CVE-2025-38292

wifi: ath12k: fix invalid access to memory

8.8 HighFix available

What does this mean?

: 8.8v3.1, from CVE List
: 0.31%23rd percentile
Fixed in: 6.12.41-r0linux-lts
Published: July 10, 2025
Modified: November 6, 2026
Weakness: CWE-125
Also known as: ALSA-2025:13602BELL-CVE-2025-38292DEBIAN-CVE-2025-38292EUVD-2025-20956GHSA-mhmh-rgmh-rf63RHSA-2025:13598RHSA-2025:13602RLSA-2025:13598
Show 42 moreShow less
RLSA-2025:13602ROOT-OS-UBUNTU-2404-CVE-2025-38292SUSE-SU-2025:02853-1SUSE-SU-2025:02923-1SUSE-SU-2025:02969-1SUSE-SU-2025:02996-1SUSE-SU-2025:02997-1SUSE-SU-2025:03011-1SUSE-SU-2025:03023-1SUSE-SU-2025:20577-1SUSE-SU-2025:20586-1SUSE-SU-2025:20601-1SUSE-SU-2025:20602-1SUSE-SU-2025:21074-1SUSE-SU-2025:21139-1SUSE-SU-2025:21179-1SUSE-SU-2026:20560-1UBUNTU-CVE-2025-38292USN-7769-1USN-7769-2USN-7769-3USN-7770-1USN-7771-1USN-7789-1USN-7789-2USN-8028-1USN-8028-2USN-8028-3USN-8028-4USN-8028-5USN-8028-6USN-8028-7USN-8028-8USN-8031-1USN-8031-2USN-8031-3USN-8052-1USN-8052-2USN-8074-1USN-8074-2USN-8126-1openSUSE-SU-2025:20081-1

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix invalid access to memory

In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and boolean is_continuation is part of rxcb. Currently, after freeing the skb, the rxcb->is_continuation accessed again which is wrong since the memory is already freed. This might lead use-after-free error.

Hence, fix by locally defining bool is_continuation from rxcb, so that after freeing skb, is_continuation can be used.

Compile tested only.

Attack profile

How easy it is to exploit

Attack vector: Adjacent network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.31%Up 0.3 points since Jul 10, 2025

What each source reports

CVE List Score used 8.8

wifi: ath12k: fix invalid access to memory

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix invalid access to memory

Hence, fix by locally defining bool is_continuation from rxcb, so that after freeing skb, is_continuation can be used.

Compile tested only.

Record: CVE-2025-38292
CVSS 3.1: 8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2025-20956 8.8

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix invalid access to memory

Hence, fix by locally defining bool is_continuation from rxcb, so that after freeing skb, is_continuation can be used.

Compile tested only.

Record: EUVD-2025-20956
CVSS 3.1: 8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-mhmh-rgmh-rf63 7.1

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid...

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix invalid access to memory

Hence, fix by locally defining bool is_continuation from rxcb, so that after freeing skb, is_continuation can be used.

Compile tested only.

Record: GHSA-mhmh-rgmh-rf63
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

NVD 8.8

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix invalid access to memory

Hence, fix by locally defining bool is_continuation from rxcb, so that after freeing skb, is_continuation can be used.

Compile tested only.

Record: CVE-2025-38292
CVSS 3.1: 8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

OSVBELL-CVE-2025-38292 7.1

Record: BELL-CVE-2025-38292
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSV 8.8

wifi: ath12k: fix invalid access to memory

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix invalid access to memory

Hence, fix by locally defining bool is_continuation from rxcb, so that after freeing skb, is_continuation can be used.

Compile tested only.

Record: CVE-2025-38292
CVSS 3.1: 8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 47 moreShow less

OSVDEBIAN-CVE-2025-38292 7.1

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid access to memory In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and boolean is_continuation is part of rxcb. Currently, after freeing the skb, the rxcb->is_continuation accessed again which is wrong since the memory is already freed. This might lead use-after-free error. Hence, fix by locally defining bool is_continuation from rxcb, so that after freeing skb, is_continuation can be used. Compile tested only.

Record: DEBIAN-CVE-2025-38292
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2025:13598 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:13598
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:13602 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:13602
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2025:13598 7.3

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array (CVE-2024-56721)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array (CVE-2024-56721)
kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array (CVE-2024-56721)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array (CVE-2024-56721)
kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)
kernel: mm/hugetlb: unshare page tables during VMA split, not before (CVE-2025-38084)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array (CVE-2024-56721)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array (CVE-2024-56721)
kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array (CVE-2024-56721)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security…

Record: RLSA-2025:13598
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2025:13602 7.3

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)
kernel: wifi: ath12k: fix invalid access to memory (CVE-2025-38292)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2025:13602
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-38292 2.3

Record: UBUNTU-CVE-2025-38292
CVSS 4.0: 2.3 LowCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS 3.1: 8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALSA-2025:13602 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)
kernel: wifi: ath12k: fix invalid access to memory (CVE-2025-38292)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:13602
Updated: 2026-11-02

OSVopenSUSE-SU-2025:20081-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…

Record: openSUSE-SU-2025:20081-1
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2404-CVE-2025-38292 No score

