Every CVE Search/ Get API key

CVE-2025-37797

net_sched: hfsc: Fix a UAF vulnerability in class handling

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

net_sched: hfsc: Fix a UAF vulnerability in class handling

This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-use condition in hfsc_change_class() when working with certain child qdiscs like netem or codel.

The vulnerability works as follows:

  1. hfsc_change_class() checks if a class has packets (q.qlen != 0)
  2. It then calls qdisc_peek_len(), which for certain qdiscs (e.g., codel, netem) might drop packets and empty the queue
  3. The code continues assuming the queue is still non-empty, adding the class to vttree
  4. This breaks HFSC scheduler assumptions that only non-empty classes are in vttree
  5. Later, when the class is destroyed, this can lead to a Use-After-Free

The fix adds a second queue length check after qdisc_peek_len() to verify the queue wasn't emptied.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.22%Up 0.2 points since May 3, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.8

net_sched: hfsc: Fix a UAF vulnerability in class handling

In the Linux kernel, the following vulnerability has been resolved:

net_sched: hfsc: Fix a UAF vulnerability in class handling

This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-use condition in hfsc_change_class() when working with certain child qdiscs like netem or codel.

The vulnerability works as follows:

  1. hfsc_change_class() checks if a class has packets (q.qlen != 0)
  2. It then calls qdisc_peek_len(), which for certain qdiscs (e.g., codel, netem) might drop packets and empty the queue
  3. The code continues assuming the queue is still non-empty, adding the class to vttree
  4. This breaks HFSC scheduler assumptions that only non-empty classes are in vttree
  5. Later, when the class is destroyed, this can lead to a Use-After-Free

The fix adds a second queue length check after qdisc_peek_len() to verify the queue wasn't emptied.

Record
CVE-2025-37797
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2025-13245 7.8

In the Linux kernel, the following vulnerability has been resolved:

net_sched: hfsc: Fix a UAF vulnerability in class handling

This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-use condition in hfsc_change_class() when working with certain child qdiscs like netem or codel.

The vulnerability works as follows:

  1. hfsc_change_class() checks if a class has packets (q.qlen != 0)
  2. It then calls qdisc_peek_len(), which for certain qdiscs (e.g., codel, netem) might drop packets and empty the queue
  3. The code continues assuming the queue is still non-empty, adding the class to vttree
  4. This breaks HFSC scheduler assumptions that only non-empty classes are in vttree
  5. Later, when the class is destroyed, this can lead to a Use-After-Free

The fix adds a second queue length check after qdisc_peek_len() to verify the queue wasn't emptied.

Record
EUVD-2025-13245
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-hvr4-ppmm-c7fp 7.8

In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF...

In the Linux kernel, the following vulnerability has been resolved:

net_sched: hfsc: Fix a UAF vulnerability in class handling

This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-use condition in hfsc_change_class() when working with certain child qdiscs like netem or codel.

The vulnerability works as follows:

  1. hfsc_change_class() checks if a class has packets (q.qlen != 0)
  2. It then calls qdisc_peek_len(), which for certain qdiscs (e.g., codel, netem) might drop packets and empty the queue
  3. The code continues assuming the queue is still non-empty, adding the class to vttree
  4. This breaks HFSC scheduler assumptions that only non-empty classes are in vttree
  5. Later, when the class is destroyed, this can lead to a Use-After-Free

The fix adds a second queue length check after qdisc_peek_len() to verify the queue wasn't emptied.

Record
GHSA-hvr4-ppmm-c7fp
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

net_sched: hfsc: Fix a UAF vulnerability in class handling

This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-use condition in hfsc_change_class() when working with certain child qdiscs like netem or codel.

The vulnerability works as follows:

  1. hfsc_change_class() checks if a class has packets (q.qlen != 0)
  2. It then calls qdisc_peek_len(), which for certain qdiscs (e.g., codel, netem) might drop packets and empty the queue
  3. The code continues assuming the queue is still non-empty, adding the class to vttree
  4. This breaks HFSC scheduler assumptions that only non-empty classes are in vttree
  5. Later, when the class is destroyed, this can lead to a Use-After-Free

The fix adds a second queue length check after qdisc_peek_len() to verify the queue wasn't emptied.

Record
CVE-2025-37797
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVBELL-CVE-2025-37797 7.8
Record
BELL-CVE-2025-37797
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

net_sched: hfsc: Fix a UAF vulnerability in class handling

In the Linux kernel, the following vulnerability has been resolved:

net_sched: hfsc: Fix a UAF vulnerability in class handling

This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-use condition in hfsc_change_class() when working with certain child qdiscs like netem or codel.

The vulnerability works as follows:

  1. hfsc_change_class() checks if a class has packets (q.qlen != 0)
  2. It then calls qdisc_peek_len(), which for certain qdiscs (e.g., codel, netem) might drop packets and empty the queue
  3. The code continues assuming the queue is still non-empty, adding the class to vttree
  4. This breaks HFSC scheduler assumptions that only non-empty classes are in vttree
  5. Later, when the class is destroyed, this can lead to a Use-After-Free

The fix adds a second queue length check after qdisc_peek_len() to verify the queue wasn't emptied.

Record
CVE-2025-37797
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 46 moreShow less
OSVDEBIAN-CVE-2025-37797 7.8

In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-use condition in hfsc_change_class() when working with certain child qdiscs like netem or codel. The vulnerability works as follows: 1. hfsc_change_class() checks if a class has packets (q.qlen != 0) 2. It then calls qdisc_peek_len(), which for certain qdiscs (e.g., codel, netem) might drop packets and empty the queue 3. The code continues assuming the queue is still non-empty, adding the class to vttree 4. This breaks HFSC scheduler assumptions that only non-empty classes are in vttree 5. Later, when the class is destroyed, this can lead to a Use-After-Free The fix adds a second queue length check after qdisc_peek_len() to verify the queue wasn't emptied.

Record
DEBIAN-CVE-2025-37797
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1878 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

bpf: consider that tail calls invalidate packet pointers

Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence, conservatively assume that each tail call invalidates packet pointers.

Making the change in bpf_helper_changes_pkt_data() automatically makes use of check_cfg() logic that computes 'changes_pkt_data' effect for global sub-programs, such that the following program could be rejected:

int tail_call(struct __sk_buff *sk)
{
	bpf_tail_call_static(sk, &jmp_table, 0);
	return 0;
}

SEC("tc")
int not_safe(struct __sk_buff *sk)
{
	int *p = (void *)(long)sk->data;
	... make p valid ...
	tail_call(sk);
	*p = 42; /* this is unsafe */
	...
}

The tc_bpf2bpf.c:subprog_tc() needs change: mark it as a function that can invalidate packet pointers. Otherwise, it can't be freplaced with tailcall_freplace.c:entry_freplace() that does a tail call.(CVE-2024-58237)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"

The Call Trace is as below: " <TASK> ? show_regs.cold+0x1a/0x1f ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? __warn+0x84/0xd0 ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? report_bug+0x105/0x180 ? handle_bug+0x46/0x80 ? exc_invalid_op+0x19/0x70 ? asm_exc_invalid_op+0x1b/0x20 ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? __rxe_cleanup+0x124/0x170 [rdma_rxe] rxe_destroy_qp.cold+0x24/0x29 [rdma_rxe] ib_destroy_qp_user+0x118/0x190 [ib_core] rdma_destroy_qp.cold+0x43/0x5e [rdma_cm] rtrs_cq_qp_destroy.cold+0x1d/0x2b [rtrs_core] rtrs_srv_close_work.cold+0x1b/0x31 [rtrs_server] process_one_work+0x21d/0x3f0 worker_thread+0x4a/0x3c0 ? process_one_work+0x3f0/0x3f0 kthread+0xf0/0x120 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x22/0x30 </TASK> " When too many rdma resources are allocated, rxe needs more time to handle these rdma resources. Sometimes with the current timeout, rxe can not release the rdma resources correctly.

