Every CVE Search/ Get API key

CVE-2025-37752

net_sched: sch_sfq: move the limit validation

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

net_sched: sch_sfq: move the limit validation

It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are changed.

Move the check at the end of the configuration update process to also catch scenarios where the limit is indirectly updated, for example with the following configurations:

tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 depth 1 tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 divisor 1

This fixes the following syzkaller reported crash:

------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in net/sched/sch_sfq.c:203:6 index 65535 is out of range for type 'struct sfq_head[128]' CPU: 1 UID: 0 PID: 3037 Comm: syz.2.16 Not tainted 6.14.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x201/0x300 lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:231 [inline] __ubsan_handle_out_of_bounds+0xf5/0x120 lib/ubsan.c:429 sfq_link net/sched/sch_sfq.c:203 [inline] sfq_dec+0x53c/0x610 net/sched/sch_sfq.c:231 sfq_dequeue+0x34e/0x8c0 net/sched/sch_sfq.c:493 sfq_reset+0x17/0x60 net/sched/sch_sfq.c:518 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 tbf_reset+0x41/0x110 net/sched/sch_tbf.c:339 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 dev_reset_queue+0x100/0x1b0 net/sched/sch_generic.c:1311 netdev_for_each_tx_queue include/linux/netdevice.h:2590 [inline] dev_deactivate_many+0x7e5/0xe70 net/sched/sch_generic.c:1375

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.30%Up 0.3 points since May 2, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.8

net_sched: sch_sfq: move the limit validation

In the Linux kernel, the following vulnerability has been resolved:

net_sched: sch_sfq: move the limit validation

It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are changed.

Move the check at the end of the configuration update process to also catch scenarios where the limit is indirectly updated, for example with the following configurations:

tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 depth 1 tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 divisor 1

This fixes the following syzkaller reported crash:

------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in net/sched/sch_sfq.c:203:6 index 65535 is out of range for type 'struct sfq_head[128]' CPU: 1 UID: 0 PID: 3037 Comm: syz.2.16 Not tainted 6.14.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x201/0x300 lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:231 [inline] __ubsan_handle_out_of_bounds+0xf5/0x120 lib/ubsan.c:429 sfq_link net/sched/sch_sfq.c:203 [inline] sfq_dec+0x53c/0x610 net/sched/sch_sfq.c:231 sfq_dequeue+0x34e/0x8c0 net/sched/sch_sfq.c:493 sfq_reset+0x17/0x60 net/sched/sch_sfq.c:518 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 tbf_reset+0x41/0x110 net/sched/sch_tbf.c:339 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 dev_reset_queue+0x100/0x1b0 net/sched/sch_generic.c:1311 netdev_for_each_tx_queue include/linux/netdevice.h:2590 [inline] dev_deactivate_many+0x7e5/0xe70 net/sched/sch_generic.c:1375

Record
CVE-2025-37752
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2025-13064 7.8

In the Linux kernel, the following vulnerability has been resolved:

net_sched: sch_sfq: move the limit validation

It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are changed.

Move the check at the end of the configuration update process to also catch scenarios where the limit is indirectly updated, for example with the following configurations:

tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 depth 1 tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 divisor 1

This fixes the following syzkaller reported crash:

------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in net/sched/sch_sfq.c:203:6 index 65535 is out of range for type 'struct sfq_head[128]' CPU: 1 UID: 0 PID: 3037 Comm: syz.2.16 Not tainted 6.14.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x201/0x300 lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:231 [inline] __ubsan_handle_out_of_bounds+0xf5/0x120 lib/ubsan.c:429 sfq_link net/sched/sch_sfq.c:203 [inline] sfq_dec+0x53c/0x610 net/sched/sch_sfq.c:231 sfq_dequeue+0x34e/0x8c0 net/sched/sch_sfq.c:493 sfq_reset+0x17/0x60 net/sched/sch_sfq.c:518 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 tbf_reset+0x41/0x110 net/sched/sch_tbf.c:339 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 dev_reset_queue+0x100/0x1b0 net/sched/sch_generic.c:1311 netdev_for_each_tx_queue include/linux/netdevice.h:2590 [inline] dev_deactivate_many+0x7e5/0xe70 net/sched/sch_generic.c:1375

Record
EUVD-2025-13064
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-39cv-hx7c-vjcq 7.8

In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the...

In the Linux kernel, the following vulnerability has been resolved:

net_sched: sch_sfq: move the limit validation

It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are changed.

Move the check at the end of the configuration update process to also catch scenarios where the limit is indirectly updated, for example with the following configurations:

tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 depth 1 tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 divisor 1

This fixes the following syzkaller reported crash:

------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in net/sched/sch_sfq.c:203:6 index 65535 is out of range for type 'struct sfq_head[128]' CPU: 1 UID: 0 PID: 3037 Comm: syz.2.16 Not tainted 6.14.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x201/0x300 lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:231 [inline] __ubsan_handle_out_of_bounds+0xf5/0x120 lib/ubsan.c:429 sfq_link net/sched/sch_sfq.c:203 [inline] sfq_dec+0x53c/0x610 net/sched/sch_sfq.c:231 sfq_dequeue+0x34e/0x8c0 net/sched/sch_sfq.c:493 sfq_reset+0x17/0x60 net/sched/sch_sfq.c:518 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 tbf_reset+0x41/0x110 net/sched/sch_tbf.c:339 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 dev_reset_queue+0x100/0x1b0 net/sched/sch_generic.c:1311 netdev_for_each_tx_queue include/linux/netdevice.h:2590 [inline] dev_deactivate_many+0x7e5/0xe70 net/sched/sch_generic.c:1375

Record
GHSA-39cv-hx7c-vjcq
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-129
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

net_sched: sch_sfq: move the limit validation

It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are changed.

Move the check at the end of the configuration update process to also catch scenarios where the limit is indirectly updated, for example with the following configurations:

tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 depth 1 tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 divisor 1

This fixes the following syzkaller reported crash:

------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in net/sched/sch_sfq.c:203:6 index 65535 is out of range for type 'struct sfq_head[128]' CPU: 1 UID: 0 PID: 3037 Comm: syz.2.16 Not tainted 6.14.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x201/0x300 lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:231 [inline] __ubsan_handle_out_of_bounds+0xf5/0x120 lib/ubsan.c:429 sfq_link net/sched/sch_sfq.c:203 [inline] sfq_dec+0x53c/0x610 net/sched/sch_sfq.c:231 sfq_dequeue+0x34e/0x8c0 net/sched/sch_sfq.c:493 sfq_reset+0x17/0x60 net/sched/sch_sfq.c:518 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 tbf_reset+0x41/0x110 net/sched/sch_tbf.c:339 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 dev_reset_queue+0x100/0x1b0 net/sched/sch_generic.c:1311 netdev_for_each_tx_queue include/linux/netdevice.h:2590 [inline] dev_deactivate_many+0x7e5/0xe70 net/sched/sch_generic.c:1375

Record
CVE-2025-37752
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-129
Updated
2026-11-02
OSVBELL-CVE-2025-37752 7.8
Record
BELL-CVE-2025-37752
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

net_sched: sch_sfq: move the limit validation

In the Linux kernel, the following vulnerability has been resolved:

net_sched: sch_sfq: move the limit validation

It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are changed.

Move the check at the end of the configuration update process to also catch scenarios where the limit is indirectly updated, for example with the following configurations:

tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 depth 1 tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 divisor 1

This fixes the following syzkaller reported crash:

------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in net/sched/sch_sfq.c:203:6 index 65535 is out of range for type 'struct sfq_head[128]' CPU: 1 UID: 0 PID: 3037 Comm: syz.2.16 Not tainted 6.14.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x201/0x300 lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:231 [inline] __ubsan_handle_out_of_bounds+0xf5/0x120 lib/ubsan.c:429 sfq_link net/sched/sch_sfq.c:203 [inline] sfq_dec+0x53c/0x610 net/sched/sch_sfq.c:231 sfq_dequeue+0x34e/0x8c0 net/sched/sch_sfq.c:493 sfq_reset+0x17/0x60 net/sched/sch_sfq.c:518 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 tbf_reset+0x41/0x110 net/sched/sch_tbf.c:339 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 dev_reset_queue+0x100/0x1b0 net/sched/sch_generic.c:1311 netdev_for_each_tx_queue include/linux/netdevice.h:2590 [inline] dev_deactivate_many+0x7e5/0xe70 net/sched/sch_generic.c:1375

Record
CVE-2025-37752
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 47 moreShow less
OSVDEBIAN-CVE-2025-37752 7.8

In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are changed. Move the check at the end of the configuration update process to also catch scenarios where the limit is indirectly updated, for example with the following configurations: tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 depth 1 tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 divisor 1 This fixes the following syzkaller reported crash: ------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in net/sched/sch_sfq.c:203:6 index 65535 is out of range for type 'struct sfq_head[128]' CPU: 1 UID: 0 PID: 3037 Comm: syz.2.16 Not tainted 6.14.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x201/0x300 lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:231 [inline] __ubsan_handle_out_of_bounds+0xf5/0x120 lib/ubsan.c:429 sfq_link net/sched/sch_sfq.c:203 [inline] sfq_dec+0x53c/0x610 net/sched/sch_sfq.c:231 sfq_dequeue+0x34e/0x8c0 net/sched/sch_sfq.c:493 sfq_reset+0x17/0x60 net/sched/sch_sfq.c:518 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 tbf_reset+0x41/0x110 net/sched/sch_tbf.c:339 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 dev_reset_queue+0x100/0x1b0 net/sched/sch_generic.c:1311 netdev_for_each_tx_queue include/linux/netdevice.h:2590 [inline] dev_deactivate_many+0x7e5/0xe70 net/sched/sch_generic.c:1375

Record
DEBIAN-CVE-2025-37752
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1569 5.5

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Check sb_bsize_shift after reading superblock

Fuzzers like to scribble over sb_bsize_shift but in reality it's very unlikely that this field would be corrupted on its own. Nevertheless it should be checked to avoid the possibility of messy mount errors due to bad calculations. It's always a fixed value based on the block size so we can just check that it's the expected value.

