CVE-2025-38166

bpf: fix ktls panic with sockmap

7.8 HighFix available

What does this mean?

: 7.8v3.1, from CVE List
: 0.20%10th percentile
Fixed in: 6.6.96.1-1kernel
Published: July 3, 2025
Modified: November 10, 2026
Also known as: ALSA-2026:18134ALSA-2026:18587AZL-64637AZL-72760BELL-CVE-2025-38166CLSA-2026-1777616064CLSA-2026-1777633439DEBIAN-CVE-2025-38166
Show 51 moreShow less
DLA-4328-1DSA-5973-1EUVD-2025-19778GHSA-4grq-496q-c892MGASA-2025-0218MGASA-2025-0219OESA-2025-2120OESA-2025-2121OESA-2025-2122RHSA-2026:18134RHSA-2026:18587ROOT-OS-DEBIAN-11-CVE-2025-38166ROOT-OS-DEBIAN-12-CVE-2025-38166ROOT-OS-UBUNTU-2204-CVE-2025-38166ROOT-OS-UBUNTU-2404-CVE-2025-38166SUSE-SU-2025:02846-1SUSE-SU-2025:02853-1SUSE-SU-2025:02923-1SUSE-SU-2025:02969-1SUSE-SU-2025:02996-1SUSE-SU-2025:02997-1SUSE-SU-2025:03011-1SUSE-SU-2025:03023-1SUSE-SU-2025:20577-1SUSE-SU-2025:20586-1SUSE-SU-2025:20601-1SUSE-SU-2025:20602-1UBUNTU-CVE-2025-38166USN-7769-1USN-7769-2USN-7769-3USN-7770-1USN-7771-1USN-7789-1USN-7789-2USN-8028-1USN-8028-2USN-8028-3USN-8028-4USN-8028-5USN-8028-6USN-8028-7USN-8028-8USN-8031-1USN-8031-2USN-8031-3USN-8052-1USN-8052-2USN-8074-1USN-8074-2USN-8126-1

In the Linux kernel, the following vulnerability has been resolved:

bpf: fix ktls panic with sockmap

[ 2172.936997] ------------[ cut here ]------------ [ 2172.936999] kernel BUG at lib/iov_iter.c:629! ...... [ 2172.944996] PKRU: 55555554 [ 2172.945155] Call Trace: [ 2172.945299] <TASK> [ 2172.945428] ? die+0x36/0x90 [ 2172.945601] ? do_trap+0xdd/0x100 [ 2172.945795] ? iov_iter_revert+0x178/0x180 [ 2172.946031] ? iov_iter_revert+0x178/0x180 [ 2172.946267] ? do_error_trap+0x7d/0x110 [ 2172.946499] ? iov_iter_revert+0x178/0x180 [ 2172.946736] ? exc_invalid_op+0x50/0x70 [ 2172.946961] ? iov_iter_revert+0x178/0x180 [ 2172.947197] ? asm_exc_invalid_op+0x1a/0x20 [ 2172.947446] ? iov_iter_revert+0x178/0x180 [ 2172.947683] ? iov_iter_revert+0x5c/0x180 [ 2172.947913] tls_sw_sendmsg_locked.isra.0+0x794/0x840 [ 2172.948206] tls_sw_sendmsg+0x52/0x80 [ 2172.948420] ? inet_sendmsg+0x1f/0x70 [ 2172.948634] __sys_sendto+0x1cd/0x200 [ 2172.948848] ? find_held_lock+0x2b/0x80 [ 2172.949072] ? syscall_trace_enter+0x140/0x270 [ 2172.949330] ? __lock_release.isra.0+0x5e/0x170 [ 2172.949595] ? find_held_lock+0x2b/0x80 [ 2172.949817] ? syscall_trace_enter+0x140/0x270 [ 2172.950211] ? lockdep_hardirqs_on_prepare+0xda/0x190 [ 2172.950632] ? ktime_get_coarse_real_ts64+0xc2/0xd0 [ 2172.951036] __x64_sys_sendto+0x24/0x30 [ 2172.951382] do_syscall_64+0x90/0x170 ......

After calling bpf_exec_tx_verdict(), the size of msg_pl->sg may increase, e.g., when the BPF program executes bpf_msg_push_data().

If the BPF program sets cork_bytes and sg.size is smaller than cork_bytes, it will return -ENOSPC and attempt to roll back to the non-zero copy logic. However, during rollback, msg->msg_iter is reset, but since msg_pl->sg.size has been increased, subsequent executions will exceed the actual size of msg_iter. ''' iov_iter_revert(&msg->msg_iter, msg_pl->sg.size - orig_size); '''

The changes in this commit are based on the following considerations:

When cork_bytes is set, rolling back to non-zero copy logic is pointless and can directly go to zero-copy logic.
We can not calculate the correct number of bytes to revert msg_iter.

Assume the original data is "abcdefgh" (8 bytes), and after 3 pushes by the BPF program, it becomes 11-byte data: "abc?de?fgh?". Then, we set cork_bytes to 6, which means the first 6 bytes have been processed, and the remaining 5 bytes "?fgh?" will be cached until the length meets the cork_bytes requirement.

However, some data in "?fgh?" is not within 'sg->msg_iter' (but in msg_pl instead), especially the data "?" we pushed.

So it doesn't seem as simple as just reverting through an offset of msg_iter.

For non-TLS sockets in tcp_bpf_sendmsg, when a "cork" situation occurs, the user-space send() doesn't return an error, and the returned length is the same as the input length parameter, even if some data is cached.

Additionally, I saw that the current non-zero-copy logic for handling corking is written as: ''' line 1177 else if (ret != -EAGAIN) { if (ret == -ENOSPC) ret = 0; goto send_end; '''

So it's ok to just return 'copied' without error when a "cork" situation occurs.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.20%Up 0.2 points since Jul 3, 2025

What each source reports

CVE List Score used 7.8

bpf: fix ktls panic with sockmap

In the Linux kernel, the following vulnerability has been resolved:

bpf: fix ktls panic with sockmap

After calling bpf_exec_tx_verdict(), the size of msg_pl->sg may increase, e.g., when the BPF program executes bpf_msg_push_data().

The changes in this commit are based on the following considerations:

When cork_bytes is set, rolling back to non-zero copy logic is pointless and can directly go to zero-copy logic.
We can not calculate the correct number of bytes to revert msg_iter.

However, some data in "?fgh?" is not within 'sg->msg_iter' (but in msg_pl instead), especially the data "?" we pushed.

So it doesn't seem as simple as just reverting through an offset of msg_iter.

For non-TLS sockets in tcp_bpf_sendmsg, when a "cork" situation occurs, the user-space send() doesn't return an error, and the returned length is the same as the input length parameter, even if some data is cached.

Additionally, I saw that the current non-zero-copy logic for handling corking is written as: ''' line 1177 else if (ret != -EAGAIN) { if (ret == -ENOSPC) ret = 0; goto send_end; '''

So it's ok to just return 'copied' without error when a "cork" situation occurs.

Record: CVE-2025-38166
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2025-19778 7.8

In the Linux kernel, the following vulnerability has been resolved:

bpf: fix ktls panic with sockmap

After calling bpf_exec_tx_verdict(), the size of msg_pl->sg may increase, e.g., when the BPF program executes bpf_msg_push_data().

The changes in this commit are based on the following considerations:

When cork_bytes is set, rolling back to non-zero copy logic is pointless and can directly go to zero-copy logic.
We can not calculate the correct number of bytes to revert msg_iter.

However, some data in "?fgh?" is not within 'sg->msg_iter' (but in msg_pl instead), especially the data "?" we pushed.

So it doesn't seem as simple as just reverting through an offset of msg_iter.

For non-TLS sockets in tcp_bpf_sendmsg, when a "cork" situation occurs, the user-space send() doesn't return an error, and the returned length is the same as the input length parameter, even if some data is cached.

Additionally, I saw that the current non-zero-copy logic for handling corking is written as: ''' line 1177 else if (ret != -EAGAIN) { if (ret == -ENOSPC) ret = 0; goto send_end; '''

So it's ok to just return 'copied' without error when a "cork" situation occurs.

Record: EUVD-2025-19778
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-4grq-496q-c892 5.5

In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with...

In the Linux kernel, the following vulnerability has been resolved:

bpf: fix ktls panic with sockmap

After calling bpf_exec_tx_verdict(), the size of msg_pl->sg may increase, e.g., when the BPF program executes bpf_msg_push_data().