CVE-2025-38292 in linux - Patched by Root

Root has patched CVE-2025-38292 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2025-38292
Updated: 2026-11-06

OSVSUSE-SU-2025:02853-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664 bsc#1247831).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…

Record: SUSE-SU-2025:02853-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02923-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition (bsc#1139073).
CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (bsc#1246183).
CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).
CVE-2025-38371: drm/v3d: Disable interrupts before resetting the GPU (bsc#1247178).
CVE-2025-38392: idpf: convert control queue mutex to a spinlock (bsc#1247169).
CVE-2025-38399: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (bsc#1247097).
CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (bsc#1247252).
CVE-2025-38457: net/sched: Abort __tc_modify_qdisc if parent class does not exist (bsc#1247098).
CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
CVE-2025-38465: netlink: make sure we allow at least one dump skb (bsc#1247118).
CVE-2025-38470: kABI fix for net: vlan: fix VLAN 0 refcount imbalance of toggling (bsc#1247288).
CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247450).
CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (bsc#1247243).
CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-23163: net:…

Record: SUSE-SU-2025:02923-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02969-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…

Record: SUSE-SU-2025:02969-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02996-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (1230216).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…

Record: SUSE-SU-2025:02996-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02997-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695)
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-39298:mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (bsc#1227082).
CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma…

Record: SUSE-SU-2025:02997-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03011-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695).
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-39298:mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (bsc#1227082).
CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664 bsc#1247831).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147:…

Record: SUSE-SU-2025:03011-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03023-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may (bsc#1139073)
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
CVE-2025-38188:…

Record: SUSE-SU-2025:03023-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20577-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
CVE-2025-38188:…

Record: SUSE-SU-2025:20577-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20586-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
CVE-2025-38188:…

Record: SUSE-SU-2025:20586-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20601-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
CVE-2025-38188:…

Record: SUSE-SU-2025:20601-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20602-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
CVE-2025-38188:…

Record: SUSE-SU-2025:20602-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21074-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…

Record: SUSE-SU-2025:21074-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21139-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…

Record: SUSE-SU-2025:21139-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21179-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…

Record: SUSE-SU-2025:21179-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20560-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…

Record: SUSE-SU-2026:20560-1
Updated: 2026-11-02

OSVUSN-7769-1 No score

linux, linux-aws, linux-gcp, linux-gcp-6.14, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Bus devices;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
NI-700 PMU driver;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
PTP clock framework;
SCSI subsystem;
ASPEED SoC drivers;
SPI subsystem;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
USB Gadget drivers;
Renesas USBHS Controller drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
F2FS file system;
File systems infrastructure;
Network file systems library;
NTFS3 file system;
SMB network file system;
Codetag library;
BPF subsystem;
LZO compression library;
Mellanox drivers;
IPv4 networking;
Bluetooth subsystem;
Network sockets;
XFRM subsystem;
Digital Audio (PCM) driver;
Tracing infrastructure;
io_uring subsystem;
Padata parallel execution mechanism;
DVFS energy model driver;
Restartable seuqences system call mechanism;
Timer subsystem;
Memory management;
KASAN memory debugging framework;
CAN network layer;
Networking core;
IPv6 networking;
Netfilter;
NetLabel subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
ALSA framework;
sma1307 audio codecs;
Intel ASoC drivers;
MediaTek ASoC drivers;
USB sound devices; (CVE-2025-38122, CVE-2025-38119, CVE-2025-38071, CVE-2025-38310, CVE-2025-38166, CVE-2025-38055, CVE-2025-38292, CVE-2025-38078, CVE-2025-38134, CVE-2025-38063, CVE-2025-38282, CVE-2025-38059, CVE-2025-38112, CVE-2025-38082, CVE-2025-38296, CVE-2025-38126, CVE-2025-38136, CVE-2025-38075, CVE-2025-38042, CVE-2025-38113, CVE-2025-38003, CVE-2025-38318, CVE-2025-38156, CVE-2025-38290, CVE-2025-38102, CVE-2025-38076, CVE-2025-38097, CVE-2025-38313, CVE-2025-38298, CVE-2025-38300, CVE-2025-38169, CVE-2025-38131, CVE-2025-38301, CVE-2025-38050, CVE-2025-38139, CVE-2025-38305, CVE-2025-38317, CVE-2025-38045, CVE-2025-38040, CVE-2025-38279, CVE-2025-38123, CVE-2025-38074, CVE-2025-38111, CVE-2025-38117, CVE-2025-38069, CVE-2025-38035, CVE-2025-38128, CVE-2025-38277, CVE-2025-38061, CVE-2025-38306, CVE-2025-38051, CVE-2025-38124, CVE-2025-38291, CVE-2025-38130, CVE-2025-38319, CVE-2025-38272, CVE-2025-38175, CVE-2025-38176, CVE-2025-38070, CVE-2025-38032, CVE-2025-38151, CVE-2025-38107, CVE-2025-38103, CVE-2025-38274, CVE-2025-38163, CVE-2025-38293, CVE-2025-38064, CVE-2025-38498, CVE-2025-38039, CVE-2025-38173, CVE-2025-38038, CVE-2025-38135, CVE-2025-38149, CVE-2025-38142, CVE-2025-38414, CVE-2025-38120, CVE-2025-38106, CVE-2025-38092, CVE-2025-38091, CVE-2025-38415, CVE-2025-38294, CVE-2025-38043, CVE-2025-38147, CVE-2025-38037, CVE-2025-38108, CVE-2025-38088, CVE-2025-38316, CVE-2025-38312, CVE-2025-38352,…

