Every CVE Search/ Get API key

CVE-2025-38369

dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using

Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent process of the container is terminated.

This issue occurs because, under certain configurations, Docker does not properly propagate the mount replica back to the original mount point.

In this case, when the user driver detaches, the WQ is destroyed but it still calls destroy_workqueue() attempting to completes all pending work. It's necessary to check wq->wq and skip the drain if it no longer exists.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.19%Up 0.2 points since Jul 26, 2025
90%50%10%1%

What each source reports

NVD Score used 7.8

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using

Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent process of the container is terminated.

This issue occurs because, under certain configurations, Docker does not properly propagate the mount replica back to the original mount point.

In this case, when the user driver detaches, the WQ is destroyed but it still calls destroy_workqueue() attempting to completes all pending work. It's necessary to check wq->wq and skip the drain if it no longer exists.

Record
CVE-2025-38369
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-05
CVE List No score

dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using

Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent process of the container is terminated.

This issue occurs because, under certain configurations, Docker does not properly propagate the mount replica back to the original mount point.

In this case, when the user driver detaches, the WQ is destroyed but it still calls destroy_workqueue() attempting to completes all pending work. It's necessary to check wq->wq and skip the drain if it no longer exists.

Record
CVE-2025-38369
Updated
2026-11-05
EUVDEUVD-2025-22634 No score

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using

Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent process of the container is terminated.

This issue occurs because, under certain configurations, Docker does not properly propagate the mount replica back to the original mount point.

In this case, when the user driver detaches, the WQ is destroyed but it still calls destroy_workqueue() attempting to completes all pending work. It's necessary to check wq->wq and skip the drain if it no longer exists.

Record
EUVD-2025-22634
Updated
2026-11-05
GitHub AdvisoriesGHSA-q6ch-8cp2-xfhp 7.8

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Check...

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using

Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent process of the container is terminated.

This issue occurs because, under certain configurations, Docker does not properly propagate the mount replica back to the original mount point.

In this case, when the user driver detaches, the WQ is destroyed but it still calls destroy_workqueue() attempting to completes all pending work. It's necessary to check wq->wq and skip the drain if it no longer exists.

Record
GHSA-q6ch-8cp2-xfhp
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVBELL-CVE-2025-38369 7.8
Record
BELL-CVE-2025-38369
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2025-38369 7.8

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent process of the container is terminated. This issue occurs because, under certain configurations, Docker does not properly propagate the mount replica back to the original mount point. In this case, when the user driver detaches, the WQ is destroyed but it still calls destroy_workqueue() attempting to completes all pending work. It's necessary to check wq->wq and skip the drain if it no longer exists.

Record
DEBIAN-CVE-2025-38369
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
Show 48 moreShow less
OSVOESA-2025-2077 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

mac802154: check local interfaces before deleting sdata list

syzkaller reported a corrupted list in ieee802154_if_remove. [1]

Remove an IEEE 802.15.4 network interface after unregister an IEEE 802.15.4 hardware device from the system.

CPU0 CPU1 ==== ==== genl_family_rcv_msg_doit ieee802154_unregister_hw ieee802154_del_iface ieee802154_remove_interfaces rdev_del_virtual_intf_deprecated list_del(&sdata->list) ieee802154_if_remove list_del_rcu

The net device has been unregistered, since the rcu grace period, unregistration must be run before ieee802154_if_remove.

To avoid this issue, add a check for local->interfaces before deleting sdata list.