Tested with:

mkfs.gfs2 -O -p lock_nolock /dev/vdb
for i in 0 -1 64 65 32 33; do
    gfs2_edit -p sb field sb_bsize_shift $i /dev/vdb
    mount /dev/vdb /mnt/test &amp;&amp; umount /mnt/test
done

Before this patch we get a withdraw after

[ 76.413681] gfs2: fsid=loop0.0: fatal: invalid metadata block [ 76.413681] bh = 19 (type: exp=5, found=4) [ 76.413681] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 492

and with UBSAN configured we also get complaints like

[ 76.373395] UBSAN: shift-out-of-bounds in fs/gfs2/ops_fstype.c:295:19 [ 76.373815] shift exponent 4294967287 is too large for 64-bit type 'long unsigned int'

After the patch, these complaints don't appear, mount fails immediately and we get an explanation in dmesg.(CVE-2022-49769)

In the Linux kernel, the following vulnerability has been resolved:

misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()

struct vmci_event_qp allocated by qp_notify_peer() contains padding, which may carry uninitialized data to the userspace, as observed by KMSAN:

BUG: KMSAN: kernel-infoleak in instrument_copy_to_user ./include/linux/instrumented.h:121 instrument_copy_to_user ./include/linux/instrumented.h:121 _copy_to_user+0x5f/0xb0 lib/usercopy.c:33 copy_to_user ./include/linux/uaccess.h:169 vmci_host_do_receive_datagram drivers/misc/vmw_vmci/vmci_host.c:431 vmci_host_unlocked_ioctl+0x33d/0x43d0 drivers/misc/vmw_vmci/vmci_host.c:925 vfs_ioctl fs/ioctl.c:51 ...

Uninit was stored to memory at: kmemdup+0x74/0xb0 mm/util.c:131 dg_dispatch_as_host drivers/misc/vmw_vmci/vmci_datagram.c:271 vmci_datagram_dispatch+0x4f8/0xfc0 drivers/misc/vmw_vmci/vmci_datagram.c:339 qp_notify_peer+0x19a/0x290 drivers/misc/vmw_vmci/vmci_queue_pair.c:1479 qp_broker_attach drivers/misc/vmw_vmci/vmci_queue_pair.c:1662 qp_broker_alloc+0x2977/0x2f30 drivers/misc/vmw_vmci/vmci_queue_pair.c:1750 vmci_qp_broker_alloc+0x96/0xd0 drivers/misc/vmw_vmci/vmci_queue_pair.c:1940 vmci_host_do_alloc_queuepair drivers/misc/vmw_vmci/vmci_host.c:488 vmci_host_unlocked_ioctl+0x24fd/0x43d0 drivers/misc/vmw_vmci/vmci_host.c:927 ...

Local variable ev created at: qp_notify_peer+0x54/0x290 drivers/misc/vmw_vmci/vmci_queue_pair.c:1456 qp_broker_attach drivers/misc/vmw_vmci/vmci_queue_pair.c:1662 qp_broker_alloc+0x2977/0x2f30 drivers/misc/vmw_vmci/vmci_queue_pair.c:1750

Bytes 28-31 of 48 are uninitialized Memory access of size 48 starts at ffff888035155e00 Data copied to user address 0000000020000100

Use memset() to prevent the infoleaks.

Also speculatively fix qp_notify_peer_local(), which may suffer from the same problem.(CVE-2022-49788)

In the Linux kernel, the following vulnerability has been resolved:

HID: hyperv: fix possible memory leak in mousevsc_probe()

If hid_add_device() returns error, it should call hid_destroy_device() to free hid_dev which is allocated in hid_allocate_device().(CVE-2022-49874)

In the Linux kernel, the following vulnerability has been resolved:

net_sched: sch_sfq: move the limit validation

It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are changed.

Move the check at the end of the configuration update process to also catch scenarios where the limit is indirectly updated, for example with the following configurations:

tc…

Record
OESA-2025-1569
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-2120 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

gtp: Destroy device along with udp socket's netns dismantle.

gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created.

Even when src_net is removed, the device stays alive on dev_net(dev). Then, removing src_net triggers the splat below. [0]

In this example, gtp0 is created in ns2, and the udp socket is created in ns1.

ip netns add ns1 ip netns add ns2 ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn ip netns del ns1

Let's link the device to the socket's netns instead.

Now, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove all gtp devices in the netns.

[0]: ref_tracker: net notrefcnt@000000003d6e7d05 has 1/2 users at sk_alloc (./include/net/net_namespace.h:345 net/core/sock.c:2236) inet_create (net/ipv4/af_inet.c:326 net/ipv4/af_inet.c:252) __sock_create (net/socket.c:1558) udp_sock_create4 (net/ipv4/udp_tunnel_core.c:18) gtp_create_sock (./include/net/udp_tunnel.h:59 drivers/net/gtp.c:1423) gtp_create_sockets (drivers/net/gtp.c:1447) gtp_newlink (drivers/net/gtp.c:1507) rtnl_newlink (net/core/rtnetlink.c:3786 net/core/rtnetlink.c:3897 net/core/rtnetlink.c:4012) rtnetlink_rcv_msg (net/core/rtnetlink.c:6922) netlink_rcv_skb (net/netlink/af_netlink.c:2542) netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1347) netlink_sendmsg (net/netlink/af_netlink.c:1891) ____sys_sendmsg (net/socket.c:711 net/socket.c:726 net/socket.c:2583) ___sys_sendmsg (net/socket.c:2639) __sys_sendmsg (net/socket.c:2669) do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)

WARNING: CPU: 1 PID: 60 at lib/ref_tracker.c:179 ref_tracker_dir_exit (lib/ref_tracker.c:179) Modules linked in: CPU: 1 UID: 0 PID: 60 Comm: kworker/u16:2 Not tainted 6.13.0-rc5-00147-g4c1224501e9d #5 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 Workqueue: netns cleanup_net RIP: 0010:ref_tracker_dir_exit (lib/ref_tracker.c:179) Code: 00 00 00 fc ff df 4d 8b 26 49 bd 00 01 00 00 00 00 ad de 4c 39 f5 0f 85 df 00 00 00 48 8b 74 24 08 48 89 df e8 a5 cc 12 02 90 <0f> 0b 90 48 8d 6b 44 be 04 00 00 00 48 89 ef e8 80 de 67 ff 48 89 RSP: 0018:ff11000009a07b60 EFLAGS: 00010286 RAX: 0000000000002bd3 RBX: ff1100000f4e1aa0 RCX: 1ffffffff0e40ac6 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8423ee3c RBP: ff1100000f4e1af0 R08: 0000000000000001 R09: fffffbfff0e395ae R10: 0000000000000001 R11: 0000000000036001 R12: ff1100000f4e1af0 R13: dead000000000100 R14: ff1100000f4e1af0 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ff1100006ce80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9b2464bd98 CR3: 0000000005286005 CR4: 0000000000771ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> ? __warn (kernel/panic.c:748) ? ref_tracker_dir_exit (lib/ref_tracker.c:179) ? report_bug (lib/bug.c:201 lib/bug.c:219) ? handle_bug (arch/x86/kernel/traps.c:285) ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:97 ./arch/x86/include/asm/irqflags.h:155 ./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) ? ref_tracker_dir_exit (lib/ref_tracker.c:179) ? __pfx_ref_tracker_dir_exit (lib/ref_tracker.c:158) ? kfree (mm/slub.c:4613 mm/slub.c:4761) net_free (net/core/net_namespace.c:476 net/core/net_namespace.c:467) cleanup_net (net/core/net_namespace.c:664 (discriminator 3)) process_one_work…

Record
OESA-2025-2120
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2121 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

gtp: Destroy device along with udp socket's netns dismantle.

gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created.

Even when src_net is removed, the device stays alive on dev_net(dev). Then, removing src_net triggers the splat below. [0]

In this example, gtp0 is created in ns2, and the udp socket is created in ns1.

ip netns add ns1 ip netns add ns2 ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn ip netns del ns1

Let's link the device to the socket's netns instead.

Now, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove all gtp devices in the netns.