The changes in this commit are based on the following considerations:

When cork_bytes is set, rolling back to non-zero copy logic is pointless and can directly go to zero-copy logic.
We can not calculate the correct number of bytes to revert msg_iter.

However, some data in "?fgh?" is not within 'sg->msg_iter' (but in msg_pl instead), especially the data "?" we pushed.

So it doesn't seem as simple as just reverting through an offset of msg_iter.

For non-TLS sockets in tcp_bpf_sendmsg, when a "cork" situation occurs, the user-space send() doesn't return an error, and the returned length is the same as the input length parameter, even if some data is cached.

Additionally, I saw that the current non-zero-copy logic for handling corking is written as: ''' line 1177 else if (ret != -EAGAIN) { if (ret == -ENOSPC) ret = 0; goto send_end; '''

So it's ok to just return 'copied' without error when a "cork" situation occurs.

Record: GHSA-4grq-496q-c892
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

bpf: fix ktls panic with sockmap

After calling bpf_exec_tx_verdict(), the size of msg_pl->sg may increase, e.g., when the BPF program executes bpf_msg_push_data().

The changes in this commit are based on the following considerations:

When cork_bytes is set, rolling back to non-zero copy logic is pointless and can directly go to zero-copy logic.
We can not calculate the correct number of bytes to revert msg_iter.

However, some data in "?fgh?" is not within 'sg->msg_iter' (but in msg_pl instead), especially the data "?" we pushed.

So it doesn't seem as simple as just reverting through an offset of msg_iter.

For non-TLS sockets in tcp_bpf_sendmsg, when a "cork" situation occurs, the user-space send() doesn't return an error, and the returned length is the same as the input length parameter, even if some data is cached.

Additionally, I saw that the current non-zero-copy logic for handling corking is written as: ''' line 1177 else if (ret != -EAGAIN) { if (ret == -ENOSPC) ret = 0; goto send_end; '''

So it's ok to just return 'copied' without error when a "cork" situation occurs.

Record: CVE-2025-38166
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVBELL-CVE-2025-38166 5.5

Record: BELL-CVE-2025-38166
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 7.8

bpf: fix ktls panic with sockmap

In the Linux kernel, the following vulnerability has been resolved:

bpf: fix ktls panic with sockmap

After calling bpf_exec_tx_verdict(), the size of msg_pl->sg may increase, e.g., when the BPF program executes bpf_msg_push_data().

The changes in this commit are based on the following considerations:

When cork_bytes is set, rolling back to non-zero copy logic is pointless and can directly go to zero-copy logic.
We can not calculate the correct number of bytes to revert msg_iter.

However, some data in "?fgh?" is not within 'sg->msg_iter' (but in msg_pl instead), especially the data "?" we pushed.

So it doesn't seem as simple as just reverting through an offset of msg_iter.

For non-TLS sockets in tcp_bpf_sendmsg, when a "cork" situation occurs, the user-space send() doesn't return an error, and the returned length is the same as the input length parameter, even if some data is cached.

Additionally, I saw that the current non-zero-copy logic for handling corking is written as: ''' line 1177 else if (ret != -EAGAIN) { if (ret == -ENOSPC) ret = 0; goto send_end; '''

So it's ok to just return 'copied' without error when a "cork" situation occurs.

Record: CVE-2025-38166
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 46 moreShow less

OSVDEBIAN-CVE-2025-38166 5.5

In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap [ 2172.936997] ------------[ cut here ]------------ [ 2172.936999] kernel BUG at lib/iov_iter.c:629! ...... [ 2172.944996] PKRU: 55555554 [ 2172.945155] Call Trace: [ 2172.945299] <TASK> [ 2172.945428] ? die+0x36/0x90 [ 2172.945601] ? do_trap+0xdd/0x100 [ 2172.945795] ? iov_iter_revert+0x178/0x180 [ 2172.946031] ? iov_iter_revert+0x178/0x180 [ 2172.946267] ? do_error_trap+0x7d/0x110 [ 2172.946499] ? iov_iter_revert+0x178/0x180 [ 2172.946736] ? exc_invalid_op+0x50/0x70 [ 2172.946961] ? iov_iter_revert+0x178/0x180 [ 2172.947197] ? asm_exc_invalid_op+0x1a/0x20 [ 2172.947446] ? iov_iter_revert+0x178/0x180 [ 2172.947683] ? iov_iter_revert+0x5c/0x180 [ 2172.947913] tls_sw_sendmsg_locked.isra.0+0x794/0x840 [ 2172.948206] tls_sw_sendmsg+0x52/0x80 [ 2172.948420] ? inet_sendmsg+0x1f/0x70 [ 2172.948634] __sys_sendto+0x1cd/0x200 [ 2172.948848] ? find_held_lock+0x2b/0x80 [ 2172.949072] ? syscall_trace_enter+0x140/0x270 [ 2172.949330] ? __lock_release.isra.0+0x5e/0x170 [ 2172.949595] ? find_held_lock+0x2b/0x80 [ 2172.949817] ? syscall_trace_enter+0x140/0x270 [ 2172.950211] ? lockdep_hardirqs_on_prepare+0xda/0x190 [ 2172.950632] ? ktime_get_coarse_real_ts64+0xc2/0xd0 [ 2172.951036] __x64_sys_sendto+0x24/0x30 [ 2172.951382] do_syscall_64+0x90/0x170 ...... After calling bpf_exec_tx_verdict(), the size of msg_pl->sg may increase, e.g., when the BPF program executes bpf_msg_push_data(). If the BPF program sets cork_bytes and sg.size is smaller than cork_bytes, it will return -ENOSPC and attempt to roll back to the non-zero copy logic. However, during rollback, msg->msg_iter is reset, but since msg_pl->sg.size has been increased, subsequent executions will exceed the actual size of msg_iter. ''' iov_iter_revert(&msg->msg_iter, msg_pl->sg.size - orig_size); ''' The changes in this commit are based on the following considerations: 1. When cork_bytes is set, rolling back to non-zero copy logic is pointless and can directly go to zero-copy logic. 2. We can not calculate the correct number of bytes to revert msg_iter. Assume the original data is "abcdefgh" (8 bytes), and after 3 pushes by the BPF program, it becomes 11-byte data: "abc?de?fgh?". Then, we set cork_bytes to 6, which means the first 6 bytes have been processed, and the remaining 5 bytes "?fgh?" will be cached until the length meets the cork_bytes requirement. However, some data in "?fgh?" is not within 'sg->msg_iter' (but in msg_pl instead), especially the data "?" we pushed. So it doesn't seem as simple as just reverting through an offset of msg_iter. 3. For non-TLS sockets in tcp_bpf_sendmsg, when a "cork" situation occurs, the user-space send() doesn't return an error, and the returned length is the same as the input length parameter, even if some data is cached. Additionally, I saw that the current non-zero-copy logic for handling corking is written as: ''' line 1177 else if (ret != -EAGAIN) { if (ret == -ENOSPC) ret = 0; goto send_end; ''' So it's ok to just return 'copied' without error when a "cork" situation occurs.

Record: DEBIAN-CVE-2025-38166
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2025-2120 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

gtp: Destroy device along with udp socket's netns dismantle.

gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created.

Even when src_net is removed, the device stays alive on dev_net(dev). Then, removing src_net triggers the splat below. [0]

In this example, gtp0 is created in ns2, and the udp socket is created in ns1.

ip netns add ns1 ip netns add ns2 ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn ip netns del ns1

Let's link the device to the socket's netns instead.

Now, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove all gtp devices in the netns.

