device drivers;
  • Network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • x86 platform drivers;
  • TI SCI PM domains driver;
  • PWM drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Samsung SoC drivers;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • File systems infrastructure;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • Proc file system;
  • SMB network file system;
  • LZO compression library;
  • Kernel stack handling interfaces;
  • Bluetooth subsystem;
  • Network traffic control;
  • SCTP protocol;
  • Digital Audio (PCM) driver;
  • Tracing infrastructure;
  • BPF subsystem;
  • Padata parallel execution mechanism;
  • Kernel command line parsing driver;
  • Memory management;
  • 802.1Q VLAN protocol;
  • CAN network layer;
  • Networking core;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Management Component Transport Protocol (MCTP);
  • Multipath TCP;
  • Netfilter;
  • Open vSwitch;
  • Phonet protocol;
  • TIPC protocol;
  • TLS protocol;
  • ALSA framework;
  • Virtio sound driver;
  • CPU Power monitoring subsystem; (CVE-2025-37992, CVE-2025-37995, CVE-2025-38075, CVE-2025-37771, CVE-2025-38051, CVE-2025-37796, CVE-2022-49168, CVE-2025-37989, CVE-2025-38072, CVE-2025-37757, CVE-2024-46742, CVE-2024-50125, CVE-2024-42322, CVE-2022-49535, CVE-2025-37756, CVE-2025-37811, CVE-2025-37805, CVE-2025-37789, CVE-2025-22027, CVE-2025-37911, CVE-2025-37770, CVE-2025-37881, CVE-2025-37875, CVE-2025-37817, CVE-2024-26686, CVE-2025-37927, CVE-2025-38043, CVE-2025-38044, CVE-2025-23156, CVE-2025-38004, CVE-2025-37983, CVE-2025-37742, CVE-2025-23150, CVE-2025-23146, CVE-2025-21839, CVE-2025-37749, CVE-2024-50258, CVE-2025-37812, CVE-2025-37969, CVE-2025-37758, CVE-2024-27402, CVE-2025-37767, CVE-2025-37970, CVE-2025-23151, CVE-2025-37790, CVE-2025-37949, CVE-2024-38540, CVE-2025-37787, CVE-2025-37741, CVE-2025-37844, CVE-2025-37930, CVE-2024-46774, CVE-2025-37892, CVE-2025-37839, CVE-2025-37766, CVE-2025-37819, CVE-2025-37913, CVE-2025-37808, CVE-2025-37998, CVE-2024-56751, CVE-2025-21853, CVE-2024-36908, CVE-2025-37967, CVE-2025-38052, CVE-2025-37985, CVE-2025-37883, CVE-2025-37740, CVE-2025-37991, CVE-2025-38094, CVE-2025-23144, CVE-2024-50280, CVE-2025-37859, CVE-2024-50073, CVE-2025-23157, CVE-2025-37840, CVE-2025-38068, CVE-2025-37738, CVE-2025-23145, CVE-2025-37824, CVE-2025-38024, CVE-2025-38023, CVE-2025-38003, CVE-2025-38079, CVE-2025-37794, CVE-2025-37810, CVE-2025-37851, CVE-2024-53203, CVE-2024-35943, CVE-2025-23161, CVE-2025-37990, CVE-2024-35790, CVE-2024-50272, CVE-2024-35867,…
Record
USN-7711-1
Updated
2026-11-03
OSVUSN-7712-1 No score

linux-azure-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PA-RISC architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Bluetooth drivers;
  • Bus devices;
  • CPU frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • PCI Endpoint Test driver;
  • MTD block device drivers;
  • Network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • x86 platform drivers;
  • TI SCI PM domains driver;
  • PWM drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Samsung SoC drivers;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • File systems infrastructure;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • Proc file system;
  • SMB network file system;
  • LZO compression library;
  • Kernel stack handling interfaces;
  • Bluetooth subsystem;
  • Network traffic control;
  • SCTP protocol;
  • Digital Audio (PCM) driver;
  • Tracing infrastructure;
  • BPF subsystem;
  • Padata parallel execution mechanism;
  • Kernel command line parsing driver;
  • Memory management;
  • 802.1Q VLAN protocol;
  • CAN network layer;
  • Networking core;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Management Component Transport Protocol (MCTP);
  • Multipath TCP;
  • Netfilter;
  • Open vSwitch;
  • Phonet protocol;
  • TIPC protocol;
  • TLS protocol;
  • ALSA framework;
  • Virtio sound driver;