Compared with other rdma drivers, a bigger timeout is used.(CVE-2025-21829)

In the Linux kernel, the following vulnerability has been resolved:

net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC

Actually ENETC VFs do not support HWTSTAMP_TX_ONESTEP_SYNC because only ENETC PF can access PMa_SINGLE_STEP registers. And there will be a crash if VFs are used to test one-step timestamp, the crash log as follows.

[ 129.110909] Unable to handle kernel paging request at virtual address 00000000000080c0 [ 129.287769] Call trace: [ 129.290219] enetc_port_mac_wr+0x30/0xec (P) [ 129.294504] enetc_start_xmit+0xda4/0xe74 [ 129.298525] enetc_xmit+0x70/0xec [ 129.301848] dev_hard_start_xmit+0x98/0x118(CVE-2025-21894)

In the Linux kernel, the following vulnerability has been resolved:

caif_virtio: fix wrong pointer check in cfv_probe()

del_vqs() frees virtqueues, therefore cfv->vq_tx pointer should be checked for NULL before calling it, not cfv->vdev. Also the current implementation is redundant because the pointer cfv->vdev is dereferenced before it is checked for NULL.

Fix this by checking cfv->vq_tx for NULL instead of cfv->vdev before calling del_vqs().(CVE-2025-21904)

In the Linux kernel, the following vulnerability has been resolved:

eth: bnxt: do not update checksum in bnxt_xdp_build_skb()

The bnxt_rx_pkt() updates ip_summed value at the end if checksum offload is enabled. When the XDP-MB program is attached and it returns XDP_PASS, the bnxt_xdp_build_skb() is called to update skb_shared_info. The main purpose of bnxt_xdp_build_skb() is to update skb_shared_info, but it updates ip_summed value too if checksum offload is enabled. This is actually duplicate work.

When…

Record
OESA-2025-1878
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1879 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

bpf: consider that tail calls invalidate packet pointers

Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence, conservatively assume that each tail call invalidates packet pointers.

Making the change in bpf_helper_changes_pkt_data() automatically makes use of check_cfg() logic that computes 'changes_pkt_data' effect for global sub-programs, such that the following program could be rejected:

int tail_call(struct __sk_buff *sk)
{
	bpf_tail_call_static(sk, &amp;jmp_table, 0);
	return 0;
}

SEC(&quot;tc&quot;)
int not_safe(struct __sk_buff *sk)
{
	int *p = (void *)(long)sk-&gt;data;
	... make p valid ...
	tail_call(sk);
	*p = 42; /* this is unsafe */
	...
}

The tc_bpf2bpf.c:subprog_tc() needs change: mark it as a function that can invalidate packet pointers. Otherwise, it can't be freplaced with tailcall_freplace.c:entry_freplace() that does a tail call.(CVE-2024-58237)

In the Linux kernel, the following vulnerability has been resolved:

netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()

qdisc_tree_reduce_backlog() notifies parent qdisc only if child qdisc becomes empty, therefore we need to reduce the backlog of the child qdisc before calling it. Otherwise it would miss the opportunity to call cops->qlen_notify(), in the case of DRR, it resulted in UAF since DRR uses ->qlen_notify() to maintain its active list.(CVE-2025-21703)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"

The Call Trace is as below: " <TASK> ? show_regs.cold+0x1a/0x1f ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? __warn+0x84/0xd0 ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? report_bug+0x105/0x180 ? handle_bug+0x46/0x80 ? exc_invalid_op+0x19/0x70 ? asm_exc_invalid_op+0x1b/0x20 ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? __rxe_cleanup+0x124/0x170 [rdma_rxe] rxe_destroy_qp.cold+0x24/0x29 [rdma_rxe] ib_destroy_qp_user+0x118/0x190 [ib_core] rdma_destroy_qp.cold+0x43/0x5e [rdma_cm] rtrs_cq_qp_destroy.cold+0x1d/0x2b [rtrs_core] rtrs_srv_close_work.cold+0x1b/0x31 [rtrs_server] process_one_work+0x21d/0x3f0 worker_thread+0x4a/0x3c0 ? process_one_work+0x3f0/0x3f0 kthread+0xf0/0x120 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x22/0x30 </TASK> " When too many rdma resources are allocated, rxe needs more time to handle these rdma resources. Sometimes with the current timeout, rxe can not release the rdma resources correctly.

Compared with other rdma drivers, a bigger timeout is used.(CVE-2025-21829)

In the Linux kernel, the following vulnerability has been resolved:

net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC

Actually ENETC VFs do not support HWTSTAMP_TX_ONESTEP_SYNC because only ENETC PF can access PMa_SINGLE_STEP registers. And there will be a crash if VFs are used to test one-step timestamp, the crash log as follows.

[ 129.110909] Unable to handle kernel paging request at virtual address 00000000000080c0 [ 129.287769] Call trace: [ 129.290219] enetc_port_mac_wr+0x30/0xec (P) [ 129.294504] enetc_start_xmit+0xda4/0xe74 [ 129.298525] enetc_xmit+0x70/0xec [ 129.301848] dev_hard_start_xmit+0x98/0x118(CVE-2025-21894)

In the Linux kernel, the following vulnerability has been resolved:

caif_virtio: fix wrong pointer check in cfv_probe()

del_vqs() frees virtqueues, therefore cfv->vq_tx pointer should be checked for NULL before calling it, not cfv->vdev. Also the current implementation is redundant because the pointer cfv->vdev is dereferenced before it is checked for NULL.

Fix this by checking cfv->vq_tx for NULL instead of cfv->vdev before calling del_vqs().(CVE-2025-21904)

In the Linux kernel, the…

Record
OESA-2025-1879
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1880 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

bpf: consider that tail calls invalidate packet pointers

Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence, conservatively assume that each tail call invalidates packet pointers.

Making the change in bpf_helper_changes_pkt_data() automatically makes use of check_cfg() logic that computes 'changes_pkt_data' effect for global sub-programs, such that the following program could be rejected:

int tail_call(struct __sk_buff *sk)
{
	bpf_tail_call_static(sk, &amp;jmp_table, 0);
	return 0;
}

SEC(&quot;tc&quot;)
int not_safe(struct __sk_buff *sk)
{
	int *p = (void *)(long)sk-&gt;data;
	... make p valid ...
	tail_call(sk);
	*p = 42; /* this is unsafe */
	...
}

The tc_bpf2bpf.c:subprog_tc() needs change: mark it as a function that can invalidate packet pointers. Otherwise, it can't be freplaced with tailcall_freplace.c:entry_freplace() that does a tail call.(CVE-2024-58237)

In the Linux kernel, the following vulnerability has been resolved:

eth: bnxt: do not update checksum in bnxt_xdp_build_skb()

The bnxt_rx_pkt() updates ip_summed value at the end if checksum offload is enabled. When the XDP-MB program is attached and it returns XDP_PASS, the bnxt_xdp_build_skb() is called to update skb_shared_info. The main purpose of bnxt_xdp_build_skb() is to update skb_shared_info, but it updates ip_summed value too if checksum offload is enabled. This is actually duplicate work.