[0]: ref_tracker: net notrefcnt@000000003d6e7d05 has 1/2 users at sk_alloc (./include/net/net_namespace.h:345 net/core/sock.c:2236) inet_create (net/ipv4/af_inet.c:326 net/ipv4/af_inet.c:252) __sock_create (net/socket.c:1558) udp_sock_create4 (net/ipv4/udp_tunnel_core.c:18) gtp_create_sock (./include/net/udp_tunnel.h:59 drivers/net/gtp.c:1423) gtp_create_sockets (drivers/net/gtp.c:1447) gtp_newlink (drivers/net/gtp.c:1507) rtnl_newlink (net/core/rtnetlink.c:3786 net/core/rtnetlink.c:3897 net/core/rtnetlink.c:4012) rtnetlink_rcv_msg (net/core/rtnetlink.c:6922) netlink_rcv_skb (net/netlink/af_netlink.c:2542) netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1347) netlink_sendmsg (net/netlink/af_netlink.c:1891) ____sys_sendmsg (net/socket.c:711 net/socket.c:726 net/socket.c:2583) ___sys_sendmsg (net/socket.c:2639) __sys_sendmsg (net/socket.c:2669) do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)

WARNING: CPU: 1 PID: 60 at lib/ref_tracker.c:179 ref_tracker_dir_exit (lib/ref_tracker.c:179) Modules linked in: CPU: 1 UID: 0 PID: 60 Comm: kworker/u16:2 Not tainted 6.13.0-rc5-00147-g4c1224501e9d #5 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 Workqueue: netns cleanup_net RIP: 0010:ref_tracker_dir_exit (lib/ref_tracker.c:179) Code: 00 00 00 fc ff df 4d 8b 26 49 bd 00 01 00 00 00 00 ad de 4c 39 f5 0f 85 df 00 00 00 48 8b 74 24 08 48 89 df e8 a5 cc 12 02 90 <0f> 0b 90 48 8d 6b 44 be 04 00 00 00 48 89 ef e8 80 de 67 ff 48 89 RSP: 0018:ff11000009a07b60 EFLAGS: 00010286 RAX: 0000000000002bd3 RBX: ff1100000f4e1aa0 RCX: 1ffffffff0e40ac6 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8423ee3c RBP: ff1100000f4e1af0 R08: 0000000000000001 R09: fffffbfff0e395ae R10: 0000000000000001 R11: 0000000000036001 R12: ff1100000f4e1af0 R13: dead000000000100 R14: ff1100000f4e1af0 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ff1100006ce80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9b2464bd98 CR3: 0000000005286005 CR4: 0000000000771ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> ? __warn (kernel/panic.c:748) ? ref_tracker_dir_exit (lib/ref_tracker.c:179) ? report_bug (lib/bug.c:201 lib/bug.c:219) ? handle_bug (arch/x86/kernel/traps.c:285) ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1)) ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621) ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:97 ./arch/x86/include/asm/irqflags.h:155 ./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194) ? ref_tracker_dir_exit (lib/ref_tracker.c:179) ? __pfx_ref_tracker_dir_exit (lib/ref_tracker.c:158) ? kfree (mm/slub.c:4613 mm/slub.c:4761) net_free (net/core/net_namespace.c:476 net/core/net_namespace.c:467) cleanup_net (net/core/net_namespace.c:664 (discriminator 3)) process_one_work…

Record: OESA-2025-2120
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-2121 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

gtp: Destroy device along with udp socket's netns dismantle.

gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created.

Even when src_net is removed, the device stays alive on dev_net(dev). Then, removing src_net triggers the splat below. [0]

In this example, gtp0 is created in ns2, and the udp socket is created in ns1.

ip netns add ns1 ip netns add ns2 ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn ip netns del ns1

Let's link the device to the socket's netns instead.

Now, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove all gtp devices in the netns.

Record: OESA-2025-2121
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-2122 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

gtp: Destroy device along with udp socket's netns dismantle.

gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created.

Even when src_net is removed, the device stays alive on dev_net(dev). Then, removing src_net triggers the splat below. [0]

In this example, gtp0 is created in ns2, and the udp socket is created in ns1.

ip netns add ns1 ip netns add ns2 ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn ip netns del ns1

Let's link the device to the socket's netns instead.

Now, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove all gtp devices in the netns.

Record: OESA-2025-2122
CVSS 3.1: 8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:18134 8.7

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:18134
CVSS 3.1: 8.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2026:18587 8.7

Red Hat Security Advisory: kernel security update

Record: RHSA-2026:18587
CVSS 3.1: 8.7 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-11-CVE-2025-38166 5.5

CVE-2025-38166 in linux - Patched by Root

Root has patched CVE-2025-38166 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-11-CVE-2025-38166
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2025-38166 5.5

CVE-2025-38166 in linux - Patched by Root

Root has patched CVE-2025-38166 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2025-38166
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2204-CVE-2025-38166 5.5

CVE-2025-38166 in linux - Patched by Root

Root has patched CVE-2025-38166 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2025-38166
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-06

OSVROOT-OS-UBUNTU-2404-CVE-2025-38166 5.5

CVE-2025-38166 in linux - Patched by Root

Root has patched CVE-2025-38166 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2025-38166
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-06

OSVUBUNTU-CVE-2025-38166 6.7

Record: UBUNTU-CVE-2025-38166
CVSS 4.0: 6.7 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-10

OSVALSA-2026:18134 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (CVE-2024-56633)
kernel: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (CVE-2025-21839)
kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980)
kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015)
kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097)
kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166)
kernel: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (CVE-2025-38202)
kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279)
kernel: ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (CVE-2025-38267)
kernel: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug (CVE-2025-38275)
kernel: ftrace: Fix UAF when lookup kallsym after ftrace disabled (CVE-2025-38346)
kernel: ACPICA: fix acpi operand cache leak in dswstate.c (CVE-2025-38345)
kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405)
kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441)
kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470)
kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866)
kernel: PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() (CVE-2025-40034)
kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134)
kernel: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" (CVE-2025-40210)
kernel: Linux kernel MPTCP: Privilege escalation or denial of service via use-after-free in timer handling (CVE-2025-40257)
kernel: smb: client: fix potential cfid UAF in smb2_query_info_compound (CVE-2025-40320)
kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040)
kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111)
kernel: Linux kernel: Denial of Service in ice driver due to race condition during VSI rebuild (CVE-2026-23210)
kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record: ALSA-2026:18134
Updated: 2026-11-02

OSVALSA-2026:18587 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: bonding: check xdp prog when set bond mode (CVE-2025-22105)
kernel: block: fix resource leak in blk_register_queue() error path (CVE-2025-37980)
kernel: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (CVE-2025-38015)
kernel: espintcp: remove encap socket caching to avoid reference leak (CVE-2025-38097)
kernel: bpf: fix ktls panic with sockmap (CVE-2025-38166)
kernel: bpf: Do not include stack ptr register in precision backtracking bookkeeping (CVE-2025-38279)
kernel: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails (CVE-2025-38400)
kernel: nvmet: fix memory leak of bio integrity (CVE-2025-38405)
kernel: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (CVE-2025-38441)
kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (CVE-2025-38470)
kernel: fs: writeback: fix use-after-free in __mark_inode_dirty() (CVE-2025-39866)
kernel: dm: fix NULL pointer dereference in __dm_suspend() (CVE-2025-40134)
kernel: wifi: mac80211_hwsim: fix typo in frequency notification (CVE-2026-23040)
kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.

Record: ALSA-2026:18587
Updated: 2026-11-02

OSVAZL-64637 No score

CVE-2025-38166 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved:

bpf: fix ktls panic with sockmap

After calling bpf_exec_tx_verdict(), the size of msg_pl->sg may increase, e.g., when the BPF program executes bpf_msg_push_data().

The changes in this commit are based on the following considerations:

When cork_bytes is set, rolling back to non-zero copy logic is pointless and can directly go to zero-copy logic.
We can not calculate the correct number of bytes to revert msg_iter.

However, some data in "?fgh?" is not within 'sg->msg_iter' (but in msg_pl instead), especially the data "?" we pushed.

So it doesn't seem as simple as just reverting through an offset of msg_iter.

For non-TLS sockets in tcp_bpf_sendmsg, when a "cork" situation occurs, the user-space send() doesn't return an error, and the returned length is the same as the input length parameter, even if some data is cached.

Additionally, I saw that the current non-zero-copy logic for handling corking is written as: ''' line 1177 else if (ret != -EAGAIN) { if (ret == -ENOSPC) ret = 0; goto send_end; '''

So it's ok to just return 'copied' without error when a "cork" situation occurs.

Record: AZL-64637
Updated: 2026-11-02

OSVAZL-72760 No score

CVE-2025-38166 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved:

bpf: fix ktls panic with sockmap

After calling bpf_exec_tx_verdict(), the size of msg_pl->sg may increase, e.g., when the BPF program executes bpf_msg_push_data().

The changes in this commit are based on the following considerations:

When cork_bytes is set, rolling back to non-zero copy logic is pointless and can directly go to zero-copy logic.
We can not calculate the correct number of bytes to revert msg_iter.

However, some data in "?fgh?" is not within 'sg->msg_iter' (but in msg_pl instead), especially the data "?" we pushed.

So it doesn't seem as simple as just reverting through an offset of msg_iter.

For non-TLS sockets in tcp_bpf_sendmsg, when a "cork" situation occurs, the user-space send() doesn't return an error, and the returned length is the same as the input length parameter, even if some data is cached.