[0]: ref_tracker: net notrefcnt@000000003d6e7d05 has 1/2 users at sk_alloc (./include/net/net_namespace.h:345 net/core/sock.c:2236) inet_create (net/ipv4/af_inet.c:326 net/ipv4/af_inet.c:252) __sock_create (net/socket.c:1558) udp_sock_create4 (net/ipv4/udp_tunnel_core.c:18) gtp_create_sock (./include/net/udp_tunnel.h:59 drivers/net/gtp.c:1423) gtp_create_sockets (drivers/net/gtp.c:1447) gtp_newlink (drivers/net/gtp.c:1507) rtnl_newlink (net/core/rtnetlink.c:3786 net/core/rtnetlink.c:3897 net/core/rtnetlink.c:4012) rtnetlink_rcv_msg (net/core/rtnetlink.c:6922) netlink_rcv_skb (net/netlink/af_netlink.c:2542) netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1347) netlink_sendmsg (net/netlink/af_netlink.c:1891) ____sys_sendmsg (net/socket.c:711 net/socket.c:726 net/socket.c:2583) ___sys_sendmsg (net/socket.c:2639) __sys_sendmsg (net/socket.c:2669) do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)

WARNING: CPU: 1 PID: 60 at lib/ref_tracker.c:179 ref_tracker_dir_exit (lib/ref_tracker.c:179) Modules linked in: CPU: 1 UID: 0 PID: 60 Comm: kworker/u16:2 Not tainted 6.13.0-rc5-00147-g4c1224501e9d #5 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 Workqueue: netns cleanup_net RIP: 0010:ref_tracker_dir_exit (lib/ref_tracker.c:179) Code: 00 00 00 fc ff df 4d 8b 26 49 bd 00 01 00 00 00 00 ad de 4c 39 f5 0f 85 df 00 00 00 48 8b 74 24 08 48 89 df e8 a5 cc 12 02 90 <0f> 0b 90 48 8d 6b 44 be 04 00 00 00 48 89 ef e8 80 de 67 ff 48 89 RSP: 0018:ff11000009a07b60 EFLAGS: 00010286 RAX: 0000000000002bd3 RBX: ff1100000f4e1aa0 RCX: 1ffffffff0e40ac6 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8423ee3c RBP: ff1100000f4e1af0 R08: 0000000000000001 R09: fffffbfff0e395ae R10: 0000000000000001 R11: 0000000000036001 R12: ff1100000f4e1af0 R13: dead000000000100 R14: ff1100000f4e1af0 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ff1100006ce80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9b2464bd98 CR3: 0000000005286005 CR4: 0000000000771ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> ? __warn (kernel/panic.c:748) ? ref_tracker_dir_exit (lib/ref_tracker.c:179) ? report_bug (lib/bug.c:201 lib/bug.c:219) ? handle_bug (arch/x86/kernel/traps.c:285) ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:97 ./arch/x86/include/asm/irqflags.h:155 ./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) ? ref_tracker_dir_exit (lib/ref_tracker.c:179) ? __pfx_ref_tracker_dir_exit (lib/ref_tracker.c:158) ? kfree (mm/slub.c:4613 mm/slub.c:4761) net_free (net/core/net_namespace.c:476 net/core/net_namespace.c:467) cleanup_net (net/core/net_namespace.c:664 (discriminator 3)) process_one_work…

Record
OESA-2025-2121
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2122 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

gtp: Destroy device along with udp socket's netns dismantle.

gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created.

Even when src_net is removed, the device stays alive on dev_net(dev). Then, removing src_net triggers the splat below. [0]

In this example, gtp0 is created in ns2, and the udp socket is created in ns1.

ip netns add ns1 ip netns add ns2 ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn ip netns del ns1

Let's link the device to the socket's netns instead.

Now, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove all gtp devices in the netns.

[0]: ref_tracker: net notrefcnt@000000003d6e7d05 has 1/2 users at sk_alloc (./include/net/net_namespace.h:345 net/core/sock.c:2236) inet_create (net/ipv4/af_inet.c:326 net/ipv4/af_inet.c:252) __sock_create (net/socket.c:1558) udp_sock_create4 (net/ipv4/udp_tunnel_core.c:18) gtp_create_sock (./include/net/udp_tunnel.h:59 drivers/net/gtp.c:1423) gtp_create_sockets (drivers/net/gtp.c:1447) gtp_newlink (drivers/net/gtp.c:1507) rtnl_newlink (net/core/rtnetlink.c:3786 net/core/rtnetlink.c:3897 net/core/rtnetlink.c:4012) rtnetlink_rcv_msg (net/core/rtnetlink.c:6922) netlink_rcv_skb (net/netlink/af_netlink.c:2542) netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1347) netlink_sendmsg (net/netlink/af_netlink.c:1891) ____sys_sendmsg (net/socket.c:711 net/socket.c:726 net/socket.c:2583) ___sys_sendmsg (net/socket.c:2639) __sys_sendmsg (net/socket.c:2669) do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)

WARNING: CPU: 1 PID: 60 at lib/ref_tracker.c:179 ref_tracker_dir_exit (lib/ref_tracker.c:179) Modules linked in: CPU: 1 UID: 0 PID: 60 Comm: kworker/u16:2 Not tainted 6.13.0-rc5-00147-g4c1224501e9d #5 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 Workqueue: netns cleanup_net RIP: 0010:ref_tracker_dir_exit (lib/ref_tracker.c:179) Code: 00 00 00 fc ff df 4d 8b 26 49 bd 00 01 00 00 00 00 ad de 4c 39 f5 0f 85 df 00 00 00 48 8b 74 24 08 48 89 df e8 a5 cc 12 02 90 <0f> 0b 90 48 8d 6b 44 be 04 00 00 00 48 89 ef e8 80 de 67 ff 48 89 RSP: 0018:ff11000009a07b60 EFLAGS: 00010286 RAX: 0000000000002bd3 RBX: ff1100000f4e1aa0 RCX: 1ffffffff0e40ac6 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8423ee3c RBP: ff1100000f4e1af0 R08: 0000000000000001 R09: fffffbfff0e395ae R10: 0000000000000001 R11: 0000000000036001 R12: ff1100000f4e1af0 R13: dead000000000100 R14: ff1100000f4e1af0 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ff1100006ce80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9b2464bd98 CR3: 0000000005286005 CR4: 0000000000771ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> ? __warn (kernel/panic.c:748) ? ref_tracker_dir_exit (lib/ref_tracker.c:179) ? report_bug (lib/bug.c:201 lib/bug.c:219) ? handle_bug (arch/x86/kernel/traps.c:285) ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:97 ./arch/x86/include/asm/irqflags.h:155 ./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) ? ref_tracker_dir_exit (lib/ref_tracker.c:179) ? __pfx_ref_tracker_dir_exit (lib/ref_tracker.c:158) ? kfree (mm/slub.c:4613 mm/slub.c:4761) net_free (net/core/net_namespace.c:476 net/core/net_namespace.c:467) cleanup_net (net/core/net_namespace.c:664 (discriminator 3)) process_one_work…

Record
OESA-2025-2122
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-37752 7.8

CVE-2025-37752 in linux - Patched by Root

Root has patched CVE-2025-37752 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2025-37752
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2025-37752 7.8

CVE-2025-37752 in linux - Patched by Root

Root has patched CVE-2025-37752 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2025-37752
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2025-37752 7.8

CVE-2025-37752 in linux - Patched by Root

Root has patched CVE-2025-37752 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2025-37752
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2025-37752 7.3

In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are changed. Move the check at the end of the configuration update process to also catch scenarios where the limit is indirectly updated, for example with the following configurations: tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 depth 1 tc qdisc add dev dummy0 handle 1: root sfq limit 2 flows 1 divisor 1 This fixes the following syzkaller reported crash: ------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in net/sched/sch_sfq.c:203:6 index 65535 is out of range for type 'struct sfq_head[128]' CPU: 1 UID: 0 PID: 3037 Comm: syz.2.16 Not tainted 6.14.0-rc2-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x201/0x300 lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:231 [inline] __ubsan_handle_out_of_bounds+0xf5/0x120 lib/ubsan.c:429 sfq_link net/sched/sch_sfq.c:203 [inline] sfq_dec+0x53c/0x610 net/sched/sch_sfq.c:231 sfq_dequeue+0x34e/0x8c0 net/sched/sch_sfq.c:493 sfq_reset+0x17/0x60 net/sched/sch_sfq.c:518 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 tbf_reset+0x41/0x110 net/sched/sch_tbf.c:339 qdisc_reset+0x12e/0x600 net/sched/sch_generic.c:1035 dev_reset_queue+0x100/0x1b0 net/sched/sch_generic.c:1311 netdev_for_each_tx_queue include/linux/netdevice.h:2590 [inline] dev_deactivate_many+0x7e5/0xe70 net/sched/sch_generic.c:1375

Record
UBUNTU-CVE-2025-37752
CVSS 4.0
7.3 HighCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2025-1757699693 No score