[1] kernel BUG at lib/list_debug.c:58! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 UID: 0 PID: 6277 Comm: syz-executor157 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:__list_del_entry_valid_or_report+0xf4/0x140 lib/list_debug.c:56 Code: e8 a1 7e 00 07 90 0f 0b 48 c7 c7 e0 37 60 8c 4c 89 fe e8 8f 7e 00 07 90 0f 0b 48 c7 c7 40 38 60 8c 4c 89 fe e8 7d 7e 00 07 90 <0f> 0b 48 c7 c7 a0 38 60 8c 4c 89 fe e8 6b 7e 00 07 90 0f 0b 48 c7 RSP: 0018:ffffc9000490f3d0 EFLAGS: 00010246 RAX: 000000000000004e RBX: dead000000000122 RCX: d211eee56bb28d00 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffff88805b278dd8 R08: ffffffff8174a12c R09: 1ffffffff2852f0d R10: dffffc0000000000 R11: fffffbfff2852f0e R12: dffffc0000000000 R13: dffffc0000000000 R14: dead000000000100 R15: ffff88805b278cc0 FS: 0000555572f94380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000056262e4a3000 CR3: 0000000078496000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> __list_del_entry_valid include/linux/list.h:124 [inline] __list_del_entry include/linux/list.h:215 [inline] list_del_rcu include/linux/rculist.h:157 [inline] ieee802154_if_remove+0x86/0x1e0 net/mac802154/iface.c:687 rdev_del_virtual_intf_deprecated net/ieee802154/rdev-ops.h:24 [inline] ieee802154_del_iface+0x2c0/0x5c0 net/ieee802154/nl-phy.c:323 genl_family_rcv_msg_doit net/netlink/genetlink.c:1115 [inline] genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline] genl_rcv_msg+0xb14/0xec0 net/netlink/genetlink.c:1210 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2551 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:729 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:744 ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2607 ___sys_sendmsg net/socket.c:2661 [inline] __sys_sendmsg+0x292/0x380 net/socket.c:2690 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f(CVE-2024-57948)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop

Move the conditional loading of hardware DR6 with the guest's DR6 value out of the core .vcpu_run() loop to fix a bug where KVM can load hardware with a stale vcpu->arch.dr6.

When the guest accesses a DR and host userspace isn't debugging the guest, KVM disables DR interception and loads the guest's values into hardware on VM-Enter and saves them on VM-Exit. This allows the guest to access DRs at will, e.g. so that a sequence of DR accesses to configure a breakpoint only generates one VM-Exit.

For DR0-DR3,…

Record
OESA-2025-2077
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2078 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

mac802154: check local interfaces before deleting sdata list

syzkaller reported a corrupted list in ieee802154_if_remove. [1]

Remove an IEEE 802.15.4 network interface after unregister an IEEE 802.15.4 hardware device from the system.

CPU0 CPU1 ==== ==== genl_family_rcv_msg_doit ieee802154_unregister_hw ieee802154_del_iface ieee802154_remove_interfaces rdev_del_virtual_intf_deprecated list_del(&sdata->list) ieee802154_if_remove list_del_rcu

The net device has been unregistered, since the rcu grace period, unregistration must be run before ieee802154_if_remove.

To avoid this issue, add a check for local->interfaces before deleting sdata list.

[1] kernel BUG at lib/list_debug.c:58! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 UID: 0 PID: 6277 Comm: syz-executor157 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:__list_del_entry_valid_or_report+0xf4/0x140 lib/list_debug.c:56 Code: e8 a1 7e 00 07 90 0f 0b 48 c7 c7 e0 37 60 8c 4c 89 fe e8 8f 7e 00 07 90 0f 0b 48 c7 c7 40 38 60 8c 4c 89 fe e8 7d 7e 00 07 90 <0f> 0b 48 c7 c7 a0 38 60 8c 4c 89 fe e8 6b 7e 00 07 90 0f 0b 48 c7 RSP: 0018:ffffc9000490f3d0 EFLAGS: 00010246 RAX: 000000000000004e RBX: dead000000000122 RCX: d211eee56bb28d00 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffff88805b278dd8 R08: ffffffff8174a12c R09: 1ffffffff2852f0d R10: dffffc0000000000 R11: fffffbfff2852f0e R12: dffffc0000000000 R13: dffffc0000000000 R14: dead000000000100 R15: ffff88805b278cc0 FS: 0000555572f94380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000056262e4a3000 CR3: 0000000078496000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> __list_del_entry_valid include/linux/list.h:124 [inline] __list_del_entry include/linux/list.h:215 [inline] list_del_rcu include/linux/rculist.h:157 [inline] ieee802154_if_remove+0x86/0x1e0 net/mac802154/iface.c:687 rdev_del_virtual_intf_deprecated net/ieee802154/rdev-ops.h:24 [inline] ieee802154_del_iface+0x2c0/0x5c0 net/ieee802154/nl-phy.c:323 genl_family_rcv_msg_doit net/netlink/genetlink.c:1115 [inline] genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline] genl_rcv_msg+0xb14/0xec0 net/netlink/genetlink.c:1210 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2551 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:729 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:744 ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2607 ___sys_sendmsg net/socket.c:2661 [inline] __sys_sendmsg+0x292/0x380 net/socket.c:2690 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f(CVE-2024-57948)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop

Move the conditional loading of hardware DR6 with the guest's DR6 value out of the core .vcpu_run() loop to fix a bug where KVM can load hardware with a stale vcpu->arch.dr6.

When the guest accesses a DR and host userspace isn't debugging the guest, KVM disables DR interception and loads the guest's values into hardware on VM-Enter and saves them on VM-Exit. This allows the guest to access DRs at will, e.g. so that a sequence of DR accesses to configure a breakpoint only generates one VM-Exit.

For DR0-DR3,…

Record
OESA-2025-2078
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2079 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

mac802154: check local interfaces before deleting sdata list

syzkaller reported a corrupted list in ieee802154_if_remove. [1]

Remove an IEEE 802.15.4 network interface after unregister an IEEE 802.15.4 hardware device from the system.

CPU0 CPU1 ==== ==== genl_family_rcv_msg_doit ieee802154_unregister_hw ieee802154_del_iface ieee802154_remove_interfaces rdev_del_virtual_intf_deprecated list_del(&sdata->list) ieee802154_if_remove list_del_rcu

The net device has been unregistered, since the rcu grace period, unregistration must be run before ieee802154_if_remove.

To avoid this issue, add a check for local->interfaces before deleting sdata list.

[1] kernel BUG at lib/list_debug.c:58! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 UID: 0 PID: 6277 Comm: syz-executor157 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 RIP: 0010:__list_del_entry_valid_or_report+0xf4/0x140 lib/list_debug.c:56 Code: e8 a1 7e 00 07 90 0f 0b 48 c7 c7 e0 37 60 8c 4c 89 fe e8 8f 7e 00 07 90 0f 0b 48 c7 c7 40 38 60 8c 4c 89 fe e8 7d 7e 00 07 90 <0f> 0b 48 c7 c7 a0 38 60 8c 4c 89 fe e8 6b 7e 00 07 90 0f 0b 48 c7 RSP: 0018:ffffc9000490f3d0 EFLAGS: 00010246 RAX: 000000000000004e RBX: dead000000000122 RCX: d211eee56bb28d00 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffff88805b278dd8 R08: ffffffff8174a12c R09: 1ffffffff2852f0d R10: dffffc0000000000 R11: fffffbfff2852f0e R12: dffffc0000000000 R13: dffffc0000000000 R14: dead000000000100 R15: ffff88805b278cc0 FS: 0000555572f94380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000056262e4a3000 CR3: 0000000078496000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> __list_del_entry_valid include/linux/list.h:124 [inline] __list_del_entry include/linux/list.h:215 [inline] list_del_rcu include/linux/rculist.h:157 [inline] ieee802154_if_remove+0x86/0x1e0 net/mac802154/iface.c:687 rdev_del_virtual_intf_deprecated net/ieee802154/rdev-ops.h:24 [inline] ieee802154_del_iface+0x2c0/0x5c0 net/ieee802154/nl-phy.c:323 genl_family_rcv_msg_doit net/netlink/genetlink.c:1115 [inline] genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline] genl_rcv_msg+0xb14/0xec0 net/netlink/genetlink.c:1210 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2551 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:729 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:744 ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2607 ___sys_sendmsg net/socket.c:2661 [inline] __sys_sendmsg+0x292/0x380 net/socket.c:2690 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f(CVE-2024-57948)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop

Move the conditional loading of hardware DR6 with the guest's DR6 value out of the core .vcpu_run() loop to fix a bug where KVM can load hardware with a stale vcpu->arch.dr6.

When the guest accesses a DR and host userspace isn't debugging the guest, KVM disables DR interception and loads the guest's values into hardware on VM-Enter and saves them on VM-Exit. This allows the guest to access DRs at will, e.g. so that a sequence of DR accesses to configure a breakpoint only generates one VM-Exit.