  • CPU Power monitoring subsystem; (CVE-2025-37766, CVE-2025-38044, CVE-2025-38003, CVE-2025-37990, CVE-2024-56751, CVE-2022-21546, CVE-2025-23148, CVE-2025-21853, CVE-2025-38043, CVE-2025-37844, CVE-2025-38048, CVE-2025-38034, CVE-2025-38072, CVE-2025-38177, CVE-2025-38005, CVE-2025-38068, CVE-2025-37765, CVE-2025-37808, CVE-2025-37787, CVE-2025-23145, CVE-2025-37756, CVE-2024-50272, CVE-2025-37857, CVE-2025-37819, CVE-2025-37789, CVE-2024-36908, CVE-2025-37812, CVE-2024-53128, CVE-2025-37788, CVE-2025-37892, CVE-2025-38001, CVE-2025-37773, CVE-2024-46816, CVE-2025-37823, CVE-2025-37838, CVE-2025-38066, CVE-2025-37771, CVE-2024-38541, CVE-2025-37927, CVE-2025-23142, CVE-2025-22062, CVE-2025-37811, CVE-2025-37969, CVE-2024-27402, CVE-2025-37911, CVE-2025-37740, CVE-2025-37913, CVE-2025-37810, CVE-2025-38094, CVE-2024-46787, CVE-2025-37749, CVE-2025-37983, CVE-2025-23157, CVE-2025-37790, CVE-2025-37739, CVE-2025-37995, CVE-2024-46774, CVE-2025-37758, CVE-2025-38065, CVE-2025-37909, CVE-2025-38009, CVE-2025-37915, CVE-2025-37932, CVE-2022-48893, CVE-2024-50125, CVE-2025-37841, CVE-2024-50047, CVE-2025-23140, CVE-2025-37780, CVE-2025-23156, CVE-2024-50280, CVE-2025-37840, CVE-2024-50258, CVE-2025-37796, CVE-2024-49960, CVE-2025-37829, CVE-2025-38024, CVE-2024-46751, CVE-2025-37985, CVE-2025-37989, CVE-2025-37994, CVE-2025-37741, CVE-2025-23151, CVE-2025-38058, CVE-2024-35790, CVE-2025-37871, CVE-2025-38031, CVE-2025-37940, CVE-2025-37930, CVE-2025-23150, CVE-2025-37805, CVE-2025-37738, CVE-2025-37850,…
Record
USN-7712-1
Updated
2026-11-03
OSVUSN-7712-2 No score

linux-azure-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PA-RISC architecture;
  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Serial ATA and Parallel ATA drivers;
  • Bluetooth drivers;
  • Bus devices;
  • CPU frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • GPU drivers;
  • HID subsystem;
  • HSI subsystem;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • PCI Endpoint Test driver;
  • MTD block device drivers;
  • Network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • Device tree and open firmware driver;
  • PCI subsystem;
  • x86 platform drivers;
  • TI SCI PM domains driver;
  • PWM drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Samsung SoC drivers;
  • TCM subsystem;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • File systems infrastructure;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • Proc file system;
  • SMB network file system;
  • LZO compression library;
  • Kernel stack handling interfaces;
  • Bluetooth subsystem;
  • Network traffic control;
  • SCTP protocol;
  • Digital Audio (PCM) driver;
  • Tracing infrastructure;
  • BPF subsystem;
  • Padata parallel execution mechanism;
  • Kernel command line parsing driver;
  • Memory management;
  • 802.1Q VLAN protocol;
  • CAN network layer;
  • Networking core;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Management Component Transport Protocol (MCTP);
  • Multipath TCP;
  • Netfilter;
  • Open vSwitch;
  • Phonet protocol;
  • TIPC protocol;
  • TLS protocol;
  • ALSA framework;
  • Virtio sound driver;
  • CPU Power monitoring subsystem; (CVE-2025-37766, CVE-2025-38044, CVE-2025-38003, CVE-2025-37990, CVE-2024-56751, CVE-2022-21546, CVE-2025-23148, CVE-2025-21853, CVE-2025-38043, CVE-2025-37844, CVE-2025-38048, CVE-2025-38034, CVE-2025-38072, CVE-2025-38177, CVE-2025-38005, CVE-2025-38068, CVE-2025-37765, CVE-2025-37808, CVE-2025-37787, CVE-2025-23145, CVE-2025-37756, CVE-2024-50272, CVE-2025-37857, CVE-2025-37819, CVE-2025-37789, CVE-2024-36908, CVE-2025-37812, CVE-2024-53128, CVE-2025-37788, CVE-2025-37892, CVE-2025-38001, CVE-2025-37773, CVE-2024-46816, CVE-2025-37823, CVE-2025-37838, CVE-2025-38066, CVE-2025-37771, CVE-2024-38541, CVE-2025-37927, CVE-2025-23142, CVE-2025-22062, CVE-2025-37811, CVE-2025-37969, CVE-2024-27402, CVE-2025-37911, CVE-2025-37740, CVE-2025-37913, CVE-2025-37810, CVE-2025-38094, CVE-2024-46787, CVE-2025-37749, CVE-2025-37983, CVE-2025-23157, CVE-2025-37790, CVE-2025-37739, CVE-2025-37995, CVE-2024-46774, CVE-2025-37758, CVE-2025-38065, CVE-2025-37909, CVE-2025-38009, CVE-2025-37915, CVE-2025-37932, CVE-2022-48893, CVE-2024-50125, CVE-2025-37841, CVE-2024-50047, CVE-2025-23140, CVE-2025-37780, CVE-2025-23156, CVE-2024-50280, CVE-2025-37840, CVE-2024-50258, CVE-2025-37796, CVE-2024-49960, CVE-2025-37829, CVE-2025-38024, CVE-2024-46751, CVE-2025-37985, CVE-2025-37989, CVE-2025-37994, CVE-2025-37741, CVE-2025-23151, CVE-2025-38058, CVE-2024-35790, CVE-2025-37871, CVE-2025-38031, CVE-2025-37940, CVE-2025-37930, CVE-2025-23150, CVE-2025-37805, CVE-2025-37738, CVE-2025-37850,…
Record
USN-7712-2
Updated
2026-11-03

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-cross-headers
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-doc
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-headers
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules-extra-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel
Azure Linux:3
 before 6.6.82.1-1
6.6.82.1-1
kernel