When the bnxt_rx_pkt() updates ip_summed value, it checks if ip_summed is CHECKSUM_NONE or not. It means that ip_summed should be CHECKSUM_NONE at this moment. But ip_summed may already be updated to CHECKSUM_UNNECESSARY in the XDP-MB-PASS path. So the by skb_checksum_none_assert() WARNS about it.

This is duplicate work and updating ip_summed in the bnxt_xdp_build_skb() is not needed.

Splat looks like: WARNING: CPU: 3 PID: 5782 at ./include/linux/skbuff.h:5155 bnxt_rx_pkt+0x479b/0x7610 [bnxt_en] Modules linked in: bnxt_re bnxt_en rdma_ucm rdma_cm iw_cm ib_cm ib_uverbs veth xt_nat xt_tcpudp xt_conntrack nft_chain_nat xt_MASQUERADE nf_] CPU: 3 UID: 0 PID: 5782 Comm: socat Tainted: G W 6.14.0-rc4+ #27 Tainted: [W]=WARN Hardware name: ASUS System Product Name/PRIME Z690-P D4, BIOS 0603 11/01/2021 RIP: 0010:bnxt_rx_pkt+0x479b/0x7610 [bnxt_en] Code: 54 24 0c 4c 89 f1 4c 89 ff c1 ea 1f ff d3 0f 1f 00 49 89 c6 48 85 c0 0f 84 4c e5 ff ff 48 89 c7 e8 ca 3d a0 c8 e9 8f f4 ff ff <0f> 0b f RSP: 0018:ffff88881ba09928 EFLAGS: 00010202 RAX: 0000000000000000 RBX: 00000000c7590303 RCX: 0000000000000000 RDX: 1ffff1104e7d1610 RSI: 0000000000000001 RDI: ffff8881c91300b8 RBP: ffff88881ba09b28 R08: ffff888273e8b0d0 R09: ffff888273e8b070 R10: ffff888273e8b010 R11: ffff888278b0f000 R12: ffff888273e8b080 R13: ffff8881c9130e00 R14: ffff8881505d3800 R15: ffff888273e8b000 FS: 00007f5a2e7be080(0000) GS:ffff88881ba00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff2e708ff8 CR3: 000000013e3b0000 CR4: 00000000007506f0 PKRU: 55555554 Call Trace: <IRQ> ? __warn+0xcd/0x2f0 ? bnxt_rx_pkt+0x479b/0x7610 ? report_bug+0x326/0x3c0 ? handle_bug+0x53/0xa0 ? exc_invalid_op+0x14/0x50 ? asm_exc_invalid_op+0x16/0x20 ? bnxt_rx_pkt+0x479b/0x7610 ? bnxt_rx_pkt+0x3e41/0x7610 ? __pfx_bnxt_rx_pkt+0x10/0x10 ? napi_complete_done+0x2cf/0x7d0 __bnxt_poll_work+0x4e8/0x1220 ? __pfx___bnxt_poll_work+0x10/0x10 ? __pfx_mark_lock.part.0+0x10/0x10 bnxt_poll_p5+0x36a/0xfa0 ? __pfx_bnxt_poll_p5+0x10/0x10 __napi_poll.constprop.0+0xa0/0x440 net_rx_action+0x899/0xd00 ...

Following ping.py patch adds xdp-mb-pass case. so ping.py is going to be able to reproduce this issue.(CVE-2025-21960)

In the Linux kernel, the following vulnerability has been resolved:

eth: bnxt: fix truesize for…

Record
OESA-2025-1880
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2081 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx

blk_mq_run_hw_queues() could be run when there isn't queued request and after queue is cleaned up, at that time tagset is freed, because tagset lifetime is covered by driver, and often freed after blk_cleanup_queue() returns.

So don't touch ->tagset for figuring out current default hctx by the mapping built in request queue, so use-after-free on tagset can be avoided. Meantime this way should be fast than retrieving mapping from tagset.(CVE-2022-49377)

In the Linux kernel, the following vulnerability has been resolved:

macsec: fix UAF bug for real_dev

Create a new macsec device but not get reference to real_dev. That can not ensure that real_dev is freed after macsec. That will trigger the UAF bug for real_dev as following:

================================================================== BUG: KASAN: use-after-free in macsec_get_iflink+0x5f/0x70 drivers/net/macsec.c:3662 Call Trace: ... macsec_get_iflink+0x5f/0x70 drivers/net/macsec.c:3662 dev_get_iflink+0x73/0xe0 net/core/dev.c:637 default_operstate net/core/link_watch.c:42 [inline] rfc2863_policy+0x233/0x2d0 net/core/link_watch.c:54 linkwatch_do_dev+0x2a/0x150 net/core/link_watch.c:161

Allocated by task 22209: ... alloc_netdev_mqs+0x98/0x1100 net/core/dev.c:10549 rtnl_create_link+0x9d7/0xc00 net/core/rtnetlink.c:3235 veth_newlink+0x20e/0xa90 drivers/net/veth.c:1748

Freed by task 8: ... kfree+0xd6/0x4d0 mm/slub.c:4552 kvfree+0x42/0x50 mm/util.c:615 device_release+0x9f/0x240 drivers/base/core.c:2229 kobject_cleanup lib/kobject.c:673 [inline] kobject_release lib/kobject.c:704 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1c8/0x540 lib/kobject.c:721 netdev_run_todo+0x72e/0x10b0 net/core/dev.c:10327

After commit faab39f63c1f ("net: allow out-of-order netdev unregistration") and commit e5f80fcf869a ("ipv6: give an IPv6 dev to blackhole_netdev"), we can add dev_hold_track() in macsec_dev_init() and dev_put_track() in macsec_free_netdev() to fix the problem.(CVE-2022-49390)

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_tables: don't skip expired elements during walk

There is an asymmetry between commit/abort and preparation phase if the following conditions are met:

  1. set is a verdict map ("1.2.3.4 : jump foo")
  2. timeouts are enabled

In this case, following sequence is problematic:

  1. element E in set S refers to chain C
  2. userspace requests removal of set S
  3. kernel does a set walk to decrement chain->use count for all elements from preparation phase
  4. kernel does another set walk to remove elements from the commit phase (or another walk to do a chain->use increment for all elements from abort phase)

If E has already expired in 1), it will be ignored during list walk, so its use count won't have been changed.

Then, when set is culled, ->destroy callback will zap the element via nf_tables_set_elem_destroy(), but this function is only safe for elements that have been deactivated earlier from the preparation phase: lack of earlier deactivate removes the element but leaks the chain use count, which results in a WARN splat when the chain gets removed later, plus a leak of the nft_chain structure.

Update pipapo_get() not to skip expired elements, otherwise flush command reports bogus ENOENT errors.(CVE-2023-52924)

In the Linux kernel, the following vulnerability has been resolved:

powerpc/mm/fault: Fix kfence page fault reporting

copy_from_kernel_nofault() can be called when doing read of /proc/kcore. /proc/kcore can have some unmapped kfence objects which when read via copy_from_kernel_nofault() can cause page faults. Since *_nofault() functions define their own fixup table for handling fault, use that instead of…

Record
OESA-2025-2081
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2082 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx

blk_mq_run_hw_queues() could be run when there isn't queued request and after queue is cleaned up, at that time tagset is freed, because tagset lifetime is covered by driver, and often freed after blk_cleanup_queue() returns.