For DR0-DR3,…

Record
OESA-2025-2079
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:20095 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:20095
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:20095 7.8

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)

  • kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)

  • kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)

  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)

  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)

  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)

  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)

  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)

  • kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)

  • kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)

  • kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633)

  • kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)

  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)

  • kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)

  • kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)

  • kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)

  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)

  • kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)

  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)

  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)

  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)

  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)

  • kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)

  • kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)

  • kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)

  • kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)

  • kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)

  • kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)

  • kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)

  • kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)

  • kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)

  • kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)

  • kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)

  • kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)

  • kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)

  • kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)

  • kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)

  • kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)

  • kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)

  • kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)

  • kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)

  • kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)

  • kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)

  • kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)

  • kernel: HID: multitouch: Add NULL check in mt_input_configured…

Record
RLSA-2025:20095
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2025-38369 7.8

CVE-2025-38369 in linux - Patched by Root

Root has patched CVE-2025-38369 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2025-38369
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-38369 7.8

CVE-2025-38369 in linux - Patched by Root

Root has patched CVE-2025-38369 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2025-38369
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2025-38369 7.8

CVE-2025-38369 in linux - Patched by Root

Root has patched CVE-2025-38369 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2025-38369
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2025-38369 7.8

CVE-2025-38369 in linux - Patched by Root

Root has patched CVE-2025-38369 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2025-38369
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2025-38369 5.7

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent process of the container is terminated. This issue occurs because, under certain configurations, Docker does not properly propagate the mount replica back to the original mount point. In this case, when the user driver detaches, the WQ is destroyed but it still calls destroy_workqueue() attempting to completes all pending work. It's necessary to check wq->wq and skip the drain if it no longer exists.

Record
UBUNTU-CVE-2025-38369
CVSS 4.0
5.7 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-10
OSVALSA-2025:20095 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  • kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)
  • kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)
  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  • kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)
  • kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)
  • kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633)
  • kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)
  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  • kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)
  • kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)
  • kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)
  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  • kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)
  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
  • kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)
  • kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)
  • kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)
  • kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)
  • kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)
  • kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)
  • kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)
  • kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)
  • kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)
  • kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)
  • kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)
  • kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)
  • kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)
  • kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
  • kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)
  • kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)
  • kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)
  • kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)
  • kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)
  • kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)
  • kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)
  • kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)
  • kernel: HID:…
Record
ALSA-2025:20095
Updated
2026-11-02
OSVAZL-70448 No score

CVE-2025-38369 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using

Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent process of the container is terminated.

This issue occurs because, under certain configurations, Docker does not properly propagate the mount replica back to the original mount point.

In this case, when the user driver detaches, the WQ is destroyed but it still calls destroy_workqueue() attempting to completes all pending work. It's necessary to check wq->wq and skip the drain if it no longer exists.

Record
AZL-70448
Updated
2026-11-02
OSV No score

dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using

Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent process of the container is terminated.

This issue occurs because, under certain configurations, Docker does not properly propagate the mount replica back to the original mount point.

In this case, when the user driver detaches, the WQ is destroyed but it still calls destroy_workqueue() attempting to completes all pending work. It's necessary to check wq->wq and skip the drain if it no longer exists.

Record
CVE-2025-38369
Updated
2026-11-07
OSVMGASA-2025-0218 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.101 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2025-0218
Updated
2026-11-02
OSVMGASA-2025-0219 No score

Updated kernel, kmod-virtualbox, kmod-xtables-addons & wireless-regdb packages fix security vulnerabilities