Azure Linux:2
 before 5.15.182.1-1
5.15.182.1-1
linux-lts
Alpaquita:23
 6.1.134-r0 up to 6.1.140-r0
6.1.140-r0
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-abi-stablelists
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-core
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-cross-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-debug-uki-virt-addons
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-doc
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-rt
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-rt-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-rt-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-rt-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-rt-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-rt-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-rt-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-rt-64k-debug-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
kernel-rt-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 122 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els6
5.14.0-570.62.1.el9_6.tuxcare.1.els6
Kernel
Linux
 5.5.0 up to 5.10.237, 5.11.0 up to 5.15.181, 5.16.0 up to 6.1.135, 6.2.0 up to 6.6.80, 6.7.0 up to 6.12.17, 6.13.0 up to 6.13.5
5.10.2375.15.1816.1.1356.6.806.12.176.13.5
linux
Debian:12
 before 6.1.135-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 32 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.135-1
linux
Debian:13
 before 6.12.17-1
6.12.17-1
linux
Debian:14
 before 6.12.17-1
6.12.17-1
linux
Debian:11
From an advisory covering 242 CVEs
 before 5.10.237-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 40 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.234-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.237-1
linux-6.1
Debian:11
From an advisory covering 261 CVEs
 before 6.1.137-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u16.1.128-1~deb11u16.1.129-1~deb11u1
6.1.137-1~deb11u1
linux
Debian:12
From an advisory covering 51 CVEs
 before 6.1.135-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 32 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.135-1
kernel
Mageia:9
From an advisory covering 18 CVEs
 before 6.6.83-1.mga9
6.6.83-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 18 CVEs
 before 7.0.24-68.mga9
7.0.24-68.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 18 CVEs
 before 3.24-74.mga9
3.24-74.mga9
kernel-linus
Mageia:9
From an advisory covering 18 CVEs
 before 6.6.83-1.mga9
6.6.83-1.mga9
kernel
openEuler:24.03-LTS
From an advisory covering 59 CVEs
 before 6.6.0-84.0.0.78.oe2403
6.6.0-84.0.0.78.oe2403
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 47 CVEs
 before 6.6.0-84.0.0.89.oe2403sp1
6.6.0-84.0.0.89.oe2403sp1
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-doc
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-tools-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
libperf-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
perf
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
perf-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
python3-perf
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
python3-perf-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
rtla
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
rv
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-abi-stablelists
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-uki-virt
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel
Rocky Linux:10
From an advisory covering 88 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel
Rocky Linux:9
From an advisory covering 111 CVEs
 before 0:5.14.0-611.5.1.el9_7
0:5.14.0-611.5.1.el9_7
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1.150600.12.22.1
6.4.0-150600.23.50.1.150600.12.22.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-livepatch-SLE15-SP6_Update_11
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 170 CVEs
 before 1-150600.13.3.1
1-150600.13.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1.150600.12.22.1
6.4.0-150600.23.50.1.150600.12.22.1
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 170 CVEs
 before 6.4.0-150600.23.50.1
6.4.0-150600.23.50.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.8.37.1
6.4.0-150600.8.37.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.8.37.1
6.4.0-150600.8.37.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 170 CVEs
 before 6.4.0-150600.8.37.1
6.4.0-150600.8.37.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 170 CVEs