So don't touch ->tagset for figuring out current default hctx by the mapping built in request queue, so use-after-free on tagset can be avoided. Meantime this way should be fast than retrieving mapping from tagset.(CVE-2022-49377)

In the Linux kernel, the following vulnerability has been resolved:

macsec: fix UAF bug for real_dev

Create a new macsec device but not get reference to real_dev. That can not ensure that real_dev is freed after macsec. That will trigger the UAF bug for real_dev as following:

================================================================== BUG: KASAN: use-after-free in macsec_get_iflink+0x5f/0x70 drivers/net/macsec.c:3662 Call Trace: ... macsec_get_iflink+0x5f/0x70 drivers/net/macsec.c:3662 dev_get_iflink+0x73/0xe0 net/core/dev.c:637 default_operstate net/core/link_watch.c:42 [inline] rfc2863_policy+0x233/0x2d0 net/core/link_watch.c:54 linkwatch_do_dev+0x2a/0x150 net/core/link_watch.c:161

Allocated by task 22209: ... alloc_netdev_mqs+0x98/0x1100 net/core/dev.c:10549 rtnl_create_link+0x9d7/0xc00 net/core/rtnetlink.c:3235 veth_newlink+0x20e/0xa90 drivers/net/veth.c:1748

Freed by task 8: ... kfree+0xd6/0x4d0 mm/slub.c:4552 kvfree+0x42/0x50 mm/util.c:615 device_release+0x9f/0x240 drivers/base/core.c:2229 kobject_cleanup lib/kobject.c:673 [inline] kobject_release lib/kobject.c:704 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x1c8/0x540 lib/kobject.c:721 netdev_run_todo+0x72e/0x10b0 net/core/dev.c:10327

After commit faab39f63c1f ("net: allow out-of-order netdev unregistration") and commit e5f80fcf869a ("ipv6: give an IPv6 dev to blackhole_netdev"), we can add dev_hold_track() in macsec_dev_init() and dev_put_track() in macsec_free_netdev() to fix the problem.(CVE-2022-49390)

In the Linux kernel, the following vulnerability has been resolved:

powerpc/mm/fault: Fix kfence page fault reporting

copy_from_kernel_nofault() can be called when doing read of /proc/kcore. /proc/kcore can have some unmapped kfence objects which when read via copy_from_kernel_nofault() can cause page faults. Since *_nofault() functions define their own fixup table for handling fault, use that instead of asking kfence to handle such faults.

Hence we search the exception tables for the nip which generated the fault. If there is an entry then we let the fixup table handler handle the page fault by returning an error from within ___do_page_fault().

This can be easily triggered if someone tries to do dd from /proc/kcore. eg. dd if=/proc/kcore of=/dev/null bs=1M

Some example false negatives:

=============================== BUG: KFENCE: invalid read in copy_from_kernel_nofault+0x9c/0x1a0 Invalid read at 0xc0000000fdff0000: copy_from_kernel_nofault+0x9c/0x1a0 0xc00000000665f950 read_kcore_iter+0x57c/0xa04 proc_reg_read_iter+0xe4/0x16c vfs_read+0x320/0x3ec ksys_read+0x90/0x154 system_call_exception+0x120/0x310 system_call_vectored_common+0x15c/0x2ec

BUG: KFENCE: use-after-free read in copy_from_kernel_nofault+0x9c/0x1a0 Use-after-free read at 0xc0000000fe050000 (in kfence-#2): copy_from_kernel_nofault+0x9c/0x1a0 0xc00000000665f950 read_kcore_iter+0x57c/0xa04 proc_reg_read_iter+0xe4/0x16c vfs_read+0x320/0x3ec ksys_read+0x90/0x154 system_call_exception+0x120/0x310 system_call_vectored_common+0x15c/0x2ec(CVE-2024-56678)

In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur

The action force…

Record
OESA-2025-2082
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:11855 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:11855
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:11861 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:11861
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:13633 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2025:13633
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:13781 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:13781
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:13946 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:13946
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:14054 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:14054
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:14094 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2025:14094
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:16919 7.5

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:16919
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:16920 7.5

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2025:16920
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:18932 7.6

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:18932
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2025:19222 7.6

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:19222
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2025:21063 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:21063
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:21082 7.1

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2025:21082
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:21667 7.5

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:21667
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:22752 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:22752
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:11855 7.1

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091)

  • kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121)

  • kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)

  • kernel: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap (CVE-2025-38088)

  • kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:11855
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:11861 7.1

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)

  • kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905)

  • kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091)

  • kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121)

  • kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113)

  • kernel: RDMA/core: Fix use-after-free when rename device name (CVE-2025-22085)

  • kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)

  • kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958)

  • kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086)

  • kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:11861
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:16919 7.5

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026)

  • kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)

  • kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087)

  • kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:16919
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:16920 7.5

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026)

  • kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)

  • kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087)

  • kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:16920
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-37797 7.8

CVE-2025-37797 in linux - Patched by Root

Root has patched CVE-2025-37797 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2025-37797
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2025-37797 7.8

CVE-2025-37797 in linux - Patched by Root

Root has patched CVE-2025-37797 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2025-37797
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2025-37797 7.8

CVE-2025-37797 in linux - Patched by Root

Root has patched CVE-2025-37797 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2025-37797
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2025-37797 8.5

In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class handling This patch fixes a Use-After-Free vulnerability in the HFSC qdisc class handling. The issue occurs due to a time-of-check/time-of-use condition in hfsc_change_class() when working with certain child qdiscs like netem or codel. The vulnerability works as follows: 1. hfsc_change_class() checks if a class has packets (q.qlen != 0) 2. It then calls qdisc_peek_len(), which for certain qdiscs (e.g., codel, netem) might drop packets and empty the queue 3. The code continues assuming the queue is still non-empty, adding the class to vttree 4. This breaks HFSC scheduler assumptions that only non-empty classes are in vttree 5. Later, when the class is destroyed, this can lead to a Use-After-Free The fix adds a second queue length check after qdisc_peek_len() to verify the queue wasn't emptied.

Record
UBUNTU-CVE-2025-37797
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2025:11855 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091)
  • kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121)
  • kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)
  • kernel: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap (CVE-2025-38088)
  • kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:11855
Updated
2026-11-02
OSVALSA-2025:11861 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)
  • kernel: wifi: iwlwifi: limit printed string from FW file (CVE-2025-21905)
  • kernel: RDMA/mlx5: Fix page_size variable overflow (CVE-2025-22091)
  • kernel: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (CVE-2025-22121)
  • kernel: ext4: avoid journaling sb update on error if journal is destroying (CVE-2025-22113)
  • kernel: RDMA/core: Fix use-after-free when rename device name (CVE-2025-22085)
  • kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)
  • kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry (CVE-2025-37958)
  • kernel: net: ch9200: fix uninitialised access during mii_nway_restart (CVE-2025-38086)
  • kernel: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (CVE-2025-38110)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:11861
Updated
2026-11-02
OSVALSA-2025:16919 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026)
  • kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)
  • kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087)
  • kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:16919
Updated
2026-11-02
OSVALSA-2025:16920 No score