Upstream kernel version 6.6.101 fixes bugs and vulnerabilities. The kmod-virtualbox, kmod-xtables-addons & wireless-regdb packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record
MGASA-2025-0219
Updated
2026-11-02
OSVopenSUSE-SU-2025:20081-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
openSUSE-SU-2025:20081-1
Updated
2026-11-02
OSVSUSE-SU-2025:02853-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664 bsc#1247831).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…
Record
SUSE-SU-2025:02853-1
Updated
2026-11-02
OSVSUSE-SU-2025:02923-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition (bsc#1139073).
  • CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
  • CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (bsc#1246183).
  • CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).
  • CVE-2025-38371: drm/v3d: Disable interrupts before resetting the GPU (bsc#1247178).
  • CVE-2025-38392: idpf: convert control queue mutex to a spinlock (bsc#1247169).
  • CVE-2025-38399: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (bsc#1247097).
  • CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (bsc#1247252).
  • CVE-2025-38457: net/sched: Abort __tc_modify_qdisc if parent class does not exist (bsc#1247098).
  • CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
  • CVE-2025-38465: netlink: make sure we allow at least one dump skb (bsc#1247118).
  • CVE-2025-38470: kABI fix for net: vlan: fix VLAN 0 refcount imbalance of toggling (bsc#1247288).
  • CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247450).
  • CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (bsc#1247243).
  • CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).
  • CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
  • CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
  • CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
  • CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
  • CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
  • CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
  • CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
  • CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
  • CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
  • CVE-2025-23163: net:…
Record
SUSE-SU-2025:02923-1
Updated
2026-11-02
OSVSUSE-SU-2025:02969-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…
Record
SUSE-SU-2025:02969-1
Updated
2026-11-02
OSVSUSE-SU-2025:02996-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (1230216).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…
Record
SUSE-SU-2025:02996-1
Updated
2026-11-02
OSVSUSE-SU-2025:02997-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695)
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-39298:mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (bsc#1227082).
  • CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma…
Record
SUSE-SU-2025:02997-1
Updated
2026-11-02
OSVSUSE-SU-2025:03011-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695).
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-39298:mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (bsc#1227082).
  • CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664 bsc#1247831).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147:…
Record
SUSE-SU-2025:03011-1
Updated
2026-11-02
OSVSUSE-SU-2025:03023-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may (bsc#1139073)
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
  • CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
  • CVE-2025-38188:…
Record
SUSE-SU-2025:03023-1
Updated
2026-11-02
OSVSUSE-SU-2025:20577-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
  • CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
  • CVE-2025-38188:…
Record
SUSE-SU-2025:20577-1
Updated
2026-11-02
OSVSUSE-SU-2025:20586-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
  • CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
  • CVE-2025-38188:…
Record
SUSE-SU-2025:20586-1
Updated
2026-11-02
OSVSUSE-SU-2025:20601-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
  • CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
  • CVE-2025-38188:…
Record
SUSE-SU-2025:20601-1
Updated
2026-11-02
OSVSUSE-SU-2025:20602-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
  • CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
  • CVE-2025-38188:…
Record
SUSE-SU-2025:20602-1
Updated
2026-11-02
OSVSUSE-SU-2025:21074-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
SUSE-SU-2025:21074-1
Updated
2026-11-02
OSVSUSE-SU-2025:21139-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
SUSE-SU-2025:21139-1
Updated
2026-11-02
OSVSUSE-SU-2025:21179-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
SUSE-SU-2025:21179-1
Updated
2026-11-02
OSVSUSE-SU-2026:20560-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
SUSE-SU-2026:20560-1
Updated
2026-11-02
OSVUSN-7833-1 No score

linux, linux-aws, linux-gcp, linux-oem-6.14, linux-oracle, linux-oracle-6.14, linux-raspi, linux-realtime vulnerabilities