Additionally, I saw that the current non-zero-copy logic for handling corking is written as: ''' line 1177 else if (ret != -EAGAIN) { if (ret == -ENOSPC) ret = 0; goto send_end; '''

So it's ok to just return 'copied' without error when a "cork" situation occurs.

Record: AZL-72760
Updated: 2026-11-02

OSVCLSA-2026-1777616064 No score

kernel: Fix of 264 CVEs

crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431}
crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431}
crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431}
crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431}
crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431}
crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431}
crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431}
crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431}
wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() {CVE-2022-50551}
bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099}
libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116}
scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
ftrace: Fix use-after-free for dynamic ftrace_ops {CVE-2022-49892}
intel_th: msu: Fix vmalloced buffers {CVE-2022-50142}
vt: Clear selection before changing the font {CVE-2022-49948}
ACPICA: Fix error code path in acpi_ds_call_control_method() {CVE-2022-50411}
usbnet: Run unregister_netdev() before unbind_all() {CVE-2022-50220}
ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917}
bpf: Propagate error from htab_lock_bucket() to userspace {CVE-2022-50490}
binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497}
module: fix [e_shstrndx].sh_size=0 OOB access {CVE-2022-49444}
ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770}
tracing: Fix potential double free in create_var_ref() {CVE-2022-49410}
powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue {CVE-2022-50366}
Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times {CVE-2022-50419}
xsk: Fix xsk_diag use-after-free error during socket cleanup {CVE-2023-53426}
svcrdma: bound check rq_pages index in inline path {CVE-2025-71068}
net: hns3: add VLAN id validation before using {CVE-2025-71112}
net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907}
capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870}
ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS {CVE-2022-50315}
i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
staging: vme_user: Fix possible UAF in tsi148_dma_list_add {CVE-2022-50384}
ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076}
ftrace: Add cond_resched() to ftrace_graph_set_hash() {CVE-2025-37940}
net: stmmac: Fix accessing freed irq affinity_hint {CVE-2025-23155}
ext4: set goal start correctly in ext4_mb_normalize_request {CVE-2023-54021}
netfilter: ipset: fix region locking in hash types {CVE-2025-37997}
openvswitch: Fix unsafe attribute parsing in output_userspace() {CVE-2025-37998}
wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() {CVE-2025-37990}
nfs: handle failure of nfs_get_lock_context in unlock path {CVE-2025-38023}
drm/amd/pm: Prevent division by zero {CVE-2025-37767}
netfilter: ctnetlink: remove refcounting in expectation dumpers {CVE-2025-39764}
tracing: Fix null pointer dereference in tracing_err_log_open() {CVE-2023-53167}
ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386}
scsi: qla2xxx: Pointer may be dereferenced {CVE-2023-53150}
net: pktgen: fix access outside of user given buffer in pktgen_thread_write() {CVE-2025-38061}
dm cache: prevent BUG_ON by blocking retries on failed device resumes {CVE-2025-38066} -…

Record: CLSA-2026-1777616064
Updated: 2026-11-02

OSVCLSA-2026-1777633439 No score

kernel: Fix of 144 CVEs

crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431}
crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431}
crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431}
crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431}
crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431}
crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431}
crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431}
crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431}
scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216}
VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738}
ptp: fix integer overflow in max_vclocks_store {CVE-2024-40994}
xsk: Fix xsk_diag use-after-free error during socket cleanup {CVE-2023-53426}
net: hns3: add VLAN id validation before using {CVE-2025-71112}
scsi: qla2xxx: Fix improper freeing of purex item {CVE-2025-68741}
tracing: Consider the NULL character when validating the event length {CVE-2024-50131}
capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870}
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() {CVE-2026-23111}
team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
libceph: replace overzealous BUG_ON in osdmap_apply_incremental() {CVE-2026-22990}
RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert {CVE-2025-38387}
ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386}
drm/tegra: Fix a possible null pointer dereference {CVE-2025-38363}
ACPICA: fix acpi operand cache leak in dswstate.c {CVE-2025-38345}
ACPICA: fix acpi parse and parseext cache leaks {CVE-2025-38344}
jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() {CVE-2025-38337}
x86/sgx: Prevent attempts to reclaim poisoned pages {CVE-2025-38334}
mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). {CVE-2025-38324}
drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table {CVE-2025-38319}
fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() {CVE-2025-38312}
seg6: Fix validation of nexthop addresses {CVE-2025-38310}
bpf: Fix WARN() in get_bpf_raw_tp_regs {CVE-2025-38285}
atm: clip: prevent NULL deref in clip_push() {CVE-2025-38251}
nfsd: Initialize ssc before laundromat_work to prevent NULL dereference {CVE-2025-38231}
ext4: inline: fix len overflow in ext4_prepare_inline_data {CVE-2025-38222}
fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38215}
fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38214}
atm: Revert atm_account_tx() if copy_from_iter_full() fails. {CVE-2025-38190}
tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184}
calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). {CVE-2025-38181}
thunderbolt: Do not double dequeue a configuration request {CVE-2025-38174}
bpf: fix ktls panic with sockmap {CVE-2025-38166}
gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO {CVE-2025-38122}
net_sched: sch_sfq: fix a potential crash on gso_skb handling {CVE-2025-38115}
x86/iopl: Cure TIF_IO_BITMAP inconsistencies {CVE-2025-38100}
dma-buf: insert memory barrier before updating num_fences {CVE-2025-38095}
net_sched: prio: fix a race in prio_tune() {CVE-2025-38083} -…

Record: CLSA-2026-1777633439
Updated: 2026-11-02

OSVMGASA-2025-0218 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.101 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2025-0218
Updated: 2026-11-02

OSVMGASA-2025-0219 No score

Updated kernel, kmod-virtualbox, kmod-xtables-addons & wireless-regdb packages fix security vulnerabilities

Upstream kernel version 6.6.101 fixes bugs and vulnerabilities. The kmod-virtualbox, kmod-xtables-addons & wireless-regdb packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record: MGASA-2025-0219
Updated: 2026-11-02

OSVSUSE-SU-2025:02846-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631).
CVE-2021-46987: btrfs: fix deadlock when cloning inline extents and using qgroups (bsc#1220704).
CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference (bsc#1205711).
CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
CVE-2022-49319: iommu/arm-smmu-v3: check return value after calling platform_get_resource() (bsc#1238374).
CVE-2022-49323: iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (bsc#1238400).
CVE-2022-49768: 9p/fd: fix issue of list_del corruption in p9_fd_cancel() (bsc#1242446).
CVE-2022-49825: ata: libata-transport: fix error handling in ata_tport_add() (bsc#1242548).
CVE-2022-49934: wifi: mac80211: Fix UAF in ieee80211_scan_rx() (bsc#1245051).
CVE-2022-49948: vt: Clear selection before changing the font (bsc#1245058).
CVE-2022-49969: drm/amd/display: clear optc underflow before turn off odm clock (bsc#1245060).
CVE-2022-49993: loop: Check for overflow while configuring loop (bsc#1245121).
CVE-2022-50025: cxl: Fix a memory leak in an error handling path (bsc#1245132).
CVE-2022-50027: scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (bsc#1245073).
CVE-2022-50030: scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (bsc#1245265).
CVE-2022-50033: usb: host: ohci-ppc-of: Fix refcount leak bug (bsc#1245139).
CVE-2022-50103: sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed (bsc#1244840).
CVE-2022-50149: driver core: fix potential deadlock in __driver_attach (bsc#1244883).
CVE-2022-50226: crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak (bsc#1244860).
CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629).
CVE-2023-52878: can: dev: can_put_echo_skb(): do not crash kernel if can_priv::echo_skb is accessed out of bounds (bsc#1225000).
CVE-2023-53020: l2tp: close all race conditions in l2tp_tunnel_register() (bsc#1240224).
CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).
CVE-2023-53118: scsi: core: Fix a procfs host directory removal regression (bsc#1242365).
CVE-2024-26974: crypto: qat - resolve race condition during AER recovery (bsc#1223638).
CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2025-21731: nbd: do not allow reconnect after disconnect (bsc#1237881).
CVE-2025-21928: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (bsc#1240722).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38040: serial: mctrl_gpio: split disable_ms into sync and no_sync APIs (bsc#1245078).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for…

Record: SUSE-SU-2025:02846-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02853-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664 bsc#1247831).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…