 before 6.4.0-150600.8.37.1
6.4.0-150600.8.37.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 170 CVEs
 before 6.4.0-150600.8.37.1
6.4.0-150600.8.37.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 170 CVEs
 before 6.4.0-150600.8.37.1
6.4.0-150600.8.37.1
kernel-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 433 CVEs
 before 6.4.0-15061.21.coco15sp6.1
6.4.0-15061.21.coco15sp6.1
kernel-coco_debug
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 433 CVEs
 before 6.4.0-15061.21.coco15sp6.1
6.4.0-15061.21.coco15sp6.1
kernel-source-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 433 CVEs
 before 6.4.0-15061.21.coco15sp6.1
6.4.0-15061.21.coco15sp6.1
kernel-syms-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 433 CVEs
 before 6.4.0-15061.21.coco15sp6.1
6.4.0-15061.21.coco15sp6.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1.150700.17.2.1
6.4.0-150700.53.3.1.150700.17.2.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-livepatch-SLE15-SP7_Update_1
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 321 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-livepatch-SLE15-SP6-RT_Update_11
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 339 CVEs
 before 1-150600.1.3.2
1-150600.1.3.2
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 329 CVEs
 before 6.4.0-150700.20.3.1
6.4.0-150700.20.3.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 329 CVEs
 before 6.4.0-150700.20.3.1
6.4.0-150700.20.3.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 329 CVEs
 before 6.4.0-150700.20.3.1
6.4.0-150700.20.3.1
kernel-livepatch-SLE15-SP7-RT_Update_1
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 119 CVEs
 before 1-150700.1.3.1
1-150700.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 119 CVEs
 before 6.4.0-150700.7.3.1
6.4.0-150700.7.3.1
kernel-rt_debug
SUSE:Real Time Module 15 SP7
From an advisory covering 119 CVEs
 before 6.4.0-150700.7.3.1
6.4.0-150700.7.3.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 119 CVEs
 before 6.4.0-150700.7.3.1
6.4.0-150700.7.3.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 119 CVEs
 before 6.4.0-150700.7.3.1
6.4.0-150700.7.3.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 96 CVEs
 before 6.4.0-29.1
6.4.0-29.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 96 CVEs
 before 6.4.0-29.1.21.7
6.4.0-29.1.21.7
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 96 CVEs
 before 6.4.0-29.1
6.4.0-29.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1088.95~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1088.95~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1094.103~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1094.103~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1087.96~20.04.2, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1087.96~20.04.2
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-144.157~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-144.157~20.04.1
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1080.83~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 33 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.1
5.15.0-1080.83~20.04.1
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-intel-iotg-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1083.89~20.04.1, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1
Show 41 moreShow less
5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.1
5.15.0-1083.89~20.04.1
linux-lowlatency-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-144.157~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-144.157~20.04.1
linux-nvidia-tegra-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1041.41~20.04.1, plus listed versions
5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1
Show 12 moreShow less
5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.1
5.15.0-1041.41~20.04.1
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1085.91~20.04.3, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1
5.15.0-1085.91~20.04.3
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedCVE List, EUVD, NVD
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-21853 is a medium vulnerability (CVSS 5.5) in Linux, published March 12, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in kernel 6.6.82.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 567 package rows, 82 versions, 3,306 references and the rest of 31 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 2 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open