kernel-uek: Fix of 19 CVEs

  • Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2024-21803}
  • net: defer final 'struct net' free in netns dismantle {CVE-2024-56658}
  • netfilter: validate user input for expected length {CVE-2024-35896}
  • drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' {CVE-2024-56608}
  • smb: client: fix UAF in async decryption {CVE-2024-50047}
  • drm/amdgpu: fix usage slab after free {CVE-2024-56551}
  • nvme: avoid double free special payload {CVE-2024-41073}
  • xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
  • net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739}
  • ext4: fix timer use-after-free on failed mount {CVE-2024-49960}
  • smb: client: fix potential UAF in cifs_stats_proc_show() {CVE-2024-35867}
  • smb: client: fix potential UAF in cifs_debug_files_proc_show() {CVE-2024-26928}
  • RDMA/mlx5: Fix fortify source warning while accessing Eth segment {CVE-2024-26907}
  • stddef: Introduce DECLARE_FLEX_ARRAY() helper
  • nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() {CVE-2025-21927}
  • net_sched: sch_sfq: move the limit validation {CVE-2024-57996}
  • net_sched: sch_sfq: use a temporary work area for validating configuration
  • net_sched: sch_sfq: don't allow 1 packet limit {CVE-2024-57996}
  • net_sched: sch_sfq: handle bigger packets
  • net_sched: sch_sfq: annotate data-races around q->perturb_period
  • squashfs: fix memory leak in squashfs_fill_super
  • netfilter: nf_tables: adjust lockdep assertions handling
  • Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
  • ASoC: ops: dynamically allocate struct snd_ctl_elem_value
  • KVM: x86: use array_index_nospec with indices that come from guest
  • KVM: APIC: add helper func to remove duplicate code in kvm_pv_send_ipi
  • rds: Fix NULL ptr deref in xas_start
  • mm: make page_mapped_in_vma() hugetlb walk aware
  • mm/rmap: Fix handling of hugetlbfs pages in page_vma_mapped_walk
  • net_sched: sch_sfq: move the limit validation {CVE-2025-37752}
  • net_sched: sch_sfq: use a temporary work area for validating configuration
  • net_sched: sch_sfq: don't allow 1 packet limit {CVE-2024-57996}
  • net_sched: sch_sfq: handle bigger packets
  • net_sched: sch_sfq: annotate data-races around q->perturb_period
  • squashfs: fix memory leak in squashfs_fill_super
  • netfilter: nf_tables: adjust lockdep assertions handling
  • Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
  • ASoC: ops: dynamically allocate struct snd_ctl_elem_value
  • KVM: x86: use array_index_nospec with indices that come from guest
  • KVM: APIC: add helper func to remove duplicate code in kvm_pv_send_ipi
  • rds: Fix NULL ptr deref in xas_start
  • mm: make page_mapped_in_vma() hugetlb walk aware
  • mm/rmap: Fix handling of hugetlbfs pages in page_vma_mapped_walk
Record
CLSA-2025-1757699693
Updated
2026-11-02
OSVCLSA-2025-1758009836 No score

Fix of 28 CVEs

Record
CLSA-2025-1758009836
Updated
2026-11-02
OSVCLSA-2025-1758010922 No score

Fix of 49 CVEs

Record
CLSA-2025-1758010922
Updated
2026-11-02
OSVCLSA-2025-1758019011 No score

Fix of 17 CVEs

Record
CLSA-2025-1758019011
Updated
2026-11-02
OSVCLSA-2026-1780562693 No score

kernel: Fix of 111 CVEs

  • fbcon: Fix OOB access in font allocation {CVE-2025-39967}
  • fbcon: fix integer overflow in fbcon_do_set_font {CVE-2025-39967}
  • macvlan: observe an RCU grace period in macvlan_common_newlink() error path {CVE-2026-23273}
  • macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209}
  • net_sched: sch_sfq: move the limit validation {CVE-2025-37752}
  • bpf: Fix oob access in cgroup local storage {CVE-2025-38502}
  • ftrace: Fix possible use-after-free issue in ftrace_location() {CVE-2024-38588}
  • driver core: enforce device_lock for driver_match_device() {CVE-2026-31688}
  • scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT {CVE-2026-43475}
  • unshare: fix unshare_fs() handling {CVE-2026-43472}
  • netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path {CVE-2026-43451}
  • nvme-pci: Fix race bug in nvme_poll_irqdisable() {CVE-2026-43448}
  • e1000/e1000e: Fix leak in DMA error cleanup {CVE-2026-43445}
  • cgroup: fix race between task migration and iteration {CVE-2026-43439}
  • ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces {CVE-2026-43436}
  • usb: image: mdc800: kill download URB on timeout {CVE-2026-43425}
  • tipc: fix divide-by-zero in tipc_sk_filter_connect() {CVE-2026-43411}
  • nouveau/dpcd: return EBUSY for aux xfer if the device is asleep {CVE-2026-43381}
  • ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() {CVE-2026-43068}
  • netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP {CVE-2026-31424}
  • net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() {CVE-2026-31423}
  • net/sched: cls_flow: fix NULL pointer dereference on shared blocks {CVE-2026-31422}
  • net/sched: cls_fw: fix NULL pointer dereference on shared blocks {CVE-2026-31421}
  • netfilter: ipset: drop logically empty buckets in mtype_del {CVE-2026-31418}
  • netfilter: nfnetlink_log: account for netlink header size {CVE-2026-31416}
  • sunrpc: fix cache_request leak in cache_release {CVE-2026-31400}
  • PM: runtime: Fix a race condition related to device removal {CVE-2026-23452}
  • net: usb: kaweth: validate USB endpoints {CVE-2026-23312}
  • nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399}
  • net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
  • nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set {CVE-2026-43449}
  • netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() {CVE-2026-43453}
  • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • RDMA/umem: Fix double dma_buf_unpin in failure path {CVE-2026-43128}
  • usbip: validate number_of_packets in usbip_pack_ret_submit() {CVE-2026-31607}
  • net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown {CVE-2026-23454}
  • netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() {CVE-2025-38441}
  • nvmet: fix memory leak of bio integrity {CVE-2025-38405}
  • nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. {CVE-2025-38400}
  • dmaengine: idxd: fix memory leak in error handling path of idxd_alloc {CVE-2025-38015}
  • bonding: check xdp prog when set bond mode {CVE-2025-22105}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD {CVE-2026-31428}
  • netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp {CVE-2026-31427}
  • ipv6: avoid overflows in ip6_datagram_send_ctl() {CVE-2026-31415}
  • net: atm: fix crash due to unvalidated vcc pointer in sigd_send() {CVE-2026-31411}
  • RDMA/umad: Reject negative data_len in ib_umad_write {CVE-2026-23243}
  • perf/x86/intel/uncore: Fix die ID init and look up bugs {CVE-2026-43344}
  • x86/apic: Disable x2apic on resume if the kernel expects so {CVE-2026-43363}
  • dm: remove fake timeout to avoid leak request {CVE-2026-43314}
  • drm: Account property blob allocations to memcg {CVE-2026-43287}
  • HID:…
Record
CLSA-2026-1780562693
Updated
2026-11-02
OSVCLSA-2026-1783791447 No score