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • Ublk userspace block driver;
  • Bus devices;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • Cirrus firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • Multiple devices driver;
  • Media drivers;
  • TI TPS6594 PFSM driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • NVME drivers;
  • x86 platform drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • ChipIdea USB driver;
  • USB Type-C support driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • SMB network file system;
  • Memory Management;
  • Bluetooth subsystem;
  • Tracing infrastructure;
  • io_uring subsystem;
  • IPC subsystem;
  • BPF subsystem;
  • Perf events;
  • Kernel exit() syscall;
  • IRQ subsystem;
  • Scheduler infrastructure;
  • Maple Tree data structure library;
  • Memory management;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • Ethernet bridge;
  • Networking core;
  • IPv6 networking;
  • MultiProtocol Label Switching driver;
  • Netfilter;
  • NFC subsystem;
  • Rose network layer;
  • Network traffic control;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Unix domain sockets;
  • VMware vSockets driver;
  • WCD audio codecs;
  • USB sound devices; (CVE-2025-38339, CVE-2025-38391, CVE-2025-38262, CVE-2025-38345, CVE-2025-38387, CVE-2025-38373, CVE-2025-38395, CVE-2025-38330, CVE-2025-38425, CVE-2025-38210, CVE-2025-38206, CVE-2025-38219, CVE-2025-38245, CVE-2025-38253, CVE-2025-38401, CVE-2025-38410, CVE-2025-38086, CVE-2025-38340, CVE-2025-38368, CVE-2025-38385, CVE-2025-38384, CVE-2025-38326, CVE-2025-38224, CVE-2025-38338, CVE-2025-38191, CVE-2025-39682, CVE-2025-38343, CVE-2025-38090, CVE-2025-38228, CVE-2025-38182, CVE-2025-38231, CVE-2025-38183, CVE-2025-38184, CVE-2025-38237, CVE-2025-38413, CVE-2025-38356, CVE-2025-38246, CVE-2025-38202, CVE-2025-38248, CVE-2025-38254, CVE-2025-38426, CVE-2025-38429, CVE-2025-38364, CVE-2025-38388, CVE-2025-38435, CVE-2025-38403, CVE-2025-38186, CVE-2025-38199, CVE-2025-38402, CVE-2025-38181, CVE-2025-38264, CVE-2025-38362, CVE-2025-38341, CVE-2025-38422, CVE-2025-38331, CVE-2025-38423, CVE-2025-38233, CVE-2025-38337, CVE-2025-38328, CVE-2025-38196, CVE-2025-38412, CVE-2025-38205, CVE-2025-38242, CVE-2025-38324, CVE-2025-38354, CVE-2025-38347, CVE-2025-38217, CVE-2025-38393, CVE-2025-38392, CVE-2025-38390, CVE-2025-38321, CVE-2025-38541, CVE-2025-38363, CVE-2025-38203, CVE-2025-38250, CVE-2025-38418, CVE-2025-38336, CVE-2025-38333, CVE-2025-38194, CVE-2025-38372, CVE-2025-38348, CVE-2025-38370, CVE-2025-38411, CVE-2025-38188, CVE-2025-38365, CVE-2025-38241, CVE-2025-38201,…
Record
USN-7833-1
Updated
2026-11-03
OSVUSN-7833-2 No score