Record: USN-7769-1
Updated: 2026-11-03

OSVUSN-7769-2 No score

linux-realtime-6.14 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Bus devices;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
NI-700 PMU driver;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
PTP clock framework;
SCSI subsystem;
ASPEED SoC drivers;
SPI subsystem;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
USB Gadget drivers;
Renesas USBHS Controller drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
F2FS file system;
File systems infrastructure;
Network file systems library;
NTFS3 file system;
SMB network file system;
Codetag library;
BPF subsystem;
LZO compression library;
Mellanox drivers;
IPv4 networking;
Bluetooth subsystem;
Network sockets;
XFRM subsystem;
Digital Audio (PCM) driver;
Tracing infrastructure;
io_uring subsystem;
Padata parallel execution mechanism;
DVFS energy model driver;
Restartable seuqences system call mechanism;
Timer subsystem;
Memory management;
KASAN memory debugging framework;
CAN network layer;
Networking core;
IPv6 networking;
Netfilter;
NetLabel subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
ALSA framework;
sma1307 audio codecs;
Intel ASoC drivers;
MediaTek ASoC drivers;
USB sound devices; (CVE-2025-38112, CVE-2025-38283, CVE-2025-38120, CVE-2025-38091, CVE-2025-38124, CVE-2025-38031, CVE-2025-38288, CVE-2025-38047, CVE-2025-38295, CVE-2025-38284, CVE-2025-38281, CVE-2025-38151, CVE-2025-38058, CVE-2025-38059, CVE-2025-38299, CVE-2025-38065, CVE-2025-38107, CVE-2025-38143, CVE-2025-38113, CVE-2025-38289, CVE-2025-38160, CVE-2025-38311, CVE-2025-38052, CVE-2025-38131, CVE-2025-38268, CVE-2025-38066, CVE-2025-38129, CVE-2025-38127, CVE-2025-38317, CVE-2025-38158, CVE-2025-38039, CVE-2025-38064, CVE-2025-38306, CVE-2025-38291, CVE-2025-38162, CVE-2025-38111, CVE-2025-38147, CVE-2025-38415, CVE-2025-38290, CVE-2025-38294, CVE-2025-38499, CVE-2025-38167, CVE-2025-38098, CVE-2025-38298, CVE-2025-38279, CVE-2025-38278, CVE-2025-38149, CVE-2025-38073, CVE-2025-38100, CVE-2025-38033, CVE-2025-38080, CVE-2025-38314, CVE-2025-38166, CVE-2025-38154, CVE-2025-38050, CVE-2025-38123, CVE-2025-38070, CVE-2025-38169, CVE-2025-38077, CVE-2025-38082, CVE-2025-38061, CVE-2025-38032, CVE-2025-38092, CVE-2025-38176, CVE-2025-38044, CVE-2025-38277, CVE-2025-38305, CVE-2025-38034, CVE-2025-38293, CVE-2025-38115, CVE-2025-38057, CVE-2025-38126, CVE-2025-38312, CVE-2025-38117, CVE-2025-38141, CVE-2025-38155, CVE-2025-38161, CVE-2025-38142, CVE-2025-38036, CVE-2025-38165, CVE-2025-38069, CVE-2025-38106, CVE-2025-38267, CVE-2025-38138, CVE-2025-38119, CVE-2025-38282, CVE-2025-38275, CVE-2025-38081, CVE-2025-38414,…