kernel: Fix of 307 CVEs

  • gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully {CVE-2022-48660}
  • ipv4: check for NULL idev in ip_route_use_hint() {CVE-2024-36008}
  • KEYS: trusted: Do not use WARN when encode fails {CVE-2024-36975}
  • Fix userfaultfd_api to return EINVAL as expected {CVE-2024-41027}
  • xhci: Fix null pointer dereference when host dies {CVE-2023-52898}
  • sctp: sysctl: auth_enable: avoid using current->nsproxy {CVE-2025-21638}
  • blk-mq: fix IO hang from sbitmap wakeup race {CVE-2024-26671}
  • net: openvswitch: fix flow memory leak in ovs_flow_cmd_new {CVE-2023-52977}
  • gpiolib: fix memory leak in gpiochip_setup_dev() {CVE-2022-48975}
  • HID: betop: check shape of output reports {CVE-2023-53015}
  • mm/swapfile: add cond_resched() in get_swap_pages() {CVE-2023-52932}
  • HV: hv_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-52937}
  • drm/i915: Fix a memory leak with reused mmap_offset {CVE-2023-53002}
  • ptdma: pt_core_execute_cmd() should use spinlock {CVE-2023-53013}
  • RDMA/core: Fix ib block iterator counter overflow {CVE-2023-53026}
  • Bluetooth: hci_conn: Fix memory leaks {CVE-2023-53018}
  • scsi: target: pscsi: Fix bio_put() for error case {CVE-2024-26760}
  • sctp: Prevent TOCTOU out-of-bounds write {CVE-2025-40331}
  • pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() {CVE-2026-23038}
  • cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() {CVE-2025-40194}
  • ALSA: hda/cs8409: Fix possible NULL dereference {CVE-2024-50160}
  • nbd: don't allow reconnect after disconnect {CVE-2025-21731}
  • openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
  • ext4: detect invalid INLINE_DATA + EXTENTS flag combination {CVE-2025-40167}
  • ext4: xattr: fix null pointer deref in ext4_raw_inode() {CVE-2025-68820}
  • net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
  • wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode {CVE-2025-40321}
  • ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
  • ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping {CVE-2025-40121}
  • i40e: Fix macvlan leak by synchronizing access to mac_filter_hash {CVE-2024-50041}
  • net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() {CVE-2024-50000}
  • bpf: Fix reference count leak in bpf_prog_test_run_xdp() {CVE-2026-22994}
  • xsk: check IFF_UP earlier in Tx path {CVE-2023-53240}
  • firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038}
  • virtgpu: don't reset on shutdown {CVE-2025-38064}
  • xen/netfront: fix crash when removing device {CVE-2022-48969}
  • mptcp: do not fallback when OoO is present {CVE-2024-50185}
  • can: j1939: add missing calls in NETDEV_UNREGISTER notification handler {CVE-2025-39925}
  • netfilter: nf_tables: remove redundant chain validation on register store {CVE-2025-71160}
  • xfs: fix use-after-free in xattr node block inactivation {CVE-2026-43053}
  • ext4: fix racy may inline data check in dio write {CVE-2023-52786}
  • drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini {CVE-2023-52738}
  • macsec: fix UAF bug for real_dev {CVE-2022-49390}
  • drm/i915/gem: Fix Virtual Memory mapping boundaries calculation {CVE-2024-42259}
  • mm/shmem: disable PMD-sized page cache if needed {CVE-2024-42241}
  • driver: iio: add missing checks on iio_info's callback access {CVE-2024-46715}
  • udmabuf: fix memory leak on last export_udmabuf() error path {CVE-2024-56712}
  • ALSA: control: Avoid WARN() for symlink errors {CVE-2024-56657}
  • mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM {CVE-2024-56611}
  • eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682}
  • net: annotate data-races around sk->sk_{data_ready,write_space} {CVE-2026-23302}
  • udmabuf: change folios array from kmalloc to kvmalloc {CVE-2024-56544}
  • RDMA/mlx5: Move events notifier registration to be after device registration {CVE-2024-53224}
  • dlm: fix possible lkb_resource…
Record
CLSA-2026-1783791447
Updated
2026-11-02
OSVSUSE-SU-2025:01983-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47670: can: peak_usb: fix use after free bugs (bsc#1241407).
  • CVE-2022-49139: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (bsc#1238032).
  • CVE-2022-49145: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data (bsc#1238162).
  • CVE-2022-49168: btrfs: do not clean up repair bio if submit fails (bsc#1238109).
  • CVE-2022-49190: kernel/resource: fix kfree() of bootmem memory again (bsc#1238130).
  • CVE-2022-49212: mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init (bsc#1238331).
  • CVE-2022-49216: drm/tegra: Fix reference leak in tegra_dsi_ganged_probe (bsc#1238338).
  • CVE-2022-49235: ath9k_htc: fix uninit value bugs (bsc#1238333).
  • CVE-2022-49248: ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction (bsc#1238284).
  • CVE-2022-49253: media: usb: go7007: s2250-board: fix leak in probe() (bsc#1238420).
  • CVE-2022-49320: dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type (bsc#1238394).
  • CVE-2022-49326: rtl818x: Prevent using not initialized queues (bsc#1238646).
  • CVE-2022-49371: driver core: fix deadlock in __device_attach (bsc#1238546).
  • CVE-2022-49382: soc: rockchip: Fix refcount leak in rockchip_grf_init (bsc#1238306).
  • CVE-2022-49396: phy: qcom-qmp: fix reset-controller leak on probe errors (bsc#1238289).
  • CVE-2022-49420: net: annotate races around sk->sk_bound_dev_if (bsc#1238887).
  • CVE-2022-49441: tty: fix deadlock caused by calling printk() under tty_port->lock (bsc#1238263).
  • CVE-2022-49445: pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() (bsc#1238019).
  • CVE-2022-49460: PM / devfreq: rk3399_dmc: Disable edev on remove() (bsc#1238892).
  • CVE-2022-49467: drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() (bsc#1238815).
  • CVE-2022-49474: Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout (bsc#1238071).
  • CVE-2022-49491: drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() (bsc#1238539).
  • CVE-2022-49503: ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix (bsc#1238868).
  • CVE-2022-49592: net: stmmac: fix dma queue left shift overflow issue (bsc#1238311).
  • CVE-2022-49625: sfc: fix kernel panic when creating VF (bsc#1238411).
  • CVE-2022-49635: drm/i915/selftests: fix subtraction overflow bug (bsc#1238806).
  • CVE-2022-49652: dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate (bsc#1238871).
  • CVE-2022-49715: irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions (bsc#1238818).
  • CVE-2022-49728: kABI workaround for changeing the variable length type to size_t (bsc#1239111).
  • CVE-2022-49729: nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred (bsc#1239060).
  • CVE-2022-49751: w1: fix WARNING after calling w1_process() (bsc#1240254).
  • CVE-2022-49761: btrfs: always report error in run_one_delayed_ref() (bsc#1240261).
  • CVE-2022-49772: ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (bsc#1242147).
  • CVE-2022-49775: tcp: cdg: allow tcp_cdg_release() to be called multiple times (bsc#1242245).
  • CVE-2022-49776: macvlan: enforce a consistent minimal mtu (bsc#1242248).
  • CVE-2022-49787: mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (bsc#1242352).
  • CVE-2022-49788: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (bsc#1242353).
  • CVE-2022-49813: net: ena: Fix error handling in ena_init() (bsc#1242497).
  • CVE-2022-49821: mISDN: fix possible memory leak in mISDN_dsp_element_register() (bsc#1242542).
  • CVE-2022-49826: ata: libata-transport: fix double ata_host_put() in ata_tport_add() (bsc#1242549).
  • CVE-2022-49829: drm/scheduler: fix fence ref counting (bsc#1242691).
  • CVE-2022-49832: pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (bsc#1242154).
  • CVE-2022-49835: ALSA: hda: fix potential memleak in…
Record
SUSE-SU-2025:01983-1
Updated
2026-11-02
OSVSUSE-SU-2025:02249-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
  • CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
  • CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
  • CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
  • CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
  • CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
  • CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
  • CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
  • CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
  • CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
  • CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
  • CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
  • CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
  • CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
  • CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
  • CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
  • CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
  • CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
  • CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
  • CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
  • CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
  • CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
  • CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
  • CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
  • CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
  • CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
  • CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
  • CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
  • CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
  • CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
  • CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
  • CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
  • CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
  • CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
  • CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
  • CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
  • CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
  • CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
  • CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
  • CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
  • CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag…
Record
SUSE-SU-2025:02249-1
Updated
2026-11-02
OSVSUSE-SU-2025:02254-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
  • CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
  • CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
  • CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (bsc#1237895).
  • CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
  • CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
  • CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
  • CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
  • CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
  • CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
  • CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
  • CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
  • CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
  • CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
  • CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
  • CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
  • CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
  • CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
  • CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
  • CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
  • CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
  • CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
  • CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
  • CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
  • CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
  • CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
  • CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
  • CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
  • CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
  • CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
  • CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
  • CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
  • CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
  • CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
  • CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
  • CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
  • CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
  • CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
  • CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
  • CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
  • CVE-2025-37954: smb: client: Avoid…
Record
SUSE-SU-2025:02254-1
Updated
2026-11-02
OSVSUSE-SU-2025:02264-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
  • CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
  • CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
  • CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (bsc#1235464).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
  • CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).
  • Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • bs-upload-kernel: Pass limit_packages also on multibuild Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build') Fixes: 747f601d4156 ('bs-upload-kernel, MyBS, Buildresults: Support multibuild (JSC-SLE#5501, boo#1211226, bsc#1218184)')
  • hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).
  • kernel-source: Do not use multiple -r in sed parameters
  • kernel-source: Remove log.sh from sources
  • mkspec: Exclude rt flavor from kernel-syms dependencies (bsc#1244337).
  • mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431).
  • mm/hugetlb: unshare…
Record
SUSE-SU-2025:02264-1
Updated
2026-11-02
OSVSUSE-SU-2025:02307-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
  • CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
  • CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
  • CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (bsc#1237895).
  • CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
  • CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
  • CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
  • CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
  • CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
  • CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
  • CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
  • CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
  • CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
  • CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
  • CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
  • CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
  • CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
  • CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
  • CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
  • CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
  • CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
  • CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
  • CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
  • CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
  • CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
  • CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
  • CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
  • CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
  • CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
  • CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
  • CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
  • CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
  • CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
  • CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
  • CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
  • CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
  • CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
  • CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
  • CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
  • CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
  • CVE-2025-37954: smb: client: Avoid race…
Record
SUSE-SU-2025:02307-1
Updated
2026-11-02
OSVSUSE-SU-2025:02308-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-50085: dm raid: fix address sanitizer warning in raid_resume (bsc#1245147).
  • CVE-2022-50087: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (bsc#1245119).
  • CVE-2022-50200: selinux: Add boundary check in put_entry() (bsc#1245149).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • Fix conditional for selecting gcc-13 Fixes: 51dacec21eb1 ('Use gcc-13 for build on SLE16 (jsc#PED-10028).')
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • Require zstd in kernel-default-devel when module compression is zstd To use ksym-provides tool modules need to be uncompressed. Without zstd at least kernel-default-base does not have provides. Link: https://github.com/openSUSE/rpm-config-SUSE/pull/82
  • Test the correct macro to detect RT kernel build Fixes: 470cd1a41502 ('kernel-binary: Support livepatch_rt with merged RT branch')
  • Use gcc-13 for build on SLE16 (jsc#PED-10028).
  • add nf_tables for iptables non-legacy network handling This is needed for example by docker on the Alpine Linux distribution, but can also be used on openSUSE.
  • bs-upload-kernel: Pass limit_packages also on multibuild Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build') Fixes: 747f601d4156 ('bs-upload-kernel, MyBS, Buildresults: Support multibuild (JSC-SLE#5501, boo#1211226, bsc#1218184)')
  • check-for-config-changes: Fix flag name typo
  • drop ax25 drivers (bsc#1238471).
  • drop hamradio drivers (bsc#1238471).
  • drop netrom drivers (bsc#1238471).
  • drop rose drivers (bsc#1238471).
  • kabi/severities: workaround kABI checker complains after AX25 and HAMRADIO removals KABI: symbol asc2ax(mod:net/ax25/ax25) lost KABI: symbol ax25_bcast(mod:net/ax25/ax25) lost KABI: symbol ax25_defaddr(mod:net/ax25/ax25) lost KABI: symbol ax25_display_timer(mod:net/ax25/ax25) lost KABI: symbol ax25_find_cb(mod:net/ax25/ax25) lost KABI: symbol ax25_findbyuid(mod:net/ax25/ax25) lost KABI: symbol ax25_header_ops(mod:net/ax25/ax25) lost…
Record
SUSE-SU-2025:02308-1
Updated
2026-11-02
OSVSUSE-SU-2025:02320-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-50085: dm raid: fix address sanitizer warning in raid_resume (bsc#1245147).
  • CVE-2022-50087: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (bsc#1245119).
  • CVE-2022-50200: selinux: Add boundary check in put_entry() (bsc#1245149).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • net_sched: sch_fifo: implement lockless __fifo_dump() (bsc#1237312)
  • net_sched: sch_sfq: use a temporary work area for validating configuration (bsc#1232504)
  • scsi: storvsc: Do not report the host packet status as the hv status (git-fixes).
  • scsi: storvsc: Increase the timeouts to storvsc_timeout (bsc#1245455).
  • wifi: cfg80211: Add my certificate (bsc#1243001).
  • wifi: cfg80211: fix certs build to not depend on file order (bsc#1243001).
Record
SUSE-SU-2025:02320-1
Updated
2026-11-02
OSVSUSE-SU-2025:02321-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
  • CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
  • CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
  • CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-28956: x86/its: Add support for ITS-safe indirect thunk (bsc#1242006).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (bsc#1235464).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (bsc#1241640).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
  • CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).
  • Fix conditional for selecting gcc-13 Fixes: 51dacec21eb1 ('Use gcc-13 for build on SLE16 (jsc#PED-10028).')
  • Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • Require zstd in kernel-default-devel when module compression is zstd To use ksym-provides tool modules need to be uncompressed. Without zstd at least kernel-default-base does not have provides. Link: https://github.com/openSUSE/rpm-config-SUSE/pull/82
  • Use gcc-13 for build on SLE16 (jsc#PED-10028).
  • add…
Record
SUSE-SU-2025:02321-1
Updated
2026-11-02
OSVSUSE-SU-2025:02322-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
  • CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
  • CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
  • CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • Fix conditional for selecting gcc-13 Fixes: 51dacec21eb1 ('Use gcc-13 for build on SLE16 (jsc#PED-10028).')
  • Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • Require zstd in kernel-default-devel when module compression is zstd To use ksym-provides tool modules need to be uncompressed. Without zstd at least kernel-default-base does not have provides. Link: https://github.com/openSUSE/rpm-config-SUSE/pull/82
  • Test the correct macro to detect RT kernel build Fixes: 470cd1a41502 ('kernel-binary: Support livepatch_rt with merged RT branch')
  • Use gcc-13 for build on SLE16 (jsc#PED-10028).
  • add nf_tables for iptables non-legacy network…
Record
SUSE-SU-2025:02322-1
Updated
2026-11-02
OSVSUSE-SU-2025:02333-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
  • CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
  • CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
  • CVE-2024-57995: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (bsc#1237895).
  • CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
  • CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
  • CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
  • CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
  • CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
  • CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
  • CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
  • CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
  • CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
  • CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
  • CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
  • CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
  • CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
  • CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
  • CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
  • CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
  • CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
  • CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
  • CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
  • CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
  • CVE-2025-37837: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (bsc#1242952).
  • CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
  • CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
  • CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
  • CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
  • CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
  • CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
  • CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
  • CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
  • CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
  • CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
  • CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
  • CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
  • CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
  • CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
  • CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
  • CVE-2025-37954: smb: client: Avoid…
Record
SUSE-SU-2025:02333-1
Updated
2026-11-02
OSVSUSE-SU-2025:02335-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
  • CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
  • CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
  • CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
  • CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
  • CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
  • CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
  • CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
  • CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
  • CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
  • CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
  • CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
  • CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
  • CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
  • CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
  • CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
  • CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
  • CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
  • CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
  • CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
  • CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
  • CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
  • CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
  • CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
  • CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
  • CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
  • CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
  • CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
  • CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
  • CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
  • CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
  • CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
  • CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
  • CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
  • CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
  • CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
  • CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
  • CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
  • CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
  • CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
  • CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag access…
Record
SUSE-SU-2025:02335-1
Updated
2026-11-02
OSVSUSE-SU-2025:02537-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
  • CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
  • CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
  • CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
  • CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
  • CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
  • CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
  • CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
  • CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
  • CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
  • CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
  • CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
  • CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
  • CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
  • CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
  • CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