Record: SUSE-SU-2025:02853-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02923-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition (bsc#1139073).
CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (bsc#1246183).
CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).
CVE-2025-38371: drm/v3d: Disable interrupts before resetting the GPU (bsc#1247178).
CVE-2025-38392: idpf: convert control queue mutex to a spinlock (bsc#1247169).
CVE-2025-38399: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (bsc#1247097).
CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (bsc#1247252).
CVE-2025-38457: net/sched: Abort __tc_modify_qdisc if parent class does not exist (bsc#1247098).
CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
CVE-2025-38465: netlink: make sure we allow at least one dump skb (bsc#1247118).
CVE-2025-38470: kABI fix for net: vlan: fix VLAN 0 refcount imbalance of toggling (bsc#1247288).
CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247450).
CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (bsc#1247243).
CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-23163: net:…

Record: SUSE-SU-2025:02923-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02969-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…

Record: SUSE-SU-2025:02969-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02996-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (1230216).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…

Record: SUSE-SU-2025:02996-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02997-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695)
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-39298:mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (bsc#1227082).
CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma…

Record: SUSE-SU-2025:02997-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03011-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695).
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-39298:mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (bsc#1227082).
CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664 bsc#1247831).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147:…

Record: SUSE-SU-2025:03011-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03023-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may (bsc#1139073)
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
CVE-2025-38188:…

Record: SUSE-SU-2025:03023-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20577-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
CVE-2025-38188:…

Record: SUSE-SU-2025:20577-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20586-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
CVE-2025-38188:…

Record: SUSE-SU-2025:20586-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20601-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
CVE-2025-38188:…

Record: SUSE-SU-2025:20601-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20602-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
CVE-2025-38188:…

Record: SUSE-SU-2025:20602-1
Updated: 2026-11-02

OSVUSN-7769-1 No score

linux, linux-aws, linux-gcp, linux-gcp-6.14, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Bus devices;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
NI-700 PMU driver;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
PTP clock framework;
SCSI subsystem;
ASPEED SoC drivers;
SPI subsystem;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
USB Gadget drivers;
Renesas USBHS Controller drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
F2FS file system;
File systems infrastructure;
Network file systems library;
NTFS3 file system;
SMB network file system;
Codetag library;
BPF subsystem;
LZO compression library;
Mellanox drivers;
IPv4 networking;
Bluetooth subsystem;
Network sockets;
XFRM subsystem;
Digital Audio (PCM) driver;
Tracing infrastructure;
io_uring subsystem;
Padata parallel execution mechanism;
DVFS energy model driver;
Restartable seuqences system call mechanism;
Timer subsystem;
Memory management;
KASAN memory debugging framework;
CAN network layer;
Networking core;
IPv6 networking;
Netfilter;
NetLabel subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
ALSA framework;
sma1307 audio codecs;
Intel ASoC drivers;
MediaTek ASoC drivers;
USB sound devices; (CVE-2025-38122, CVE-2025-38119, CVE-2025-38071, CVE-2025-38310, CVE-2025-38166, CVE-2025-38055, CVE-2025-38292, CVE-2025-38078, CVE-2025-38134, CVE-2025-38063, CVE-2025-38282, CVE-2025-38059, CVE-2025-38112, CVE-2025-38082, CVE-2025-38296, CVE-2025-38126, CVE-2025-38136, CVE-2025-38075, CVE-2025-38042, CVE-2025-38113, CVE-2025-38003, CVE-2025-38318, CVE-2025-38156, CVE-2025-38290, CVE-2025-38102, CVE-2025-38076, CVE-2025-38097, CVE-2025-38313, CVE-2025-38298, CVE-2025-38300, CVE-2025-38169, CVE-2025-38131, CVE-2025-38301, CVE-2025-38050, CVE-2025-38139, CVE-2025-38305, CVE-2025-38317, CVE-2025-38045, CVE-2025-38040, CVE-2025-38279, CVE-2025-38123, CVE-2025-38074, CVE-2025-38111, CVE-2025-38117, CVE-2025-38069, CVE-2025-38035, CVE-2025-38128, CVE-2025-38277, CVE-2025-38061, CVE-2025-38306, CVE-2025-38051, CVE-2025-38124, CVE-2025-38291, CVE-2025-38130, CVE-2025-38319, CVE-2025-38272, CVE-2025-38175, CVE-2025-38176, CVE-2025-38070, CVE-2025-38032, CVE-2025-38151, CVE-2025-38107, CVE-2025-38103, CVE-2025-38274, CVE-2025-38163, CVE-2025-38293, CVE-2025-38064, CVE-2025-38498, CVE-2025-38039, CVE-2025-38173, CVE-2025-38038, CVE-2025-38135, CVE-2025-38149, CVE-2025-38142, CVE-2025-38414, CVE-2025-38120, CVE-2025-38106, CVE-2025-38092, CVE-2025-38091, CVE-2025-38415, CVE-2025-38294, CVE-2025-38043, CVE-2025-38147, CVE-2025-38037, CVE-2025-38108, CVE-2025-38088, CVE-2025-38316, CVE-2025-38312, CVE-2025-38352,…

Record: USN-7769-1
Updated: 2026-11-03

OSVUSN-7769-2 No score

linux-realtime-6.14 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Bus devices;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
NI-700 PMU driver;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
PTP clock framework;
SCSI subsystem;
ASPEED SoC drivers;
SPI subsystem;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
USB Gadget drivers;
Renesas USBHS Controller drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
F2FS file system;
File systems infrastructure;
Network file systems library;
NTFS3 file system;
SMB network file system;
Codetag library;
BPF subsystem;
LZO compression library;
Mellanox drivers;
IPv4 networking;
Bluetooth subsystem;
Network sockets;
XFRM subsystem;
Digital Audio (PCM) driver;
Tracing infrastructure;
io_uring subsystem;
Padata parallel execution mechanism;
DVFS energy model driver;
Restartable seuqences system call mechanism;
Timer subsystem;
Memory management;
KASAN memory debugging framework;
CAN network layer;
Networking core;
IPv6 networking;
Netfilter;
NetLabel subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
ALSA framework;
sma1307 audio codecs;
Intel ASoC drivers;
MediaTek ASoC drivers;
USB sound devices; (CVE-2025-38112, CVE-2025-38283, CVE-2025-38120, CVE-2025-38091, CVE-2025-38124, CVE-2025-38031, CVE-2025-38288, CVE-2025-38047, CVE-2025-38295, CVE-2025-38284, CVE-2025-38281, CVE-2025-38151, CVE-2025-38058, CVE-2025-38059, CVE-2025-38299, CVE-2025-38065, CVE-2025-38107, CVE-2025-38143, CVE-2025-38113, CVE-2025-38289, CVE-2025-38160, CVE-2025-38311, CVE-2025-38052, CVE-2025-38131, CVE-2025-38268, CVE-2025-38066, CVE-2025-38129, CVE-2025-38127, CVE-2025-38317, CVE-2025-38158, CVE-2025-38039, CVE-2025-38064, CVE-2025-38306, CVE-2025-38291, CVE-2025-38162, CVE-2025-38111, CVE-2025-38147, CVE-2025-38415, CVE-2025-38290, CVE-2025-38294, CVE-2025-38499, CVE-2025-38167, CVE-2025-38098, CVE-2025-38298, CVE-2025-38279, CVE-2025-38278, CVE-2025-38149, CVE-2025-38073, CVE-2025-38100, CVE-2025-38033, CVE-2025-38080, CVE-2025-38314, CVE-2025-38166, CVE-2025-38154, CVE-2025-38050, CVE-2025-38123, CVE-2025-38070, CVE-2025-38169, CVE-2025-38077, CVE-2025-38082, CVE-2025-38061, CVE-2025-38032, CVE-2025-38092, CVE-2025-38176, CVE-2025-38044, CVE-2025-38277, CVE-2025-38305, CVE-2025-38034, CVE-2025-38293, CVE-2025-38115, CVE-2025-38057, CVE-2025-38126, CVE-2025-38312, CVE-2025-38117, CVE-2025-38141, CVE-2025-38155, CVE-2025-38161, CVE-2025-38142, CVE-2025-38036, CVE-2025-38165, CVE-2025-38069, CVE-2025-38106, CVE-2025-38267, CVE-2025-38138, CVE-2025-38119, CVE-2025-38282, CVE-2025-38275, CVE-2025-38081, CVE-2025-38414,…