Record: USN-7769-2
Updated: 2026-11-03

OSVUSN-7769-3 No score

linux-aws-6.14, linux-hwe-6.14 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Bus devices;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
NI-700 PMU driver;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
PTP clock framework;
SCSI subsystem;
ASPEED SoC drivers;
SPI subsystem;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
USB Gadget drivers;
Renesas USBHS Controller drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
F2FS file system;
File systems infrastructure;
Network file systems library;
NTFS3 file system;
SMB network file system;
Codetag library;
BPF subsystem;
LZO compression library;
Mellanox drivers;
IPv4 networking;
Bluetooth subsystem;
Network sockets;
XFRM subsystem;
Digital Audio (PCM) driver;
Tracing infrastructure;
io_uring subsystem;
Padata parallel execution mechanism;
DVFS energy model driver;
Restartable seuqences system call mechanism;
Timer subsystem;
Memory management;
KASAN memory debugging framework;
CAN network layer;
Networking core;
IPv6 networking;
Netfilter;
NetLabel subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
ALSA framework;
sma1307 audio codecs;
Intel ASoC drivers;
MediaTek ASoC drivers;
USB sound devices; (CVE-2025-38115, CVE-2025-38004, CVE-2025-38035, CVE-2025-38057, CVE-2025-38314, CVE-2025-38317, CVE-2025-38074, CVE-2025-38113, CVE-2025-38130, CVE-2025-38175, CVE-2025-38155, CVE-2025-38062, CVE-2025-38050, CVE-2025-38159, CVE-2025-38352, CVE-2025-38101, CVE-2025-38034, CVE-2025-38061, CVE-2025-38288, CVE-2025-38153, CVE-2025-38043, CVE-2025-38268, CVE-2025-38415, CVE-2025-38291, CVE-2025-38270, CVE-2025-38044, CVE-2025-38146, CVE-2025-38048, CVE-2025-38069, CVE-2025-38298, CVE-2025-38058, CVE-2025-38161, CVE-2025-38158, CVE-2025-38059, CVE-2025-38066, CVE-2025-38047, CVE-2025-38040, CVE-2025-38112, CVE-2025-38042, CVE-2025-38107, CVE-2025-38296, CVE-2025-38278, CVE-2025-39890, CVE-2025-38088, CVE-2025-38174, CVE-2025-38118, CVE-2025-38117, CVE-2025-38110, CVE-2025-38305, CVE-2025-38136, CVE-2025-38063, CVE-2025-38498, CVE-2025-38499, CVE-2025-38106, CVE-2025-38292, CVE-2025-38163, CVE-2025-38169, CVE-2025-38032, CVE-2025-38310, CVE-2025-38302, CVE-2025-38092, CVE-2025-38052, CVE-2025-38282, CVE-2025-38082, CVE-2025-38036, CVE-2025-38054, CVE-2025-38105, CVE-2025-38265, CVE-2025-38116, CVE-2025-38060, CVE-2025-38154, CVE-2025-38280, CVE-2025-38176, CVE-2025-38156, CVE-2025-38289, CVE-2025-38166, CVE-2025-38080, CVE-2025-38098, CVE-2025-38127, CVE-2025-38125, CVE-2025-38172, CVE-2025-38142, CVE-2025-38096, CVE-2025-38055, CVE-2025-38138, CVE-2025-38126, CVE-2025-38073, CVE-2025-38173, CVE-2025-38031,…

Record: USN-7769-3
Updated: 2026-11-03

OSVUSN-7770-1 No score

linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Bus devices;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
NI-700 PMU driver;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
PTP clock framework;
SCSI subsystem;
ASPEED SoC drivers;
SPI subsystem;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
USB Gadget drivers;
Renesas USBHS Controller drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
F2FS file system;
File systems infrastructure;
Network file systems library;
NTFS3 file system;
SMB network file system;
Codetag library;
BPF subsystem;
LZO compression library;
Mellanox drivers;
IPv4 networking;
Bluetooth subsystem;
Network sockets;
XFRM subsystem;
Digital Audio (PCM) driver;
Tracing infrastructure;
io_uring subsystem;
Padata parallel execution mechanism;
DVFS energy model driver;
Restartable seuqences system call mechanism;
Timer subsystem;
Memory management;
KASAN memory debugging framework;
CAN network layer;
Networking core;
IPv6 networking;
Netfilter;
NetLabel subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
ALSA framework;
sma1307 audio codecs;
Intel ASoC drivers;
MediaTek ASoC drivers;
USB sound devices; (CVE-2025-38155, CVE-2025-38145, CVE-2025-38072, CVE-2025-38306, CVE-2025-38004, CVE-2025-38053, CVE-2025-38293, CVE-2025-38045, CVE-2025-38105, CVE-2025-38079, CVE-2025-38161, CVE-2025-38031, CVE-2025-38114, CVE-2025-38033, CVE-2025-38274, CVE-2025-38265, CVE-2025-38135, CVE-2025-38075, CVE-2025-38313, CVE-2025-38064, CVE-2025-38118, CVE-2025-38299, CVE-2025-38123, CVE-2025-38112, CVE-2025-38073, CVE-2025-38070, CVE-2025-38138, CVE-2025-38303, CVE-2025-38148, CVE-2025-38035, CVE-2025-38157, CVE-2025-38131, CVE-2025-38107, CVE-2025-38108, CVE-2025-38071, CVE-2025-38081, CVE-2025-38301, CVE-2025-38415, CVE-2025-38034, CVE-2025-38294, CVE-2025-38314, CVE-2025-38285, CVE-2025-38147, CVE-2025-38113, CVE-2025-38352, CVE-2025-38170, CVE-2025-38103, CVE-2025-38282, CVE-2025-38290, CVE-2025-38117, CVE-2025-38078, CVE-2025-38122, CVE-2025-38176, CVE-2025-38082, CVE-2025-38289, CVE-2025-38124, CVE-2025-38039, CVE-2025-38281, CVE-2025-38126, CVE-2025-38111, CVE-2025-38080, CVE-2025-38088, CVE-2025-38048, CVE-2025-38269, CVE-2025-38003, CVE-2025-38102, CVE-2025-38140, CVE-2025-38316, CVE-2025-38268, CVE-2025-38132, CVE-2025-38286, CVE-2025-38159, CVE-2025-38120, CVE-2025-38295, CVE-2025-38077, CVE-2025-38297, CVE-2025-38174, CVE-2025-38160, CVE-2025-38119, CVE-2025-38099, CVE-2025-38134, CVE-2025-38051, CVE-2025-38061, CVE-2025-38317, CVE-2025-38142, CVE-2025-38175, CVE-2025-38091, CVE-2025-38311, CVE-2025-38066,…