  • Fix conditional for selecting gcc-13 Fixes: 51dacec21eb1 ('Use gcc-13 for build on SLE16 (jsc#PED-10028).')
  • Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
  • MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
  • MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
  • MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
  • Require zstd in kernel-default-devel when module compression is zstd To use ksym-provides tool modules need to be uncompressed. Without zstd at least kernel-default-base does not have provides. Link: https://github.com/openSUSE/rpm-config-SUSE/pull/82
  • Use gcc-13 for build on SLE16 (jsc#PED-10028).
  • add nf_tables for iptables non-legacy network handling This is needed for example by docker on the Alpine Linux distribution, but can also be used on openSUSE.
  • bs-upload-kernel: Pass…
Record
SUSE-SU-2025:02537-1
Updated
2026-11-02
OSVSUSE-SU-2025:02538-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
  • CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
  • CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
  • CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
  • CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
  • CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
  • CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
  • CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
  • CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
  • CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
  • CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
  • CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
  • CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
  • CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
  • CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
  • CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
  • CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
  • CVE-2025-37743: wifi: ath12k: Avoid memory leak while enabling statistics (bsc#1242163).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
  • CVE-2025-37756: net: tls: explicitly disallow disconnect (bsc#1242515).
  • CVE-2025-37757: tipc: fix memory leak in tipc_link_xmit (bsc#1242521).
  • CVE-2025-37786: net: dsa: free routing table on probe failure (bsc#1242725).
  • CVE-2025-37800: driver core: fix potential NULL pointer dereference in dev_uevent() (bsc#1242849).
  • CVE-2025-37801: spi: spi-imx: Add check for spi_imx_setupxfer() (bsc#1242850).
  • CVE-2025-37811: usb: chipidea: ci_hdrc_imx: fix usbmisc handling (bsc#1242907).
  • CVE-2025-37844: cifs: avoid NULL pointer dereference in dbg call (bsc#1242946).
  • CVE-2025-37859: page_pool: avoid infinite loop to schedule delayed worker (bsc#1243051).
  • CVE-2025-37862: HID: pidff: Fix null pointer dereference in pidff_find_fields (bsc#1242982).
  • CVE-2025-37865: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (bsc#1242954).
  • CVE-2025-37874: net: ngbe: fix memory leak in ngbe_probe() error path (bsc#1242940).
  • CVE-2025-37884: bpf: Fix deadlock between rcu_tasks_trace and event_mutex (bsc#1243060).
  • CVE-2025-37909: net: lan743x: Fix memleak issue when GSO enabled (bsc#1243467).
  • CVE-2025-37917: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (bsc#1243475).
  • CVE-2025-37921: vxlan: vnifilter: Fix unlocked deletion of default FDB entry (bsc#1243480).
  • CVE-2025-37923: tracing: Fix oob write in trace_seq_to_buffer() (bsc#1243551).
  • CVE-2025-37927: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (bsc#1243620).
  • CVE-2025-37933: octeon_ep: Fix host hang issue during device reboot (bsc#1243628).
  • CVE-2025-37936: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value (bsc#1243537).
  • CVE-2025-37938: tracing: Verify event formats that have '%*p..' (bsc#1243544).
  • CVE-2025-37945: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (bsc#1243538).
  • CVE-2025-37961: ipvs: fix uninit-value for saddr in do_output_route4 (bsc#1243523).
  • CVE-2025-37967: usb: typec: ucsi: displayport: Fix deadlock (bsc#1243572).
  • CVE-2025-37968: iio: light: opt3001: fix deadlock due to concurrent flag access…
Record
SUSE-SU-2025:02538-1
Updated
2026-11-02
OSVSUSE-SU-2025:02601-1 No score

Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_8 fixes several issues.

The following security issues were fixed:

  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1245804).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
  • CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228645).
  • CVE-2024-26809: netfilter: nft_set_pipapo: release elements in clone only from destroy path (bsc#1245771).
Record
SUSE-SU-2025:02601-1
Updated
2026-11-02
OSVSUSE-SU-2025:02602-1 No score

Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_10_26 fixes several issues.

The following security issues were fixed:

  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
Record
SUSE-SU-2025:02602-1
Updated
2026-11-02
OSVSUSE-SU-2025:02604-1 No score

Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122_231 fixes several issues.

The following security issues were fixed:

  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
Record
SUSE-SU-2025:02604-1
Updated
2026-11-02
OSVSUSE-SU-2025:02606-1 No score

Security update for the Linux Kernel (Live Patch 66 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122_250 fixes several issues.

The following security issues were fixed:

  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
Record
SUSE-SU-2025:02606-1
Updated
2026-11-02
OSVSUSE-SU-2025:02607-1 No score

Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-150300_59_174 fixes several issues.

The following security issues were fixed:

  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
Record
SUSE-SU-2025:02607-1
Updated
2026-11-02
OSVSUSE-SU-2025:02608-1 No score

Security update for the Linux Kernel (Live Patch 57 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-150300_59_204 fixes several issues.

The following security issues were fixed:

  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
Record
SUSE-SU-2025:02608-1
Updated
2026-11-02
OSVSUSE-SU-2025:02610-1 No score

Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-150400_24_144 fixes several issues.

The following security issues were fixed:

  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1245804).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
Record
SUSE-SU-2025:02610-1
Updated
2026-11-02
OSVSUSE-SU-2025:02611-1 No score

Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-150400_24_158 fixes several issues.

The following security issues were fixed:

  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1245804).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
Record
SUSE-SU-2025:02611-1
Updated
2026-11-02
OSVSUSE-SU-2025:02618-1 No score

Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122_228 fixes several issues.

The following security issues were fixed:

  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
Record
SUSE-SU-2025:02618-1
Updated
2026-11-02
OSVSUSE-SU-2025:02619-1 No score

Security update for the Linux Kernel (Live Patch 56 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-150300_59_201 fixes several issues.

The following security issues were fixed:

  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
Record
SUSE-SU-2025:02619-1
Updated
2026-11-02
OSVSUSE-SU-2025:02626-1 No score

Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_10_39 fixes several issues.