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: nfsd: don't ignore the return code of svc_proc_register() (CVE-2025-22026)
  • kernel: net_sched: hfsc: Fix a UAF vulnerability in class handling (CVE-2025-37797)
  • kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (CVE-2022-50087)
  • kernel: sctp: linearize cloned gso packets in sctp_rcv (CVE-2025-38718)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:16920
Updated
2026-11-02
OSVCLSA-2025-1755682686 No score

kernel: Fix of 10 CVEs

  • net_sched: hfsc: Fix a UAF vulnerability in class handling {CVE-2025-37797}
  • sunrpc: handle SVC_GARBAGE during svc auth processing as auth error {CVE-2025-38089}
  • net: ch9200: fix uninitialised access during mii_nway_restart {CVE-2025-38086}
  • ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() {CVE-2025-22121}
  • locking/csd_lock: Change csdlock_debug from early_param to __setup {CVE-2022-50091}
  • x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes {CVE-2025-21991}
  • ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead {CVE-2022-49977}
  • NFSv4/pnfs: Fix a use-after-free bug in open {CVE-2022-50072}
  • NFSv4: Don't hold the layoutget locks across multiple RPC calls {CVE-2022-49316}
  • mm/khugepaged: fix ->anon_vma race {CVE-2023-52935}
Record
CLSA-2025-1755682686
Updated
2026-11-02
OSVCLSA-2025-1757963029 No score

kernel-uek: Fix of 195 CVEs

  • rds: tcp: block BH in TCP callbacks
  • kexec: Improve & fix crash_exclude_mem_range() to handle overlapping ranges
  • module: correctly exit module_kallsyms_on_each_symbol when fn() != 0
  • module: potential uninitialized return in module_kallsyms_on_each_symbol()
  • module: use RCU to synchronize find_module
  • kallsyms: refactor {,module_}kallsyms_on_each_symbol
  • LTS tag: v5.4.295
  • scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
  • arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() {CVE-2025-38320}
  • perf: Fix sample vs do_exit() {CVE-2025-38424}
  • s390/pci: Fix __pcilg_mio_inuser() inline assembly
  • rtc: test: Fix invalid format specifier.
  • jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() {CVE-2025-38337}
  • mm/huge_memory: fix dereferencing invalid pmd migration entry {CVE-2025-37958}
  • rtc: Make rtc_time64_to_tm() support dates before 1970
  • rtc: Improve performance of rtc_time64_to_tm(). Add tests.
  • xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create {CVE-2022-48773}
  • posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
  • ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
  • ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
  • ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board
  • net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
  • net: atm: add lec_mutex {CVE-2025-38323}
  • calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). {CVE-2025-38181}
  • tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184}
  • tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
  • atm: atmtcp: Free invalid length skb in atmtcp_c_send(). {CVE-2025-38185}
  • mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). {CVE-2025-38324}
  • wifi: carl9170: do not ping device which has failed to load firmware {CVE-2025-38420}
  • aoe: clean device rq_list in aoedev_downdev() {CVE-2025-38326}
  • hwmon: (occ) fix unaligned accesses
  • drm/nouveau/bl: increase buffer size to avoid truncate warning
  • erofs: remove unused trace event erofs_destroy_inode
  • ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
  • ALSA: hda/intel: Add Thinkpad E15 to PM deny list
  • Input: sparcspkr - avoid unannotated fall-through
  • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • atm: Revert atm_account_tx() if copy_from_iter_full() fails. {CVE-2025-38190}
  • selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
  • scsi: s390: zfcp: Ensure synchronous unit_add
  • scsi: storvsc: Increase the timeouts to storvsc_timeout
  • jffs2: check jffs2_prealloc_raw_node_refs() result in few other places {CVE-2025-38328}
  • jffs2: check that raw node were preallocated before writing summary {CVE-2025-38194}
  • drivers/rapidio/rio_cm.c: prevent possible heap overwrite {CVE-2025-38090}
  • powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
  • platform/x86: dell_rbu: Stop overwriting data buffer
  • platform: Add Surface platform directory
  • Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
  • tee: Prevent size calculation wraparound on 32-bit kernels
  • ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
  • bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
  • watchdog: da9052_wdt: respect TWDMIN
  • i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
  • sock: Correct error checking condition for (assign|release)_proto_idx()
  • scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
  • vxlan: Do not treat dst cache initialization errors as fatal
  • clk: rockchip: rk3036: mark ddrphy as critical
  • wifi: mac80211: do not offer a mesh path if forwarding is disabled
  • net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
  • pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
  • pinctrl: armada-37xx:…
Record
CLSA-2025-1757963029
Updated
2026-11-02
OSVCLSA-2025-1758009836 No score

Fix of 28 CVEs

Record
CLSA-2025-1758009836
Updated
2026-11-02
OSVCLSA-2025-1758010922 No score

Fix of 49 CVEs

Record
CLSA-2025-1758010922
Updated
2026-11-02
OSVCLSA-2025-1758019011 No score

Fix of 17 CVEs

Record
CLSA-2025-1758019011
Updated
2026-11-02
OSVCLSA-2025-1763722365 No score

kernel: Fix of 63 CVEs

  • wifi: mwifiex: Fix OOB and integer underflow when rx packets {CVE-2023-53226} {CVE-2023-53226}
  • wifi: mac80211: check S1G action frame size {CVE-2023-53257} {CVE-2023-53257}
  • wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864} {CVE-2025-39864}
  • partitions: mac: fix handling of bogus partition table {CVE-2025-21772} {CVE-2025-21772}
  • wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} {CVE-2024-58014}
  • wifi: at76c50x: fix use after free access in at76_disconnect {CVE-2025-37796} {CVE-2025-37796}
  • dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939} {CVE-2024-35939}
  • Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} {CVE-2022-50386}
  • efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} {CVE-2025-39817}
  • wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937} {CVE-2024-35937}
  • nfs: fix UAF in direct writes {CVE-2024-26958} {CVE-2024-26958}
  • wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921} {CVE-2024-36921}
  • net/smc: avoid data corruption caused by decline {CVE-2023-52775} {CVE-2023-52775}
  • bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} {CVE-2024-39487}
  • scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978} {CVE-2024-40978}
  • mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961} {CVE-2024-26961}
  • platform/x86: wmi: Fix opening of char device {CVE-2023-52864} {CVE-2023-52864}
  • net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739} {CVE-2024-26739}
  • drm/dp_mst: Fix resetting msg rx state after topology removal {CVE-2024-57876} {CVE-2024-57876}
  • net/mlx5: Add a timeout to acquire the command queue semaphore {CVE-2024-38556} {CVE-2024-38556}
  • of: Fix double free in of_parse_phandle_with_args_map {CVE-2023-52679} {CVE-2023-52679}
  • xhci: Handle TD clearing for multiple streams case {CVE-2024-40927} {CVE-2024-40927}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530} {CVE-2023-52530}
  • net: openvswitch: Fix Use-After-Free in ovs_ct_exit {CVE-2024-27395} {CVE-2024-27395}
  • r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586} {CVE-2024-38586}
  • media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764} {CVE-2023-52764}
  • media: bttv: fix use after free error due to btv->timeout timer {CVE-2023-52847} {CVE-2023-52847}
  • vsock: Fix transport_* TOCTOU {CVE-2025-38461} {CVE-2025-38461}
  • ppdev: Add an error check in register_device {CVE-2024-36015} {CVE-2024-36015}
  • HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} {CVE-2025-38556}
  • iio: adc: at91: call input_free_device() on allocated iio_dev {CVE-2024-57904} {CVE-2024-57904}
  • perf/aux: Fix AUX buffer serialization {CVE-2024-46713} {CVE-2024-46713}
  • net_sched: hfsc: Fix a UAF vulnerability in class handling {CVE-2025-37797} {CVE-2025-37797}
  • wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072} {CVE-2024-58072}
  • wifi: rtlwifi: remove unused dualmac control leftovers {CVE-2024-58072} {CVE-2024-58072}
  • wifi: rtlwifi: remove unused timer and related code {CVE-2024-58072} {CVE-2024-58072}
  • ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() {CVE-2025-22121} {CVE-2025-22121}
  • ext4: move where set the MAY_INLINE_DATA flag is set {CVE-2025-22121} {CVE-2025-22121}
  • ext4: introduce ITAIL helper {CVE-2025-22121} {CVE-2025-22121}
  • ext4: improve xattr consistency checking and error reporting {CVE-2025-22121} {CVE-2025-22121}
  • mm: fix zswap writeback race condition {CVE-2023-53178} {CVE-2023-53178}
  • fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-50367} {CVE-2022-50367}
  • ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
  • ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} {CVE-2025-39757}
  • smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527} {CVE-2025-38527} -…
Record
CLSA-2025-1763722365
Updated
2026-11-02
OSVCLSA-2026-1771078945 No score