Record: USN-7770-1
Updated: 2026-11-02

OSVUSN-7771-1 No score

linux-oem-6.14 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Bus devices;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
NI-700 PMU driver;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
PTP clock framework;
SCSI subsystem;
ASPEED SoC drivers;
SPI subsystem;
TCM subsystem;
TTY drivers;
UFS subsystem;
USB core drivers;
USB Gadget drivers;
Renesas USBHS Controller drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
F2FS file system;
File systems infrastructure;
Network file systems library;
NTFS3 file system;
SMB network file system;
Codetag library;
BPF subsystem;
LZO compression library;
Mellanox drivers;
IPv4 networking;
Bluetooth subsystem;
Network sockets;
XFRM subsystem;
Digital Audio (PCM) driver;
Tracing infrastructure;
io_uring subsystem;
Padata parallel execution mechanism;
DVFS energy model driver;
Restartable seuqences system call mechanism;
Timer subsystem;
Memory management;
KASAN memory debugging framework;
CAN network layer;
Networking core;
IPv6 networking;
Netfilter;
NetLabel subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
ALSA framework;
sma1307 audio codecs;
Intel ASoC drivers;
MediaTek ASoC drivers;
USB sound devices; (CVE-2025-38141, CVE-2025-38039, CVE-2025-38283, CVE-2025-38272, CVE-2025-38290, CVE-2025-38168, CVE-2025-38134, CVE-2025-38158, CVE-2025-38097, CVE-2025-38078, CVE-2025-38161, CVE-2025-38116, CVE-2025-38312, CVE-2025-38067, CVE-2025-38129, CVE-2025-38119, CVE-2025-38061, CVE-2025-38352, CVE-2025-38269, CVE-2025-38163, CVE-2025-38315, CVE-2025-38301, CVE-2025-38115, CVE-2025-38032, CVE-2025-38127, CVE-2025-38029, CVE-2025-38277, CVE-2025-38075, CVE-2025-38300, CVE-2025-38059, CVE-2025-38047, CVE-2025-38118, CVE-2025-38038, CVE-2025-38278, CVE-2025-38169, CVE-2025-38074, CVE-2025-38292, CVE-2025-38295, CVE-2025-38294, CVE-2025-38154, CVE-2025-38165, CVE-2025-38069, CVE-2025-38120, CVE-2025-38098, CVE-2025-38050, CVE-2025-38068, CVE-2025-38063, CVE-2025-38034, CVE-2025-38123, CVE-2025-38092, CVE-2025-38103, CVE-2025-38170, CVE-2025-38313, CVE-2025-38062, CVE-2025-38159, CVE-2025-38147, CVE-2025-38415, CVE-2025-38045, CVE-2025-38279, CVE-2025-38302, CVE-2025-38162, CVE-2025-38414, CVE-2025-38146, CVE-2025-38035, CVE-2025-38040, CVE-2025-38073, CVE-2025-38054, CVE-2025-38099, CVE-2025-38291, CVE-2025-38126, CVE-2025-38088, CVE-2025-38310, CVE-2025-38176, CVE-2025-38102, CVE-2025-38149, CVE-2025-38124, CVE-2025-38003, CVE-2025-38140, CVE-2025-38100, CVE-2025-38081, CVE-2025-38319, CVE-2025-38142, CVE-2025-38303, CVE-2025-38155, CVE-2025-38044, CVE-2025-38316, CVE-2025-38052, CVE-2025-38317, CVE-2025-38151, CVE-2025-38164, CVE-2025-38148,…