The following security issue was fixed:

  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
Record
SUSE-SU-2025:02626-1
Updated
2026-11-02
OSVSUSE-SU-2025:02627-1 No score

Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-150300_59_167 fixes several issues.

The following security issues were fixed:

  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
  • CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228645).
Record
SUSE-SU-2025:02627-1
Updated
2026-11-02
OSVSUSE-SU-2025:02632-1 No score

Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_10_5 fixes several issues.

The following security issues were fixed:

  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1245804).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
  • CVE-2024-26809: netfilter: nft_set_pipapo: release elements in clone only from destroy path (bsc#1245771).
Record
SUSE-SU-2025:02632-1
Updated
2026-11-02
OSVSUSE-SU-2025:02636-1 No score

Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues.

The following security issues were fixed:

  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1245804).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
  • CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228645).
Record
SUSE-SU-2025:02636-1
Updated
2026-11-02
OSVSUSE-SU-2025:02637-1 No score

Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_10_34 fixes several issues.

The following security issues were fixed:

  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
Record
SUSE-SU-2025:02637-1
Updated
2026-11-02
OSVSUSE-SU-2025:02638-1 No score

Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_10_8 fixes several issues.

The following security issues were fixed:

  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1245804).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
Record
SUSE-SU-2025:02638-1
Updated
2026-11-02
OSVSUSE-SU-2025:02647-1 No score

Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-150400_24_150 fixes several issues.

The following security issues were fixed:

  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1245804).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
Record
SUSE-SU-2025:02647-1
Updated
2026-11-02
OSVSUSE-SU-2025:02648-1 No score

Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600_10_23 fixes several issues.

The following security issues were fixed:

  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
Record
SUSE-SU-2025:02648-1
Updated
2026-11-02
OSVSUSE-SU-2025:02652-1 No score

Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-150500_55_83 fixes several issues.

The following security issues were fixed:

  • CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
  • CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1245804).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).
Record
SUSE-SU-2025:02652-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-lts
Alpaquita:23
 6.1.134-r0 up to 6.1.140-r0
6.1.140-r0
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els3
5.4.17-2136.338.4.2.el7uek.tuxcare.els3
kernel-uek
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els3
5.4.17-2136.338.4.2.el7uek.tuxcare.els3
kernel-uek-container
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els3
5.4.17-2136.338.4.2.el7uek.tuxcare.els3
kernel-uek-container-debug
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els3
5.4.17-2136.338.4.2.el7uek.tuxcare.els3
kernel-uek-debug
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els3
5.4.17-2136.338.4.2.el7uek.tuxcare.els3
kernel-uek-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els3
5.4.17-2136.338.4.2.el7uek.tuxcare.els3
kernel-uek-devel
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els3
5.4.17-2136.338.4.2.el7uek.tuxcare.els3
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-uek-headers
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els3
5.4.17-2136.338.4.2.el7uek.tuxcare.els3
kernel-uek-tools
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els3
5.4.17-2136.338.4.2.el7uek.tuxcare.els3
perf
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els3
5.4.17-2136.338.4.2.el7uek.tuxcare.els3
python-perf
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els3
5.4.17-2136.338.4.2.el7uek.tuxcare.els3
linux-buildinfo-4.4.0-278-tuxcare.els49-generic
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-buildinfo-4.4.0-278-tuxcare.els49-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-cloud-tools-4.4.0-278-tuxcare.els49
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-cloud-tools-4.4.0-278-tuxcare.els49-generic
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-cloud-tools-4.4.0-278-tuxcare.els49-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-cloud-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-doc
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-headers-4.4.0-278-tuxcare.els49
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-headers-4.4.0-278-tuxcare.els49-generic
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-headers-4.4.0-278-tuxcare.els49-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-image-unsigned-4.4.0-278-tuxcare.els49-generic
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-image-unsigned-4.4.0-278-tuxcare.els49-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-libc-dev
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-modules-4.4.0-278-tuxcare.els49-generic
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-modules-4.4.0-278-tuxcare.els49-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-modules-extra-4.4.0-278-tuxcare.els49-generic
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-source-4.4.0
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-tools-4.4.0-278-tuxcare.els49
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-tools-4.4.0-278-tuxcare.els49-generic
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-tools-4.4.0-278-tuxcare.els49-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-tools-common
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-tools-host
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-buildinfo-4.15.0-251-tuxcare.els39-generic
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-buildinfo-4.15.0-251-tuxcare.els39-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-cloud-tools-4.15.0-251-tuxcare.els39
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-cloud-tools-4.15.0-251-tuxcare.els39-generic
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-cloud-tools-4.15.0-251-tuxcare.els39-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-cloud-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-doc
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-headers-4.15.0-251-tuxcare.els39
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-headers-4.15.0-251-tuxcare.els39-generic
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-headers-4.15.0-251-tuxcare.els39-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-image-unsigned-4.15.0-251-tuxcare.els39-generic
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-image-unsigned-4.15.0-251-tuxcare.els39-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-libc-dev
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-modules-4.15.0-251-tuxcare.els39-generic
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-modules-4.15.0-251-tuxcare.els39-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-modules-extra-4.15.0-251-tuxcare.els39-generic
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-source-4.15.0
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-tools-4.15.0-251-tuxcare.els39
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-tools-4.15.0-251-tuxcare.els39-generic
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-tools-4.15.0-251-tuxcare.els39-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-tools-host
TuxCare:Ubuntu:18.04
From an advisory covering 51 CVEs
 before 4.15.0-251.262
4.15.0-251.262
linux-buildinfo-5.4.0-221-tuxcare.els3-generic
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-buildinfo-5.4.0-221-tuxcare.els3-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-cloud-tools-5.4.0-221-tuxcare.els3
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-cloud-tools-5.4.0-221-tuxcare.els3-generic
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-cloud-tools-5.4.0-221-tuxcare.els3-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-cloud-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-doc
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-headers-5.4.0-221-tuxcare.els3
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-headers-5.4.0-221-tuxcare.els3-generic
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-headers-5.4.0-221-tuxcare.els3-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-image-unsigned-5.4.0-221-tuxcare.els3-generic
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-image-unsigned-5.4.0-221-tuxcare.els3-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-libc-dev
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-modules-5.4.0-221-tuxcare.els3-generic
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-modules-5.4.0-221-tuxcare.els3-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-modules-extra-5.4.0-221-tuxcare.els3-generic
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-source-5.4.0
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-tools-5.4.0-221-tuxcare.els3
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-tools-5.4.0-221-tuxcare.els3-generic
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-tools-5.4.0-221-tuxcare.els3-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
linux-tools-host
TuxCare:Ubuntu:20.04
From an advisory covering 17 CVEs
 before 5.4.0-221.241
5.4.0-221.241
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 110 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els3
5.14.0-570.62.1.el9_6.tuxcare.5.els3
kernel-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 110 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els3
5.14.0-570.62.1.el9_6.tuxcare.5.els3
kernel-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 110 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els3
5.14.0-570.62.1.el9_6.tuxcare.5.els3
kernel-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 110 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els3
5.14.0-570.62.1.el9_6.tuxcare.5.els3
kernel-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 110 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els3
5.14.0-570.62.1.el9_6.tuxcare.5.els3
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 110 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els3
5.14.0-570.62.1.el9_6.tuxcare.5.els3
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 110 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els3
5.14.0-570.62.1.el9_6.tuxcare.5.els3
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 110 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els3
5.14.0-570.62.1.el9_6.tuxcare.5.els3
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 110 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els3
5.14.0-570.62.1.el9_6.tuxcare.5.els3
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 110 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els3
5.14.0-570.62.1.el9_6.tuxcare.5.els3
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 110 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els3
5.14.0-570.62.1.el9_6.tuxcare.5.els3
Kernel
Linux
 before 6.1.135, 6.2.0 up to 6.6.88, 6.7.0 up to 6.12.24, 6.13.0 up to 6.13.12, 6.14.0 up to 6.14.3
6.1.1356.6.886.12.246.13.126.14.3
linux
Debian:12
 before 6.1.135-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 32 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.135-1
linux
Debian:13
 before 6.12.25-1
6.12.25-1
linux
Debian:14
 before 6.12.25-1
6.12.25-1
linux-6.1
Debian:11
From an advisory covering 261 CVEs
 before 6.1.137-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u16.1.128-1~deb11u16.1.129-1~deb11u1
6.1.137-1~deb11u1
kernel
openEuler:20.03-LTS-SP4
From an advisory covering 6 CVEs
 before 4.19.90-2505.5.0.0329.oe2003sp4
4.19.90-2505.5.0.0329.oe2003sp4
kernel
openEuler:24.03-LTS
From an advisory covering 66 CVEs
 before 6.6.0-108.0.0.100.oe2403
6.6.0-108.0.0.100.oe2403
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 69 CVEs
 before 6.6.0-108.0.0.111.oe2403sp1
6.6.0-108.0.0.111.oe2403sp1
kernel
openEuler:24.03-LTS-SP2
From an advisory covering 67 CVEs
 before 6.6.0-108.0.0.114.oe2403sp2
6.6.0-108.0.0.114.oe2403sp2
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 169 CVEs
 before 4.12.14-122.261.1
4.12.14-122.261.1
kgraft-patch-SLE12-SP5_Update_69
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 169 CVEs
 before 1-8.3.1
1-8.3.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 169 CVEs
 before 4.12.14-122.261.1
4.12.14-122.261.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 169 CVEs
 before 4.12.14-122.261.1
4.12.14-122.261.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 169 CVEs
 before 4.12.14-122.261.1
4.12.14-122.261.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 169 CVEs
 before 4.12.14-122.261.1
4.12.14-122.261.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 169 CVEs
 before 4.12.14-122.261.1
4.12.14-122.261.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 169 CVEs
 before 4.12.14-122.261.1
4.12.14-122.261.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 94 CVEs
 before 6.4.0-150600.8.43.1
6.4.0-150600.8.43.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 94 CVEs
 before 6.4.0-150600.8.43.1
6.4.0-150600.8.43.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 94 CVEs
 before 6.4.0-150600.8.43.1
6.4.0-150600.8.43.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.8.43.1
6.4.0-150600.8.43.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.8.43.1
6.4.0-150600.8.43.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.8.43.1
6.4.0-150600.8.43.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.20.6.1
6.4.0-150700.20.6.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.20.6.1
6.4.0-150700.20.6.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.20.6.1
6.4.0-150700.20.6.1
kernel-default
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1.150500.6.53.1
5.14.21-150500.55.113.1.150500.6.53.1
kernel-source
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-livepatch-SLE15-SP5_Update_28
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 258 CVEs
 before 1-150500.11.3.1
1-150500.11.3.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1.150500.6.53.1
5.14.21-150500.55.113.1.150500.6.53.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1.150500.6.53.1
5.14.21-150500.55.113.1.150500.6.53.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1.150500.6.53.1
5.14.21-150500.55.113.1.150500.6.53.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-source
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1.150500.6.53.1
5.14.21-150500.55.113.1.150500.6.53.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 258 CVEs
 before 5.14.21-150500.55.113.1
5.14.21-150500.55.113.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.53.6.1
6.4.0-150700.53.6.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.53.6.1
6.4.0-150700.53.6.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.53.6.1.150700.17.6.1
6.4.0-150700.53.6.1.150700.17.6.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.53.6.1
6.4.0-150700.53.6.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.53.6.1
6.4.0-150700.53.6.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.53.6.1
6.4.0-150700.53.6.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.53.6.1
6.4.0-150700.53.6.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.53.6.1
6.4.0-150700.53.6.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.53.6.1
6.4.0-150700.53.6.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.53.6.1
6.4.0-150700.53.6.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.53.6.1
6.4.0-150700.53.6.1
kernel-livepatch-SLE15-SP7_Update_2
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 253 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.53.6.1
6.4.0-150700.53.6.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 253 CVEs
 before 6.4.0-150700.53.6.1
6.4.0-150700.53.6.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-livepatch-SLE15-SP3_Update_59
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 123 CVEs
 before 1-150300.7.3.1
1-150300.7.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP3
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1.150300.18.126.1
5.3.18-150300.59.211.1.150300.18.126.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.212.1
5.3.18-150300.59.212.1
kernel-preempt
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-source
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1.150300.18.126.1
5.3.18-150300.59.211.1.150300.18.126.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.212.1
5.3.18-150300.59.212.1
kernel-preempt
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1.150300.18.126.1
5.3.18-150300.59.211.1.150300.18.126.1
kernel-default
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1.150300.18.126.1
5.3.18-150300.59.211.1.150300.18.126.1
kernel-64kb
SUSE:Enterprise Storage 7.1
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default
SUSE:Enterprise Storage 7.1
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-default-base
SUSE:Enterprise Storage 7.1
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1.150300.18.126.1
5.3.18-150300.59.211.1.150300.18.126.1
kernel-docs
SUSE:Enterprise Storage 7.1
From an advisory covering 123 CVEs
 before 5.3.18-150300.59.211.1
5.3.18-150300.59.211.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.10.44.1
6.4.0-150600.10.44.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.10.44.1
6.4.0-150600.10.44.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.10.44.1
6.4.0-150600.10.44.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.10.44.1
6.4.0-150600.10.44.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.23.60.3
6.4.0-150600.23.60.3
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.23.60.4
6.4.0-150600.23.60.4
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.23.60.4
6.4.0-150600.23.60.4
kernel-default
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.23.60.5
6.4.0-150600.23.60.5
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.23.60.5.150600.12.26.4
6.4.0-150600.23.60.5.150600.12.26.4
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.23.60.3
6.4.0-150600.23.60.3
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.23.60.4
6.4.0-150600.23.60.4
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.23.60.3
6.4.0-150600.23.60.3
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.23.60.2
6.4.0-150600.23.60.2
kernel-source
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.23.60.4
6.4.0-150600.23.60.4
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.23.60.4
6.4.0-150600.23.60.4
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 94 CVEs
 before 6.4.0-150600.23.60.4
6.4.0-150600.23.60.4
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-aws-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1036.38~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 17 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.1
6.8.0-1036.38~22.04.1
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1036.42~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1
Show 14 moreShow less
6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.1
6.8.0-1036.42~22.04.1
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
 None known
linux-gcp-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
 None known
linux-gcp-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
 None known
linux-gcp-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1
Show 8 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1
 None known
linux-gcp-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1037.39~22.04.1, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1
Show 19 moreShow less
6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.1
6.8.0-1037.39~22.04.1
linux-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
 None known
linux-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1
Show 5 moreShow less
6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1
 None known
linux-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1
Show 8 moreShow less
6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1
 None known
linux-hwe-6.8
Ubuntu:22.04:LTS
 before 6.8.0-79.79~22.04.1, plus listed versions
6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1
Show 12 moreShow less
6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.1
6.8.0-79.79~22.04.1
linux-ibm-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1036.36~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1
Show 15 moreShow less
6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.1
6.8.0-1036.36~22.04.1
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-lowlatency-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1
Show 5 moreShow less
5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30
 None known
linux-lowlatency-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1
Show 5 moreShow less
6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-lowlatency-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1
Show 8 moreShow less
6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1
 None known
linux-lowlatency-hwe-6.8
Ubuntu:22.04:LTS
 before 6.8.0-79.79.1~22.04.1, plus listed versions
6.8.0-38.38.1~22.04.26.8.0-40.40.1~22.04.16.8.0-44.44.1~22.04.16.8.0-45.45.1~22.04.16.8.0-47.47.1~22.04.1
Show 17 moreShow less
6.8.0-48.48.3~22.04.16.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-54.56.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.16.8.0-60.63.1~22.04.16.8.0-62.65.1~22.04.16.8.0-63.66.1~22.04.16.8.0-64.67.1~22.04.16.8.0-65.68.1~22.04.16.8.0-78.78.1~22.04.1
6.8.0-79.79.1~22.04.1
linux-nvidia-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15
 None known
linux-nvidia-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15
Show 6 moreShow less
6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25
 None known
linux-nvidia-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1036.39~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1
Show 20 moreShow less
6.8.0-1013.14~22.04.16.8.0-1014.15~22.04.16.8.0-1015.16~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1022.25~22.04.26.8.0-1023.26~22.04.16.8.0-1024.27~22.04.16.8.0-1025.28~22.04.16.8.0-1026.29~22.04.16.8.0-1027.30~22.04.16.8.0-1028.31~22.04.16.8.0-1029.32~22.04.16.8.0-1030.33~22.04.16.8.0-1031.34~22.04.16.8.0-1032.35~22.04.16.8.0-1035.38~22.04.1
6.8.0-1036.39~22.04.1
linux-oem-5.17
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13
Show 21 moreShow less
5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36
 None known
linux-oem-6.0
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10
Show 11 moreShow less
6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21
 None known
linux-oem-6.1
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9
Show 22 moreShow less
6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36
 None known
linux-oem-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8
Show 14 moreShow less
6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28
 None known
linux-oracle-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1
Show 8 moreShow less
6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1
 None known
linux-oracle-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1033.34~22.04.1, plus listed versions
6.8.0-1006.6~22.04.36.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1
Show 19 moreShow less
6.8.0-1013.13~22.04.16.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.17~22.04.16.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.20~22.04.16.8.0-1020.21~22.04.16.8.0-1021.22~22.04.16.8.0-1022.23~22.04.16.8.0-1023.24~22.04.16.8.0-1024.25~22.04.16.8.0-1025.26~22.04.16.8.0-1026.27~22.04.16.8.0-1027.28~22.04.16.8.0-1028.29~22.04.16.8.0-1029.30~22.04.16.8.0-1030.31~22.04.16.8.0-1032.33~22.04.1
6.8.0-1033.34~22.04.1
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-riscv-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1
 None known
linux-riscv-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1
Show 5 moreShow less
6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1
 None known
linux-riscv-6.8
Ubuntu:22.04:LTS
 before 6.8.0-79.79~22.04.1, plus listed versions
6.8.0-38.38.1~22.04.16.8.0-39.39.1~22.04.16.8.0-40.40.1~22.04.16.8.0-41.41.1~22.04.16.8.0-44.44.1~22.04.1
Show 17 moreShow less
6.8.0-47.47.1~22.04.16.8.0-48.48.1~22.04.26.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-53.55.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.16.8.0-62.65~22.04.16.8.0-63.66~22.04.16.8.0-64.67~22.04.16.8.0-71.71~22.04.16.8.0-78.78~22.04.1
6.8.0-79.79~22.04.1
linux-starfive-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1
 None known
linux-starfive-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1
 None known
linux-starfive-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1
Show 6 moreShow less
6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.16.5.0-1017.18~22.04.16.5.0-1018.19~22.04.1
 None known

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-37752 is a high vulnerability (CVSS 7.8) in Debian Linux, published May 1, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 23rd percentile. Fixed in linux-lts 6.1.140-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 437 package rows, 29 versions, 3,199 references and the rest of 20 source descriptions. The JSON record has them. Also not on the record: 29 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 78 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open