kernel: Fix of 131 CVEs

  • net/ieee802154: don't warn zero-sized raw_sendmsg() {CVE-2022-50706}
  • scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676}
  • ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269}
  • ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572}
  • smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}
  • net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
  • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  • Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305}
  • wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
  • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724}
  • xfrm: Duplicate SPI Handling {CVE-2025-39797}
  • scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input {CVE-2022-50030}
  • net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent {CVE-2022-48883}
  • net/mlx5e: Move representor neigh cleanup to profile cleanup_tx {CVE-2023-54148}
  • dm raid: fix address sanitizer warning in raid_resume {CVE-2022-50085}
  • ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() {CVE-2022-50050}
  • nfs: fix UAF in direct writes {CVE-2024-26958}
  • iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406}
  • drm/amdkfd: Fix an illegal memory access {CVE-2023-53090}
  • scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546}
  • ALSA: pcm: Fix potential data race at PCM memory allocation helpers {CVE-2023-54072}
  • drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes {CVE-2023-53077}
  • net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
  • loop: Fix use-after-free issues {CVE-2023-53111}
  • media: rc: fix races with imon_disconnect() {CVE-2025-39993}
  • fbcon: Make sure modelist not set on unregistered console {CVE-2025-38198}
  • vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248}
  • Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673}
  • ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729}
  • libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285}
  • firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432}
  • tracing: Fix wild-memory-access in register_synth_event() {CVE-2022-49799}
  • iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) {CVE-2022-50093}
  • drm/shmem-helper: Remove another errant put in error path {CVE-2023-53084}
  • wifi: mac80211: Fix UAF in ieee80211_scan_rx() {CVE-2022-49934}
  • drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() {CVE-2022-50185}
  • ext4: fix undefined behavior in bit shift for ext4_check_flag_values {CVE-2022-50403}
  • wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() {CVE-2022-50279}
  • nbd: fix incomplete validation of ioctl arg {CVE-2023-53513}
  • r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586}
  • sctp: handle the error returned from sctp_auth_asoc_init_active_key {CVE-2022-50243}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-39493}
  • i40e: fix idx validation in config queues msg {CVE-2025-39971}
  • netfilter: nf_tables: prefer nft_chain_validate {CVE-2024-41042}
  • platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
  • netfilter: validate user input for expected length {CVE-2024-35962}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  • wifi: iwlwifi: fix a memory corruption {CVE-2024-26610}
  • pid: take a reference when initializing cad_pid {CVE-2021-47118}
  • wifi: cfg80211: check A-MSDU format more carefully…
Record
CLSA-2026-1771078945
Updated
2026-11-02
OSVMGASA-2025-0182 No score

Updated kernel, kmod-virtualbox, kmod-xtables-addons, dwarves, libtraceevent, libtracefs, kernel-firmware, kernel-firmware-nonfree, radeon-firmware & wireless-regdb packages fix security vulnerabilities

Upstream kernel version 6.6.93 fixes bugs and vulnerabilities. The kmod-virtualbox, kmod-xtables-addons, wireless-regdb & firmware packages have been updated to work with this new kernel; some updated build time requirement are here to allow building this kernel version. For information about the vulnerabilities see the links.