Record: USN-7771-1
Updated: 2026-11-03

OSVUSN-7789-1 No score

linux-oracle-6.14 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Bus devices;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
NI-700 PMU driver;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
PTP clock framework;
SCSI subsystem;
ASPEED SoC drivers;
SPI subsystem;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
USB Gadget drivers;
Renesas USBHS Controller drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
F2FS file system;
File systems infrastructure;
Network file systems library;
NTFS3 file system;
SMB network file system;
Codetag library;
BPF subsystem;
LZO compression library;
Mellanox drivers;
IPv4 networking;
Bluetooth subsystem;
Network sockets;
XFRM subsystem;
Digital Audio (PCM) driver;
Tracing infrastructure;
io_uring subsystem;
Padata parallel execution mechanism;
DVFS energy model driver;
Restartable seuqences system call mechanism;
Timer subsystem;
Memory management;
KASAN memory debugging framework;
CAN network layer;
Networking core;
IPv6 networking;
Netfilter;
NetLabel subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
ALSA framework;
sma1307 audio codecs;
Intel ASoC drivers;
MediaTek ASoC drivers;
USB sound devices; (CVE-2025-38137, CVE-2025-38141, CVE-2025-38035, CVE-2025-38298, CVE-2025-38042, CVE-2025-38140, CVE-2025-38138, CVE-2025-38316, CVE-2025-38304, CVE-2025-38165, CVE-2025-38306, CVE-2025-38082, CVE-2025-38132, CVE-2025-38498, CVE-2025-38158, CVE-2025-38154, CVE-2025-38064, CVE-2025-38129, CVE-2025-38096, CVE-2025-38352, CVE-2025-38303, CVE-2025-38122, CVE-2025-38048, CVE-2025-38296, CVE-2025-38149, CVE-2025-38319, CVE-2025-38078, CVE-2025-38066, CVE-2025-38099, CVE-2025-38291, CVE-2025-38267, CVE-2025-38268, CVE-2025-38126, CVE-2025-38076, CVE-2025-38077, CVE-2025-38101, CVE-2025-38071, CVE-2025-38163, CVE-2025-38285, CVE-2025-38265, CVE-2025-38125, CVE-2025-38302, CVE-2025-38172, CVE-2025-38292, CVE-2025-38279, CVE-2025-38170, CVE-2025-38062, CVE-2025-38074, CVE-2025-38050, CVE-2025-38116, CVE-2025-38414, CVE-2025-38173, CVE-2025-38033, CVE-2025-38112, CVE-2025-38091, CVE-2025-38290, CVE-2025-39890, CVE-2025-38156, CVE-2025-38289, CVE-2025-38275, CVE-2025-38295, CVE-2025-38123, CVE-2025-38300, CVE-2025-38067, CVE-2025-38131, CVE-2025-38294, CVE-2025-38105, CVE-2025-38107, CVE-2025-38106, CVE-2025-38069, CVE-2025-38041, CVE-2025-38111, CVE-2025-38312, CVE-2025-38092, CVE-2025-38054, CVE-2025-38166, CVE-2025-38044, CVE-2025-38159, CVE-2025-38061, CVE-2025-38115, CVE-2025-38058, CVE-2025-38036, CVE-2025-38100, CVE-2025-38075, CVE-2025-38160, CVE-2025-38102, CVE-2025-38269, CVE-2025-38108, CVE-2025-38119,…

Record: USN-7789-1
Updated: 2026-11-03

OSVUSN-7789-2 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Bluetooth drivers;
Bus devices;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
VMware VMCI Driver;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
NI-700 PMU driver;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
PTP clock framework;
SCSI subsystem;
ASPEED SoC drivers;
SPI subsystem;
TCM subsystem;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
USB Gadget drivers;
Renesas USBHS Controller drivers;
USB Type-C Port Controller Manager driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
Virtio drivers;
BTRFS file system;
EROFS file system;
F2FS file system;
File systems infrastructure;
Network file systems library;
NTFS3 file system;
SMB network file system;
Codetag library;
BPF subsystem;
LZO compression library;
Mellanox drivers;
IPv4 networking;
Bluetooth subsystem;
Network sockets;
XFRM subsystem;
Digital Audio (PCM) driver;
Tracing infrastructure;
io_uring subsystem;
Padata parallel execution mechanism;
DVFS energy model driver;
Restartable seuqences system call mechanism;
Timer subsystem;
Memory management;
KASAN memory debugging framework;
CAN network layer;
Networking core;
IPv6 networking;
Netfilter;
NetLabel subsystem;
Open vSwitch;
Network traffic control;
TIPC protocol;
TLS protocol;
ALSA framework;
sma1307 audio codecs;
Intel ASoC drivers;
MediaTek ASoC drivers;
USB sound devices; (CVE-2025-38081, CVE-2025-38142, CVE-2025-38157, CVE-2025-38174, CVE-2025-38156, CVE-2025-38044, CVE-2025-38414, CVE-2025-38041, CVE-2025-38124, CVE-2025-38122, CVE-2025-38285, CVE-2025-38317, CVE-2025-38159, CVE-2025-38352, CVE-2025-38117, CVE-2025-38040, CVE-2025-38292, CVE-2025-38301, CVE-2025-38149, CVE-2025-38299, CVE-2025-38116, CVE-2025-38100, CVE-2025-38107, CVE-2025-38063, CVE-2025-38069, CVE-2025-38130, CVE-2025-38032, CVE-2025-38113, CVE-2025-38287, CVE-2025-38138, CVE-2025-38004, CVE-2025-38097, CVE-2025-38270, CVE-2025-38311, CVE-2025-38499, CVE-2025-38050, CVE-2025-38064, CVE-2025-38278, CVE-2025-38297, CVE-2025-38091, CVE-2025-38065, CVE-2025-38114, CVE-2025-38048, CVE-2025-38096, CVE-2025-38112, CVE-2025-38148, CVE-2025-38101, CVE-2025-38062, CVE-2025-38057, CVE-2025-38029, CVE-2025-38105, CVE-2025-38277, CVE-2025-38053, CVE-2025-38302, CVE-2025-38169, CVE-2025-38307, CVE-2025-38153, CVE-2025-38106, CVE-2025-38293, CVE-2025-38267, CVE-2025-38314, CVE-2025-38291, CVE-2025-38284, CVE-2025-38141, CVE-2025-38052, CVE-2025-38079, CVE-2025-38088, CVE-2025-38164, CVE-2025-38288, CVE-2025-38289, CVE-2025-38074, CVE-2025-38073, CVE-2025-38274, CVE-2025-38167, CVE-2025-38129, CVE-2025-38082, CVE-2025-38109, CVE-2025-38003, CVE-2025-38042, CVE-2025-38319, CVE-2025-38165, CVE-2025-38102, CVE-2025-38045, CVE-2025-38154, CVE-2025-38127, CVE-2025-38034, CVE-2025-38051, CVE-2025-38143, CVE-2025-38061,…