Record: USN-7769-2
Updated: 2026-11-03

OSVUSN-7769-3 No score

linux-aws-6.14, linux-hwe-6.14 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Bus devices;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
NI-700 PMU driver;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
PTP clock framework;
SCSI subsystem;
ASPEED SoC drivers;
SPI subsystem;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
USB Gadget drivers;
Renesas USBHS Controller drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
F2FS file system;
File systems infrastructure;
Network file systems library;
NTFS3 file system;
SMB network file system;
Codetag library;
BPF subsystem;
LZO compression library;
Mellanox drivers;
IPv4 networking;
Bluetooth subsystem;
Network sockets;
XFRM subsystem;
Digital Audio (PCM) driver;
Tracing infrastructure;
io_uring subsystem;
Padata parallel execution mechanism;
DVFS energy model driver;
Restartable seuqences system call mechanism;
Timer subsystem;
Memory management;
KASAN memory debugging framework;
CAN network layer;
Networking core;
IPv6 networking;
Netfilter;
NetLabel subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
ALSA framework;
sma1307 audio codecs;
Intel ASoC drivers;
MediaTek ASoC drivers;
USB sound devices; (CVE-2025-38115, CVE-2025-38004, CVE-2025-38035, CVE-2025-38057, CVE-2025-38314, CVE-2025-38317, CVE-2025-38074, CVE-2025-38113, CVE-2025-38130, CVE-2025-38175, CVE-2025-38155, CVE-2025-38062, CVE-2025-38050, CVE-2025-38159, CVE-2025-38352, CVE-2025-38101, CVE-2025-38034, CVE-2025-38061, CVE-2025-38288, CVE-2025-38153, CVE-2025-38043, CVE-2025-38268, CVE-2025-38415, CVE-2025-38291, CVE-2025-38270, CVE-2025-38044, CVE-2025-38146, CVE-2025-38048, CVE-2025-38069, CVE-2025-38298, CVE-2025-38058, CVE-2025-38161, CVE-2025-38158, CVE-2025-38059, CVE-2025-38066, CVE-2025-38047, CVE-2025-38040, CVE-2025-38112, CVE-2025-38042, CVE-2025-38107, CVE-2025-38296, CVE-2025-38278, CVE-2025-39890, CVE-2025-38088, CVE-2025-38174, CVE-2025-38118, CVE-2025-38117, CVE-2025-38110, CVE-2025-38305, CVE-2025-38136, CVE-2025-38063, CVE-2025-38498, CVE-2025-38499, CVE-2025-38106, CVE-2025-38292, CVE-2025-38163, CVE-2025-38169, CVE-2025-38032, CVE-2025-38310, CVE-2025-38302, CVE-2025-38092, CVE-2025-38052, CVE-2025-38282, CVE-2025-38082, CVE-2025-38036, CVE-2025-38054, CVE-2025-38105, CVE-2025-38265, CVE-2025-38116, CVE-2025-38060, CVE-2025-38154, CVE-2025-38280, CVE-2025-38176, CVE-2025-38156, CVE-2025-38289, CVE-2025-38166, CVE-2025-38080, CVE-2025-38098, CVE-2025-38127, CVE-2025-38125, CVE-2025-38172, CVE-2025-38142, CVE-2025-38096, CVE-2025-38055, CVE-2025-38138, CVE-2025-38126, CVE-2025-38073, CVE-2025-38173, CVE-2025-38031,…

Record: USN-7769-3
Updated: 2026-11-03

OSVUSN-7770-1 No score

linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Bus devices;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
NI-700 PMU driver;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
PTP clock framework;
SCSI subsystem;
ASPEED SoC drivers;
SPI subsystem;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
USB Gadget drivers;
Renesas USBHS Controller drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
F2FS file system;
File systems infrastructure;
Network file systems library;
NTFS3 file system;
SMB network file system;
Codetag library;
BPF subsystem;
LZO compression library;
Mellanox drivers;
IPv4 networking;
Bluetooth subsystem;
Network sockets;
XFRM subsystem;
Digital Audio (PCM) driver;
Tracing infrastructure;
io_uring subsystem;
Padata parallel execution mechanism;
DVFS energy model driver;
Restartable seuqences system call mechanism;
Timer subsystem;
Memory management;
KASAN memory debugging framework;
CAN network layer;
Networking core;
IPv6 networking;
Netfilter;
NetLabel subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
ALSA framework;
sma1307 audio codecs;
Intel ASoC drivers;
MediaTek ASoC drivers;
USB sound devices; (CVE-2025-38155, CVE-2025-38145, CVE-2025-38072, CVE-2025-38306, CVE-2025-38004, CVE-2025-38053, CVE-2025-38293, CVE-2025-38045, CVE-2025-38105, CVE-2025-38079, CVE-2025-38161, CVE-2025-38031, CVE-2025-38114, CVE-2025-38033, CVE-2025-38274, CVE-2025-38265, CVE-2025-38135, CVE-2025-38075, CVE-2025-38313, CVE-2025-38064, CVE-2025-38118, CVE-2025-38299, CVE-2025-38123, CVE-2025-38112, CVE-2025-38073, CVE-2025-38070, CVE-2025-38138, CVE-2025-38303, CVE-2025-38148, CVE-2025-38035, CVE-2025-38157, CVE-2025-38131, CVE-2025-38107, CVE-2025-38108, CVE-2025-38071, CVE-2025-38081, CVE-2025-38301, CVE-2025-38415, CVE-2025-38034, CVE-2025-38294, CVE-2025-38314, CVE-2025-38285, CVE-2025-38147, CVE-2025-38113, CVE-2025-38352, CVE-2025-38170, CVE-2025-38103, CVE-2025-38282, CVE-2025-38290, CVE-2025-38117, CVE-2025-38078, CVE-2025-38122, CVE-2025-38176, CVE-2025-38082, CVE-2025-38289, CVE-2025-38124, CVE-2025-38039, CVE-2025-38281, CVE-2025-38126, CVE-2025-38111, CVE-2025-38080, CVE-2025-38088, CVE-2025-38048, CVE-2025-38269, CVE-2025-38003, CVE-2025-38102, CVE-2025-38140, CVE-2025-38316, CVE-2025-38268, CVE-2025-38132, CVE-2025-38286, CVE-2025-38159, CVE-2025-38120, CVE-2025-38295, CVE-2025-38077, CVE-2025-38297, CVE-2025-38174, CVE-2025-38160, CVE-2025-38119, CVE-2025-38099, CVE-2025-38134, CVE-2025-38051, CVE-2025-38061, CVE-2025-38317, CVE-2025-38142, CVE-2025-38175, CVE-2025-38091, CVE-2025-38311, CVE-2025-38066,…

Record: USN-7770-1
Updated: 2026-11-02

OSVUSN-7771-1 No score

linux-oem-6.14 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Bus devices;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
NI-700 PMU driver;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
PTP clock framework;
SCSI subsystem;
ASPEED SoC drivers;
SPI subsystem;
TCM subsystem;
TTY drivers;
UFS subsystem;
USB core drivers;
USB Gadget drivers;
Renesas USBHS Controller drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
F2FS file system;
File systems infrastructure;
Network file systems library;
NTFS3 file system;
SMB network file system;
Codetag library;
BPF subsystem;
LZO compression library;
Mellanox drivers;
IPv4 networking;
Bluetooth subsystem;
Network sockets;
XFRM subsystem;
Digital Audio (PCM) driver;
Tracing infrastructure;
io_uring subsystem;
Padata parallel execution mechanism;
DVFS energy model driver;
Restartable seuqences system call mechanism;
Timer subsystem;
Memory management;
KASAN memory debugging framework;
CAN network layer;
Networking core;
IPv6 networking;
Netfilter;
NetLabel subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
ALSA framework;
sma1307 audio codecs;
Intel ASoC drivers;
MediaTek ASoC drivers;
USB sound devices; (CVE-2025-38141, CVE-2025-38039, CVE-2025-38283, CVE-2025-38272, CVE-2025-38290, CVE-2025-38168, CVE-2025-38134, CVE-2025-38158, CVE-2025-38097, CVE-2025-38078, CVE-2025-38161, CVE-2025-38116, CVE-2025-38312, CVE-2025-38067, CVE-2025-38129, CVE-2025-38119, CVE-2025-38061, CVE-2025-38352, CVE-2025-38269, CVE-2025-38163, CVE-2025-38315, CVE-2025-38301, CVE-2025-38115, CVE-2025-38032, CVE-2025-38127, CVE-2025-38029, CVE-2025-38277, CVE-2025-38075, CVE-2025-38300, CVE-2025-38059, CVE-2025-38047, CVE-2025-38118, CVE-2025-38038, CVE-2025-38278, CVE-2025-38169, CVE-2025-38074, CVE-2025-38292, CVE-2025-38295, CVE-2025-38294, CVE-2025-38154, CVE-2025-38165, CVE-2025-38069, CVE-2025-38120, CVE-2025-38098, CVE-2025-38050, CVE-2025-38068, CVE-2025-38063, CVE-2025-38034, CVE-2025-38123, CVE-2025-38092, CVE-2025-38103, CVE-2025-38170, CVE-2025-38313, CVE-2025-38062, CVE-2025-38159, CVE-2025-38147, CVE-2025-38415, CVE-2025-38045, CVE-2025-38279, CVE-2025-38302, CVE-2025-38162, CVE-2025-38414, CVE-2025-38146, CVE-2025-38035, CVE-2025-38040, CVE-2025-38073, CVE-2025-38054, CVE-2025-38099, CVE-2025-38291, CVE-2025-38126, CVE-2025-38088, CVE-2025-38310, CVE-2025-38176, CVE-2025-38102, CVE-2025-38149, CVE-2025-38124, CVE-2025-38003, CVE-2025-38140, CVE-2025-38100, CVE-2025-38081, CVE-2025-38319, CVE-2025-38142, CVE-2025-38303, CVE-2025-38155, CVE-2025-38044, CVE-2025-38316, CVE-2025-38052, CVE-2025-38317, CVE-2025-38151, CVE-2025-38164, CVE-2025-38148,…