Record
MGASA-2025-0182
Updated
2026-11-02
OSVMGASA-2025-0183 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.93 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2025-0183
Updated
2026-11-02
OSVSUSE-SU-2025:01919-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
  • CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
  • CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-43869: perf: Fix hang while freeing sigtrap event (bsc#1229491).
  • CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
  • CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
  • CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
  • CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
  • CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
  • CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
  • CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
  • CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
  • CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
  • CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
  • CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
  • CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
  • CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
  • CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
  • CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086). -…
Record
SUSE-SU-2025:01919-1
Updated
2026-11-02
OSVSUSE-SU-2025:01951-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
  • CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
  • CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
  • CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
  • CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
  • CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
  • CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
  • CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
  • CVE-2024-49570: drm/xe/tracing: Fix a potential TP_printk UAF (bsc#1238782).
  • CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
  • CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
  • CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
  • CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
  • CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
  • CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
  • CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
  • CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
  • CVE-2024-56638: kABI fix for 'netfilter: nft_inner: incorrect percpu area handling under softirq' (bsc#1235524).
  • CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
  • CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn (bsc#1235455).
  • CVE-2024-56718: net/smc: protect link down work from execute after lgr freed (bsc#1235589).
  • CVE-2024-56719: net: stmmac: fix TSO DMA API usage causing oops (bsc#1235591).
  • CVE-2024-56751: ipv6: release nexthop on device removal (bsc#1234936).
  • CVE-2024-56758: btrfs: check folio mapping after unlock in relocate_one_folio() (bsc#1235621).
  • CVE-2024-56770: net/sched: netem: account for backlog updates from child qdisc (bsc#1235637).
  • CVE-2024-57900: ila: serialize calls to nf_register_net_hooks() (bsc#1235973).
  • CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
  • CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
  • CVE-2024-57974: udp: Deal with race between UDP socket address change and rehash (bsc#1238532).
  • CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
  • CVE-2024-58019: nvkm/gsp: correctly advance the read pointer of GSP message queue (bsc#1238997).
  • CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
  • CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
  • CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
  • CVE-2024-58074: drm/i915: Grab intel_display from the encoder to avoid potential (bsc#1238972).
  • CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036).
  • CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510). -…
Record
SUSE-SU-2025:01951-1
Updated
2026-11-02
OSVSUSE-SU-2025:01964-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
  • CVE-2024-35840: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597).
  • CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
  • CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
  • CVE-2024-50162: bpf: selftests: send packet to devmap redirect XDP (bsc#1233075).
  • CVE-2024-50163: bpf: Make sure internal and UAPI bpf_redirect flags do not overlap (bsc#1233098).
  • CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
  • CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
  • CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
  • CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
  • CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
  • CVE-2024-57924: fs: relax assertions on failure to encode file handles (bsc#1236086).
  • CVE-2024-58018: nvkm: correctly calculate the available space of the GSP cmdq buffer (bsc#1238990).
  • CVE-2024-58068: OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (bsc#1238961).
  • CVE-2024-58070: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983).
  • CVE-2024-58071: team: prevent adding a device which is already a team device lower (bsc#1238970).
  • CVE-2024-58088: bpf: Fix deadlock when freeing cgroup storage (bsc#1239510).
  • CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
  • CVE-2025-21683: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704).
  • CVE-2025-21696: mm: clear uffd-wp PTE/PMD state on mremap() (bsc#1237111).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21707: mptcp: consolidate suboption status (bsc#1238862).
  • CVE-2025-21729: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion (bsc#1237874).
  • CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1237882).
  • CVE-2025-21758: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737).
  • CVE-2025-21768: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (bsc#1238714).
  • CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
  • CVE-2025-21792: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (bsc#1238745).
  • CVE-2025-21806: net: let net.core.dev_weight always be non-zero (bsc#1238746).
  • CVE-2025-21808: net: xdp: Disallow attaching device-bound programs in generic mode (bsc#1238742).
  • CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471).
  • CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
  • CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (bsc#1239108).
  • CVE-2025-21836: io_uring/kbuf: reallocate buf lists on upgrade (bsc#1239066).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21863: io_uring: prevent opcode speculation (bsc#1239475).
  • CVE-2025-21867: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (bsc#1240181).
  • CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails (bsc#1240184).
  • CVE-2025-21875: mptcp: always handle address removal under msk socket lock (bsc#1240168).
  • CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
  • CVE-2025-21884: net: better track kernel sockets lifetime (bsc#1240171).
  • CVE-2025-21887: ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (bsc#1240176).
  • CVE-2025-21889: perf/core: Add RCU read lock protection to perf_iterate_ctx() (bsc#1240167).
  • CVE-2025-21894: net: enetc: VFs do not…
Record
SUSE-SU-2025:01964-1
Updated
2026-11-02
OSVSUSE-SU-2025:01965-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006).
  • CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
  • CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in (bsc#1233192).
  • CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
  • CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992).
  • CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142).
  • CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
  • CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774).
  • CVE-2025-21814: ptp: Ensure info->enable callback is always set (bsc#1238473).
  • CVE-2025-21919: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593).
  • CVE-2025-22021: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282).
  • CVE-2025-22030: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376).
  • CVE-2025-22056: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525).
  • CVE-2025-22057: net: decrease cached dst counters in dst_release (bsc#1241533).
  • CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351).
  • CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305).
  • CVE-2025-22103: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448).
  • CVE-2025-23140: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (bsc#1242763).
  • CVE-2025-23150: ext4: fix off-by-one error in do_split (bsc#1242513).
  • CVE-2025-23160: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (bsc#1242507).
  • CVE-2025-37748: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523).
  • CVE-2025-37749: net: ppp: Add bound checking for skb data on ppp_sync_txmung (bsc#1242859).
  • CVE-2025-37750: smb: client: fix UAF in decryption with multichannel (bsc#1242510).
  • CVE-2025-37755: net: libwx: handle page_pool_dev_alloc_pages error (bsc#1242506).
  • CVE-2025-37773: virtiofs: add filesystem context source name check (bsc#1242502).
  • CVE-2025-37780: isofs: Prevent the use of too small fid (bsc#1242786).
  • CVE-2025-37787: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered (bsc#1242585).
  • CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762).
  • CVE-2025-37790: net: mctp: Set SOCK_RCU_FREE (bsc#1242509).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
  • CVE-2025-37803: udmabuf: fix a buf size overflow issue during udmabuf creation (bsc#1242852).
  • CVE-2025-37804: io_uring: always do atomic put from iowq (bsc#1242854).
  • CVE-2025-37809: usb: typec: class: Unlocked on error in typec_register_partner() (bsc#1242856).
  • CVE-2025-37820: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (bsc#1242866).
  • CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
  • CVE-2025-37824: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (bsc#1242867).
  • CVE-2025-37829: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (bsc#1242875).
  • CVE-2025-37830: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (bsc#1242860).
  • CVE-2025-37831: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (bsc#1242861).
  • CVE-2025-37833: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (bsc#1242868).
  • CVE-2025-37842: spi: fsl-qspi: Fix double cleanup in probe error path (bsc#1242951).
  • CVE-2025-37870: drm/amd/display: prevent hang on link training fail…
Record
SUSE-SU-2025:01965-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 5 CVEs
 before 6.12.0-55.24.1.el10_0
6.12.0-55.24.1.el10_0
kernel-doc
AlmaLinux:10
From an advisory covering 5 CVEs
 before 6.12.0-55.24.1.el10_0
6.12.0-55.24.1.el10_0
kernel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-debug
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-modules
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-cross-headers
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug-modules
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-devel-matched
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-doc
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-headers
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-modules
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-modules-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-modules-extra
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-debug
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-debug-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-debug-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-debug-modules
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-modules
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-modules-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-64k-modules-extra
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-core
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
kernel-rt-debug
AlmaLinux:9
From an advisory covering 10 CVEs
 before 5.14.0-570.30.1.el9_6
5.14.0-570.30.1.el9_6
linux-lts
Alpaquita:23
 6.1.134-r0 up to 6.1.140-r0
6.1.140-r0
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.7.els17
7.0.0-284.1101.el9_2.tuxcare.7.els17
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.7.els17
2:1.0.0-2.el9_2.tuxcare.7.els17
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.7.els17
2:1.0.0-2.el9_2.tuxcare.7.els17
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.7.els17
2:1.0.0-2.el9_2.tuxcare.7.els17
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 10 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els17
5.14.0-284.1101.el9_2.tuxcare.7.els17
bpftool
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel-uek
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel-uek-container
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel-uek-container-debug
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel-uek-debug
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel-uek-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel-uek-devel
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel-uek-headers
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
kernel-uek-tools
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
perf
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
python-perf
TuxCare:OracleLinux:7
From an advisory covering 194 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2