Record: USN-7789-2
Updated: 2026-11-02

OSVUSN-8028-1 No score

linux, linux-raspi vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;…

Record: USN-8028-1
Updated: 2026-11-03

OSVUSN-8028-2 No score

linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-2
Updated: 2026-11-03

OSVUSN-8028-3 No score

linux-realtime, linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-3
Updated: 2026-11-03

OSVUSN-8028-4 No score

linux-aws-fips, linux-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-4
Updated: 2026-11-03

OSVUSN-8028-5 No score

linux-aws, linux-aws-6.8, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-5
Updated: 2026-11-03

OSVUSN-8028-6 No score

linux-hwe-6.8, linux-lowlatency-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-6
Updated: 2026-11-03

OSVUSN-8028-7 No score

linux-nvidia-lowlatency vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-7
Updated: 2026-11-03

OSVUSN-8028-8 No score

linux-ibm, linux-ibm-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-8
Updated: 2026-11-03

OSVUSN-8031-1 No score

linux-gcp-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8031-1
Updated: 2026-11-03

OSVUSN-8031-2 No score

linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8031-2
Updated: 2026-11-03

OSVUSN-8031-3 No score

linux-gcp, linux-gke vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8031-3
Updated: 2026-11-03

OSVUSN-8052-1 No score

linux-lowlatency vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8052-1
Updated: 2026-11-03

OSVUSN-8052-2 No score

linux-xilinx vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8052-2
Updated: 2026-11-03

OSVUSN-8074-1 No score

linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8074-1
Updated: 2026-11-03

OSVUSN-8074-2 No score

linux-azure-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8074-2
Updated: 2026-11-03

OSVUSN-8126-1 No score

linux-azure-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
Nios II architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
Sun Sparc architecture;
User-Mode Linux (UML);
x86 architecture;
Xtensa architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Block device driver;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Hardware random number generator core;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
EFI core;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Tablet) drivers;
IOMMU subsystem;
IRQ chip drivers;
ISDN/mISDN subsystem;
Mailbox framework;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Fastrpc Driver;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
Texas Instruments network drivers;
Ethernet team driver;
MediaTek network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
Amlogic Meson DDR PMU;
Performance monitor drivers;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
ARM PM domains;
Power supply drivers;
Powercap sysfs driver;
PPS (Pulse Per Second) driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem; -…