Record: USN-7771-1
Updated: 2026-11-03

OSVUSN-7789-1 No score

linux-oracle-6.14 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Bus devices;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
NI-700 PMU driver;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
PTP clock framework;
SCSI subsystem;
ASPEED SoC drivers;
SPI subsystem;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
USB Gadget drivers;
Renesas USBHS Controller drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
F2FS file system;
File systems infrastructure;
Network file systems library;
NTFS3 file system;
SMB network file system;
Codetag library;
BPF subsystem;
LZO compression library;
Mellanox drivers;
IPv4 networking;
Bluetooth subsystem;
Network sockets;
XFRM subsystem;
Digital Audio (PCM) driver;
Tracing infrastructure;
io_uring subsystem;
Padata parallel execution mechanism;
DVFS energy model driver;
Restartable seuqences system call mechanism;
Timer subsystem;
Memory management;
KASAN memory debugging framework;
CAN network layer;
Networking core;
IPv6 networking;
Netfilter;
NetLabel subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
ALSA framework;
sma1307 audio codecs;
Intel ASoC drivers;
MediaTek ASoC drivers;
USB sound devices; (CVE-2025-38137, CVE-2025-38141, CVE-2025-38035, CVE-2025-38298, CVE-2025-38042, CVE-2025-38140, CVE-2025-38138, CVE-2025-38316, CVE-2025-38304, CVE-2025-38165, CVE-2025-38306, CVE-2025-38082, CVE-2025-38132, CVE-2025-38498, CVE-2025-38158, CVE-2025-38154, CVE-2025-38064, CVE-2025-38129, CVE-2025-38096, CVE-2025-38352, CVE-2025-38303, CVE-2025-38122, CVE-2025-38048, CVE-2025-38296, CVE-2025-38149, CVE-2025-38319, CVE-2025-38078, CVE-2025-38066, CVE-2025-38099, CVE-2025-38291, CVE-2025-38267, CVE-2025-38268, CVE-2025-38126, CVE-2025-38076, CVE-2025-38077, CVE-2025-38101, CVE-2025-38071, CVE-2025-38163, CVE-2025-38285, CVE-2025-38265, CVE-2025-38125, CVE-2025-38302, CVE-2025-38172, CVE-2025-38292, CVE-2025-38279, CVE-2025-38170, CVE-2025-38062, CVE-2025-38074, CVE-2025-38050, CVE-2025-38116, CVE-2025-38414, CVE-2025-38173, CVE-2025-38033, CVE-2025-38112, CVE-2025-38091, CVE-2025-38290, CVE-2025-39890, CVE-2025-38156, CVE-2025-38289, CVE-2025-38275, CVE-2025-38295, CVE-2025-38123, CVE-2025-38300, CVE-2025-38067, CVE-2025-38131, CVE-2025-38294, CVE-2025-38105, CVE-2025-38107, CVE-2025-38106, CVE-2025-38069, CVE-2025-38041, CVE-2025-38111, CVE-2025-38312, CVE-2025-38092, CVE-2025-38054, CVE-2025-38166, CVE-2025-38044, CVE-2025-38159, CVE-2025-38061, CVE-2025-38115, CVE-2025-38058, CVE-2025-38036, CVE-2025-38100, CVE-2025-38075, CVE-2025-38160, CVE-2025-38102, CVE-2025-38269, CVE-2025-38108, CVE-2025-38119,…

Record: USN-7789-1
Updated: 2026-11-03

OSVUSN-7789-2 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Bus devices;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
NI-700 PMU driver;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
PTP clock framework;
SCSI subsystem;
ASPEED SoC drivers;
SPI subsystem;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
USB Gadget drivers;
Renesas USBHS Controller drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
F2FS file system;
File systems infrastructure;
Network file systems library;
NTFS3 file system;
SMB network file system;
Codetag library;
BPF subsystem;
LZO compression library;
Mellanox drivers;
IPv4 networking;
Bluetooth subsystem;
Network sockets;
XFRM subsystem;
Digital Audio (PCM) driver;
Tracing infrastructure;
io_uring subsystem;
Padata parallel execution mechanism;
DVFS energy model driver;
Restartable seuqences system call mechanism;
Timer subsystem;
Memory management;
KASAN memory debugging framework;
CAN network layer;
Networking core;
IPv6 networking;
Netfilter;
NetLabel subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
ALSA framework;
sma1307 audio codecs;
Intel ASoC drivers;
MediaTek ASoC drivers;
USB sound devices; (CVE-2025-38081, CVE-2025-38142, CVE-2025-38157, CVE-2025-38174, CVE-2025-38156, CVE-2025-38044, CVE-2025-38414, CVE-2025-38041, CVE-2025-38124, CVE-2025-38122, CVE-2025-38285, CVE-2025-38317, CVE-2025-38159, CVE-2025-38352, CVE-2025-38117, CVE-2025-38040, CVE-2025-38292, CVE-2025-38301, CVE-2025-38149, CVE-2025-38299, CVE-2025-38116, CVE-2025-38100, CVE-2025-38107, CVE-2025-38063, CVE-2025-38069, CVE-2025-38130, CVE-2025-38032, CVE-2025-38113, CVE-2025-38287, CVE-2025-38138, CVE-2025-38004, CVE-2025-38097, CVE-2025-38270, CVE-2025-38311, CVE-2025-38499, CVE-2025-38050, CVE-2025-38064, CVE-2025-38278, CVE-2025-38297, CVE-2025-38091, CVE-2025-38065, CVE-2025-38114, CVE-2025-38048, CVE-2025-38096, CVE-2025-38112, CVE-2025-38148, CVE-2025-38101, CVE-2025-38062, CVE-2025-38057, CVE-2025-38029, CVE-2025-38105, CVE-2025-38277, CVE-2025-38053, CVE-2025-38302, CVE-2025-38169, CVE-2025-38307, CVE-2025-38153, CVE-2025-38106, CVE-2025-38293, CVE-2025-38267, CVE-2025-38314, CVE-2025-38291, CVE-2025-38284, CVE-2025-38141, CVE-2025-38052, CVE-2025-38079, CVE-2025-38088, CVE-2025-38164, CVE-2025-38288, CVE-2025-38289, CVE-2025-38074, CVE-2025-38073, CVE-2025-38274, CVE-2025-38167, CVE-2025-38129, CVE-2025-38082, CVE-2025-38109, CVE-2025-38003, CVE-2025-38042, CVE-2025-38319, CVE-2025-38165, CVE-2025-38102, CVE-2025-38045, CVE-2025-38154, CVE-2025-38127, CVE-2025-38034, CVE-2025-38051, CVE-2025-38143, CVE-2025-38061,…

Record: USN-7789-2
Updated: 2026-11-02

OSVUSN-8028-1 No score

linux, linux-raspi vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;…

Record: USN-8028-1
Updated: 2026-11-03

OSVUSN-8028-2 No score

linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-2
Updated: 2026-11-03

OSVUSN-8028-3 No score

linux-realtime, linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-3
Updated: 2026-11-03

OSVUSN-8028-4 No score

linux-aws-fips, linux-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-4
Updated: 2026-11-03