5.4.17-2136.338.4.2.el7uek.tuxcare.els2
linux-buildinfo-4.4.0-278-tuxcare.els49-generic
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
linux-buildinfo-4.4.0-278-tuxcare.els49-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 28 CVEs
 before 4.4.0-278.312
4.4.0-278.312
Kernel
Linux
 4.14.0 up to 5.4.293, 5.5.0 up to 5.10.237, 5.11.0 up to 5.15.181, 5.16.0 up to 6.1.136, 6.2.0 up to 6.6.89, 6.7.0 up to 6.12.26, 6.13.0 up to 6.14.5
5.4.2935.10.2375.15.1816.1.1366.6.896.12.266.14.5
linux
Debian:12
 before 6.1.137-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 33 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.137-1
linux
Debian:13
 before 6.12.27-1
6.12.27-1
linux
Debian:14
 before 6.12.27-1
6.12.27-1
linux
Debian:11
From an advisory covering 242 CVEs
 before 5.10.237-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 40 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.234-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.237-1
linux-6.1
Debian:11
From an advisory covering 261 CVEs
 before 6.1.137-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u16.1.128-1~deb11u16.1.129-1~deb11u1
6.1.137-1~deb11u1
kernel
Mageia:9
From an advisory covering 84 CVEs
 before 6.6.93-1.mga9
6.6.93-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 84 CVEs
 before 7.1.8-3.mga9
7.1.8-3.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 84 CVEs
 before 3.24-80.mga9
3.24-80.mga9
dwarves
Mageia:9
From an advisory covering 84 CVEs
 before 1.30-1.mga9
1.30-1.mga9
libtraceevent
Mageia:9
From an advisory covering 84 CVEs
 before 1.8.4-1.mga9
1.8.4-1.mga9
libtracefs
Mageia:9
From an advisory covering 84 CVEs
 before 1.8.2-1.mga9
1.8.2-1.mga9
kernel-firmware
Mageia:9
From an advisory covering 84 CVEs
 before 20250509-1.mga9
20250509-1.mga9
wireless-regdb
Mageia:9
From an advisory covering 84 CVEs
 before 20250220-1.mga9
20250220-1.mga9
kernel-firmware-nonfree
Mageia:9
From an advisory covering 84 CVEs
 before 20250509-1.mga9.nonfree
20250509-1.mga9.nonfree
radeon-firmware
Mageia:9
From an advisory covering 84 CVEs
 before 20250509-1.mga9.nonfree
20250509-1.mga9.nonfree
kernel-linus
Mageia:9
From an advisory covering 84 CVEs
 before 6.6.93-1.mga9
6.6.93-1.mga9
kernel
openEuler:24.03-LTS
From an advisory covering 46 CVEs
 before 6.6.0-102.0.0.94.oe2403
6.6.0-102.0.0.94.oe2403
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 50 CVEs
 before 6.6.0-102.0.0.105.oe2403sp1
6.6.0-102.0.0.105.oe2403sp1
kernel
openEuler:24.03-LTS-SP2
From an advisory covering 43 CVEs
 before 6.6.0-102.0.0.108.oe2403sp2
6.6.0-102.0.0.108.oe2403sp2
kernel
openEuler:22.03-LTS-SP3
From an advisory covering 27 CVEs
 before 5.10.0-279.0.0.181.oe2203sp3
5.10.0-279.0.0.181.oe2203sp3
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 26 CVEs
 before 5.10.0-279.0.0.182.oe2203sp4
5.10.0-279.0.0.182.oe2203sp4
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-64k-debug-devel
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-64k-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-64k-devel
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-64k-devel-matched
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-debug-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-debug-devel
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-debug-devel-matched
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-devel
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-devel-matched
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-doc
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-rt-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-tools-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-zfcpdump-devel
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
libperf-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
perf
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
perf-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
python3-perf
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
python3-perf-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
rtla
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
rv
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-64k
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-64k-core
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-64k-debug
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-64k-debug-core
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-64k-debug-modules
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-64k-modules
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-64k-modules-core
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-64k-modules-extra
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-abi-stablelists
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-core
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-debug
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-debug-core
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-debug-modules
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel-debug-modules-core
Red Hat:enterprise_linux:10.0
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel
Rocky Linux:10
From an advisory covering 5 CVEs
 before 0:6.12.0-55.24.1.el10_0
0:6.12.0-55.24.1.el10_0
kernel
Rocky Linux:9
From an advisory covering 10 CVEs
 before 0:5.14.0-570.30.1.el9_6
0:5.14.0-570.30.1.el9_6
kernel
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:4.18.0-553.77.1.el8_10
0:4.18.0-553.77.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 4 CVEs
 before 0:4.18.0-553.77.1.rt7.418.el8_10
0:4.18.0-553.77.1.rt7.418.el8_10
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 433 CVEs
 before 6.4.0-15061.21.coco15sp6.1
6.4.0-15061.21.coco15sp6.1
kernel-coco_debug
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 433 CVEs
 before 6.4.0-15061.21.coco15sp6.1
6.4.0-15061.21.coco15sp6.1
kernel-source-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 433 CVEs
 before 6.4.0-15061.21.coco15sp6.1
6.4.0-15061.21.coco15sp6.1
kernel-syms-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 433 CVEs
 before 6.4.0-15061.21.coco15sp6.1
6.4.0-15061.21.coco15sp6.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1.150700.17.2.1
6.4.0-150700.53.3.1.150700.17.2.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-livepatch-SLE15-SP7_Update_1
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 321 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 321 CVEs
 before 6.4.0-150700.53.3.1
6.4.0-150700.53.3.1
kernel-livepatch-SLE15-SP6-RT_Update_11
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 339 CVEs
 before 1-150600.1.3.2
1-150600.1.3.2
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 339 CVEs
 before 6.4.0-150600.10.39.1
6.4.0-150600.10.39.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 171 CVEs
 before 6.4.0-150600.8.40.1
6.4.0-150600.8.40.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 171 CVEs
 before 6.4.0-150600.8.40.1
6.4.0-150600.8.40.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 171 CVEs
 before 6.4.0-150600.8.40.1
6.4.0-150600.8.40.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 171 CVEs
 before 6.4.0-150600.8.40.1
6.4.0-150600.8.40.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 171 CVEs
 before 6.4.0-150600.8.40.1
6.4.0-150600.8.40.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 171 CVEs
 before 6.4.0-150600.8.40.1
6.4.0-150600.8.40.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 329 CVEs
 before 6.4.0-150700.20.3.1
6.4.0-150700.20.3.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 329 CVEs
 before 6.4.0-150700.20.3.1
6.4.0-150700.20.3.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 329 CVEs
 before 6.4.0-150700.20.3.1
6.4.0-150700.20.3.1
kernel-livepatch-SLE15-SP7-RT_Update_1
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 119 CVEs
 before 1-150700.1.3.1
1-150700.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 119 CVEs
 before 6.4.0-150700.7.3.1
6.4.0-150700.7.3.1
kernel-rt_debug
SUSE:Real Time Module 15 SP7
From an advisory covering 119 CVEs
 before 6.4.0-150700.7.3.1
6.4.0-150700.7.3.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 119 CVEs
 before 6.4.0-150700.7.3.1
6.4.0-150700.7.3.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 119 CVEs
 before 6.4.0-150700.7.3.1
6.4.0-150700.7.3.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 169 CVEs
 before 4.12.14-122.261.1
4.12.14-122.261.1
kgraft-patch-SLE12-SP5_Update_69
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 169 CVEs
 before 1-8.3.1
1-8.3.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 169 CVEs
 before 4.12.14-122.261.1
4.12.14-122.261.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 169 CVEs
 before 4.12.14-122.261.1
4.12.14-122.261.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 169 CVEs
 before 4.12.14-122.261.1
4.12.14-122.261.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 169 CVEs
 before 4.12.14-122.261.1
4.12.14-122.261.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 169 CVEs
 before 4.12.14-122.261.1
4.12.14-122.261.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 169 CVEs
 before 4.12.14-122.261.1
4.12.14-122.261.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1.150600.12.24.1
6.4.0-150600.23.53.1.150600.12.24.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1.150600.12.24.1
6.4.0-150600.23.53.1.150600.12.24.1
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 171 CVEs
 before 6.4.0-150600.23.53.1
6.4.0-150600.23.53.1
linux-azure
Ubuntu:Pro:14.04:LTS
 before 4.15.0-1191.206~14.04.1, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
4.15.0-1191.206~14.04.1
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1183.196~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1183.196~16.04.1
linux-azure
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1191.206~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1191.206~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1176.193~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1176.193~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-240.252~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-240.252~16.04.1
linux-oracle
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1145.156~16.04.1, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
4.15.0-1145.156~16.04.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux
Ubuntu:Pro:18.04:LTS
 before 4.15.0-240.252, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-240.252
linux-aws
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1183.196, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1183.196
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1149.159~18.04.1, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
5.4.0-1149.159~18.04.1
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1191.206, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
4.15.0-1191.206
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1154.161~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
5.4.0-1154.161~18.04.1
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1176.193, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
4.15.0-1176.193
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1152.161~18.04.1, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
5.4.0-1152.161~18.04.1
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-220.240~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-220.240~18.04.1
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1095.100~18.04.1, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
5.4.0-1095.100~18.04.1
linux-kvm
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1166.171, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
4.15.0-1166.171
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1145.156, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
4.15.0-1145.156
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1148.158~18.04.1, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
5.4.0-1148.158~18.04.1
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-1132.145~18.04.1, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
5.4.0-1132.145~18.04.1
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2121.127, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
4.15.0-2121.127
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2100.106, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
4.15.0-2100.106
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-1138.149, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
4.15.0-1138.149
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2084.90, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
4.15.0-2084.90
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 before 5.4.0-220.240, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-220.240
linux-aws
Ubuntu:Pro:20.04:LTS
 before 5.4.0-1149.159, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
5.4.0-1149.159
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1088.95~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1088.95~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-37797 is a high vulnerability (CVSS 7.8) in Debian Linux, published May 2, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 13th percentile. Fixed in linux-lts 6.1.140-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,456 package rows, 1,314 versions, 3,555 references and the rest of 14 source descriptions. The JSON record has them. Also not on the record: 61 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 110 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open