Record: USN-8126-1
Updated: 2026-11-03

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-64k` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-64k-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-64k-debug` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-64k-debug-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-64k-debug-devel` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-64k-debug-devel-matched` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-64k-debug-modules` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-64k-debug-modules-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-64k-debug-modules-extra` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-devel` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-64k-devel-matched` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-64k-modules` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-64k-modules-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-64k-modules-extra` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-abi-stablelists` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-cross-headers` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-debug` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-debug-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-debug-devel` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-debug-devel-matched` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-debug-modules` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-debug-modules-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-debug-modules-extra` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-debug-uki-virt` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-devel` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-devel-matched` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-doc` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-headers` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-modules` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-modules-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-modules-extra` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-64k` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-64k-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-64k-debug` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-64k-debug-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-64k-debug-devel` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-64k-debug-modules` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-64k-debug-modules-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-64k-debug-modules-extra` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-64k-devel` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-64k-modules` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-64k-modules-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-64k-modules-extra` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-debug` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-debug-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-debug-devel` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-debug-kvm` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-debug-modules` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-debug-modules-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-debug-modules-extra` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-devel` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-kvm` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-modules` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-modules-core` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-rt-modules-extra` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-tools` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-tools-libs` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-tools-libs-devel` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-uki-virt` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-uki-virt-addons` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`kernel-zfcpdump` AlmaLinux:9 From an advisory covering 2 CVEs	before 5.14.0-570.33.2.el9_6	5.14.0-570.33.2.el9_6
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`Kernel` Linux	6.3.0 up to 6.6.160, 6.7.0 up to 6.12.34, 6.13.0 up to 6.15.3	6.6.1606.12.346.15.3
`linux` Debian:13	before 6.12.35-1	6.12.35-1
`linux` Debian:14	before 6.12.35-1	6.12.35-1
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-64k-debug-devel` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-64k-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-64k-devel` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-64k-devel-matched` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-debug-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-debug-devel` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-debug-devel-matched` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-devel` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-devel-matched` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-doc` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-rt-64k-debug-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-rt-64k-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-rt-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-tools-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`libperf-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`perf` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`perf-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`python3-perf` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`python3-perf-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`rtla` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`rv` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-64k` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-64k-core` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-64k-debug` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-64k-debug-core` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-64k-debug-modules` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-64k-modules` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-64k-modules-core` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-64k-modules-extra` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-abi-stablelists` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-core` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-debug` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-debug-core` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-debug-modules` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-debug-modules-core` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-debug-modules-extra` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-debug-uki-virt` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-modules` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-modules-core` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-modules-extra` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-tools` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-tools-libs` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-uki-virt` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-uki-virt-addons` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-zfcpdump` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-zfcpdump-core` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-zfcpdump-modules-core` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel-tools-libs-devel` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`libperf` Red Hat:enterprise_linux:10.0 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel` Rocky Linux:10 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`kernel` Rocky Linux:9 From an advisory covering 2 CVEs	before 0:5.14.0-570.33.2.el9_6	0:5.14.0-570.33.2.el9_6
`linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`kernel-livepatch-SLE15-SP7-RT_Update_3` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 260 CVEs	before 1-150700.1.5.1	1-150700.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 260 CVEs	before 6.4.0-150700.7.13.1	6.4.0-150700.7.13.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 260 CVEs	before 6.4.0-150700.7.13.1	6.4.0-150700.7.13.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 260 CVEs	before 6.4.0-150700.7.13.1	6.4.0-150700.7.13.1
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1.150600.12.28.4	6.4.0-150600.23.65.1.150600.12.28.4
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-livepatch-SLE15-SP6_Update_14` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 238 CVEs	before 1-150600.13.3.4	1-150600.13.3.4
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1.150600.12.28.4	6.4.0-150600.23.65.1.150600.12.28.4
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1.150700.17.9.4	6.4.0-150700.53.11.1.150700.17.9.4
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.3	6.4.0-150700.53.11.3
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-livepatch-SLE15-SP7_Update_3` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 264 CVEs	before 1-150700.15.3.4	1-150700.15.3.4
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 265 CVEs	before 6.4.0-150700.20.11.1	6.4.0-150700.20.11.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 265 CVEs	before 6.4.0-150700.20.11.1	6.4.0-150700.20.11.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 265 CVEs	before 6.4.0-150700.20.11.1	6.4.0-150700.20.11.1
`kernel-livepatch-SLE15-SP6-RT_Update_14` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 235 CVEs	before 1-150600.1.5.1	1-150600.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 235 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 235 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 235 CVEs	before 6.4.0-32.1	6.4.0-32.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 235 CVEs	before 6.4.0-32.1.21.10	6.4.0-32.1.21.10
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 235 CVEs	before 6.4.0-32.1	6.4.0-32.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 235 CVEs	before 6.4.0-32.1	6.4.0-32.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 235 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 235 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 235 CVEs	before 6.4.0-32.1	6.4.0-32.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 235 CVEs	before 6.4.0-32.1.21.10	6.4.0-32.1.21.10
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 235 CVEs	before 6.4.0-32.1	6.4.0-32.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 235 CVEs	before 6.4.0-32.1	6.4.0-32.1
`kernel-64kb` SUSE:Linux Micro 6.2 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-default` SUSE:Linux Micro 6.2 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-default-base` SUSE:Linux Micro 6.2 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1.160000.2.4	6.12.0-160000.6.1.160000.2.4
`kernel-rt` SUSE:Linux Micro 6.2 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-source` SUSE:Linux Micro 6.2 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-64kb` SUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-aws-6.8` Ubuntu:22.04:LTS	before 6.8.0-1046.49~22.04.1, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1 Show 25 moreShow less 6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.1	6.8.0-1046.49~22.04.1
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-6.8` Ubuntu:22.04:LTS	before 6.8.0-1051.57~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1 Show 18 moreShow less 6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.1	6.8.0-1051.57~22.04.1
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-azure-fde-6.8` Ubuntu:22.04:LTS	before 6.8.0-1046.53~22.04.1, plus listed versions 6.8.0-1041.48~22.04.16.8.0-1042.49~22.04.16.8.0-1044.51~22.04.1	6.8.0-1046.53~22.04.1
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-gcp-6.8` Ubuntu:22.04:LTS	before 6.8.0-1047.50~22.04.2, plus listed versions 6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1 Show 27 moreShow less 6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.1	6.8.0-1047.50~22.04.2
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-hwe-6.8` Ubuntu:22.04:LTS	before 6.8.0-100.100~22.04.1, plus listed versions 6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1 Show 21 moreShow less 6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.1	6.8.0-100.100~22.04.1
`dtb-aarch64` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-64kb` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-default` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-default-base` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1.160000.2.4	6.12.0-160000.6.1.160000.2.4
`kernel-docs` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-kvmsmall` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-obs-build` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-obs-qa` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-rt` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-source` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-syms` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-zfcpdump` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-38292 is a high vulnerability (CVSS 8.8) in Linux, published July 10, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 23rd percentile. Fixed in linux-lts 6.12.41-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 319 package rows, 29 versions, 2,984 references and the rest of 40 source descriptions. The JSON record has them.