OSVUSN-8028-5 No score

linux-aws, linux-aws-6.8, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-5
Updated: 2026-11-03

OSVUSN-8028-6 No score

linux-hwe-6.8, linux-lowlatency-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-6
Updated: 2026-11-03

OSVUSN-8028-7 No score

linux-nvidia-lowlatency vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-7
Updated: 2026-11-03

OSVUSN-8028-8 No score

linux-ibm, linux-ibm-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-8
Updated: 2026-11-03

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-64k` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-64k-core` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-64k-debug` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-64k-debug-core` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-64k-debug-devel` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-64k-debug-devel-matched` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-64k-debug-modules` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-64k-debug-modules-core` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-64k-debug-modules-extra` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-64k-devel-matched` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-64k-modules` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-64k-modules-core` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-64k-modules-extra` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-abi-stablelists` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-core` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-cross-headers` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-debug` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-debug-core` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-debug-devel` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-debug-devel-matched` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-debug-modules` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-debug-modules-core` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-debug-modules-extra` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-debug-uki-virt` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-devel` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-devel-matched` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-doc` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-headers` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-modules` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-modules-core` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-modules-extra` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-modules-extra-matched` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-64k` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-64k-core` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-64k-debug` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-64k-debug-core` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-64k-debug-devel` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-64k-debug-modules` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-64k-debug-modules-core` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-64k-debug-modules-extra` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-64k-devel` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-64k-modules` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-64k-modules-core` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-64k-modules-extra` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-core` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-debug` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-debug-core` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel-rt-debug-devel` AlmaLinux:10 From an advisory covering 29 CVEs	before 6.12.0-211.7.1.el10_2	6.12.0-211.7.1.el10_2
`kernel` Azure Linux:3	before 6.6.96.1-1	6.6.96.1-1
`kernel` Azure Linux:2	through 5.15.200.1-1	None known
`linux-lts` Alpaquita:23	6.1.141-r0 up to 6.1.143-r1	6.1.143-r1
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.7.els30	7.0.0-284.1101.el9_2.tuxcare.7.els30
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-core` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-core` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-cross-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-doc` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-tools` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-tools-libs` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`kernel-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.7.els30	5.14.0-284.1101.el9_2.tuxcare.7.els30
`libbpf` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els30	2:1.0.0-2.el9_2.tuxcare.7.els30
`libbpf-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els30	2:1.0.0-2.el9_2.tuxcare.7.els30
`libbpf-static` TuxCare:AlmaLinux:9.2 From an advisory covering 260 CVEs	before 2:1.0.0-2.el9_2.tuxcare.7.els30	2:1.0.0-2.el9_2.tuxcare.7.els30
`Kernel` Linux	4.20.0 up to 6.1.142, 6.2.0 up to 6.6.94, 6.7.0 up to 6.12.34, 6.13.0 up to 6.15.3	6.1.1426.6.946.12.346.15.3
`linux` Debian:12	before 6.1.147-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 36 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.147-1
`linux` Debian:13	before 6.12.35-1	6.12.35-1
`linux` Debian:14	before 6.12.35-1	6.12.35-1
`linux-6.1` Debian:11 From an advisory covering 465 CVEs	before 6.1.153-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1 Show 6 moreShow less 6.1.128-1~deb11u16.1.129-1~deb11u16.1.137-1~deb11u16.1.140-1~deb11u16.1.147-1~deb11u16.1.148-1~deb11u1	6.1.153-1~deb11u1
`linux` Debian:12 From an advisory covering 233 CVEs	before 6.1.147-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 36 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.147-1
`kernel-linus` Mageia:9 From an advisory covering 237 CVEs	before 6.6.101-1.mga9	6.6.101-1.mga9
`kernel` Mageia:9 From an advisory covering 237 CVEs	before 6.6.101-1.mga9	6.6.101-1.mga9
`kmod-virtualbox` Mageia:9 From an advisory covering 237 CVEs	before 7.1.10-7.mga9	7.1.10-7.mga9
`kmod-xtables-addons` Mageia:9 From an advisory covering 237 CVEs	before 3.24-83.mga9	3.24-83.mga9
`wireless-regdb` Mageia:9 From an advisory covering 237 CVEs	before 20250710-1.mga9	20250710-1.mga9
`kernel` openEuler:24.03-LTS From an advisory covering 66 CVEs	before 6.6.0-108.0.0.100.oe2403	6.6.0-108.0.0.100.oe2403
`kernel` openEuler:24.03-LTS-SP1 From an advisory covering 69 CVEs	before 6.6.0-108.0.0.111.oe2403sp1	6.6.0-108.0.0.111.oe2403sp1
`kernel` openEuler:24.03-LTS-SP2 From an advisory covering 67 CVEs	before 6.6.0-108.0.0.114.oe2403sp2	6.6.0-108.0.0.114.oe2403sp2
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-64k-debug-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-64k-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-64k-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-64k-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-debug-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-debug-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-doc` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-rt-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-tools-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`libperf-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`perf` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`perf-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`python3-perf` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`python3-perf-debuginfo` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`rtla` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`rv` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-64k` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-64k-core` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-64k-debug` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-64k-debug-core` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-64k-debug-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-64k-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-64k-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-64k-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-abi-stablelists` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-core` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-debug` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-debug-core` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-debug-modules` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-debug-modules-core` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-debug-modules-extra` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`kernel-debug-uki-virt` Red Hat:enterprise_linux:10.2 From an advisory covering 29 CVEs	before 0:6.12.0-211.7.1.el10_2	0:6.12.0-211.7.1.el10_2
`linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`rootio-linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`rootio-linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`linux` Root:Ubuntu:22.04	before 5.15.0-203.213.aikido.119	5.15.0-203.213.aikido.119
`rootio-linux` Root:Ubuntu:22.04	before 5.15.0-203.213.aikido.119	5.15.0-203.213.aikido.119
`linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 83 CVEs	before 4.12.14-122.269.1	4.12.14-122.269.1
`kgraft-patch-SLE12-SP5_Update_71` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 83 CVEs	before 1-8.3.1	1-8.3.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 83 CVEs	before 4.12.14-122.269.1	4.12.14-122.269.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 83 CVEs	before 4.12.14-122.269.1	4.12.14-122.269.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 83 CVEs	before 4.12.14-122.269.1	4.12.14-122.269.1
`kernel-default` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 83 CVEs	before 4.12.14-122.269.1	4.12.14-122.269.1
`kernel-source` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 83 CVEs	before 4.12.14-122.269.1	4.12.14-122.269.1
`kernel-syms` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 83 CVEs	before 4.12.14-122.269.1	4.12.14-122.269.1
`kernel-livepatch-SLE15-SP7-RT_Update_3` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 260 CVEs	before 1-150700.1.5.1	1-150700.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 260 CVEs	before 6.4.0-150700.7.13.1	6.4.0-150700.7.13.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 260 CVEs	before 6.4.0-150700.7.13.1	6.4.0-150700.7.13.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 260 CVEs	before 6.4.0-150700.7.13.1	6.4.0-150700.7.13.1
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1.150600.12.28.4	6.4.0-150600.23.65.1.150600.12.28.4
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-livepatch-SLE15-SP6_Update_14` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 238 CVEs	before 1-150600.13.3.4	1-150600.13.3.4
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1.150600.12.28.4	6.4.0-150600.23.65.1.150600.12.28.4
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1.150700.17.9.4	6.4.0-150700.53.11.1.150700.17.9.4
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.3	6.4.0-150700.53.11.3
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-livepatch-SLE15-SP7_Update_3` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 264 CVEs	before 1-150700.15.3.4	1-150700.15.3.4
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 265 CVEs	before 6.4.0-150700.20.11.1	6.4.0-150700.20.11.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 265 CVEs	before 6.4.0-150700.20.11.1	6.4.0-150700.20.11.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 265 CVEs	before 6.4.0-150700.20.11.1	6.4.0-150700.20.11.1
`kernel-livepatch-SLE15-SP6-RT_Update_14` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 235 CVEs	before 1-150600.1.5.1	1-150600.1.5.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	None known
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	None known
`linux` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	None known
`linux-aws` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-azure-fde-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1 Show 45 moreShow less 5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1	None known
`linux-bluefield` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 45 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92	None known
`linux-gcp` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.15` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known

History

History
Recorded	Changed	Sources
Nov 10, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-38166 is a high vulnerability (CVSS 7.8) in Debian Linux, published July 3, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 10th percentile. Fixed in kernel 6.6.96.1-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 591 package rows, 945 versions, 2,786 references and the rest of 32 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 8 source records.