linux-realtime-6.14 vulnerabilities

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • Ublk userspace block driver;
  • Bus devices;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • Cirrus firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • Multiple devices driver;
  • Media drivers;
  • TI TPS6594 PFSM driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • NVME drivers;
  • x86 platform drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • ChipIdea USB driver;
  • USB Type-C support driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • SMB network file system;
  • Memory Management;
  • Bluetooth subsystem;
  • Tracing infrastructure;
  • io_uring subsystem;
  • IPC subsystem;
  • BPF subsystem;
  • Perf events;
  • Kernel exit() syscall;
  • IRQ subsystem;
  • Scheduler infrastructure;
  • Maple Tree data structure library;
  • Memory management;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • Ethernet bridge;
  • Networking core;
  • IPv6 networking;
  • MultiProtocol Label Switching driver;
  • Netfilter;
  • NFC subsystem;
  • Rose network layer;
  • Network traffic control;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Unix domain sockets;
  • VMware vSockets driver;
  • WCD audio codecs;
  • USB sound devices; (CVE-2025-38339, CVE-2025-38391, CVE-2025-38262, CVE-2025-38345, CVE-2025-38387, CVE-2025-38373, CVE-2025-38395, CVE-2025-38330, CVE-2025-38425, CVE-2025-38210, CVE-2025-38206, CVE-2025-38219, CVE-2025-38245, CVE-2025-38253, CVE-2025-38401, CVE-2025-38410, CVE-2025-38086, CVE-2025-38340, CVE-2025-38368, CVE-2025-38385, CVE-2025-38384, CVE-2025-38326, CVE-2025-38224, CVE-2025-38338, CVE-2025-38191, CVE-2025-39682, CVE-2025-38343, CVE-2025-38090, CVE-2025-38228, CVE-2025-38182, CVE-2025-38231, CVE-2025-38183, CVE-2025-38184, CVE-2025-38237, CVE-2025-38413, CVE-2025-38356, CVE-2025-38246, CVE-2025-38202, CVE-2025-38248, CVE-2025-38254, CVE-2025-38426, CVE-2025-38429, CVE-2025-38364, CVE-2025-38388, CVE-2025-38435, CVE-2025-38403, CVE-2025-38186, CVE-2025-38199, CVE-2025-38402, CVE-2025-38181, CVE-2025-38264, CVE-2025-38362, CVE-2025-38341, CVE-2025-38422, CVE-2025-38331, CVE-2025-38423, CVE-2025-38233, CVE-2025-38337, CVE-2025-38328, CVE-2025-38196, CVE-2025-38412, CVE-2025-38205, CVE-2025-38242, CVE-2025-38324, CVE-2025-38354, CVE-2025-38347, CVE-2025-38217, CVE-2025-38393, CVE-2025-38392, CVE-2025-38390, CVE-2025-38321, CVE-2025-38541, CVE-2025-38363, CVE-2025-38203, CVE-2025-38250, CVE-2025-38418, CVE-2025-38336, CVE-2025-38333, CVE-2025-38194, CVE-2025-38372, CVE-2025-38348, CVE-2025-38370, CVE-2025-38411, CVE-2025-38188, CVE-2025-38365, CVE-2025-38241, CVE-2025-38201,…
Record
USN-7833-2
Updated
2026-11-03
OSVUSN-7833-3 No score

linux-aws-6.14 vulnerabilities

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • Ublk userspace block driver;
  • Bus devices;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • Cirrus firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • Multiple devices driver;
  • Media drivers;
  • TI TPS6594 PFSM driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • NVME drivers;
  • x86 platform drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • ChipIdea USB driver;
  • USB Type-C support driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • SMB network file system;
  • Memory Management;
  • Bluetooth subsystem;
  • Tracing infrastructure;
  • io_uring subsystem;
  • IPC subsystem;
  • BPF subsystem;
  • Perf events;
  • Kernel exit() syscall;
  • IRQ subsystem;
  • Scheduler infrastructure;
  • Maple Tree data structure library;
  • Memory management;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • Ethernet bridge;
  • Networking core;
  • IPv6 networking;
  • MultiProtocol Label Switching driver;
  • Netfilter;
  • NFC subsystem;
  • Rose network layer;
  • Network traffic control;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Unix domain sockets;
  • VMware vSockets driver;
  • WCD audio codecs;
  • USB sound devices; (CVE-2025-38339, CVE-2025-38391, CVE-2025-38262, CVE-2025-38345, CVE-2025-38387, CVE-2025-38373, CVE-2025-38395, CVE-2025-38330, CVE-2025-38425, CVE-2025-38210, CVE-2025-38206, CVE-2025-38219, CVE-2025-38245, CVE-2025-38253, CVE-2025-38401, CVE-2025-38410, CVE-2025-38086, CVE-2025-38340, CVE-2025-38368, CVE-2025-38385, CVE-2025-38384, CVE-2025-38326, CVE-2025-38224, CVE-2025-38338, CVE-2025-38191, CVE-2025-39682, CVE-2025-38343, CVE-2025-38090, CVE-2025-38228, CVE-2025-38182, CVE-2025-38231, CVE-2025-38183, CVE-2025-38184, CVE-2025-38237, CVE-2025-38413, CVE-2025-38356, CVE-2025-38246, CVE-2025-38202, CVE-2025-38248, CVE-2025-38254, CVE-2025-38426, CVE-2025-38429, CVE-2025-38364, CVE-2025-38388, CVE-2025-38435, CVE-2025-38403, CVE-2025-38186, CVE-2025-38199, CVE-2025-38402, CVE-2025-38181, CVE-2025-38264, CVE-2025-38362, CVE-2025-38341, CVE-2025-38422, CVE-2025-38331, CVE-2025-38423, CVE-2025-38233, CVE-2025-38337, CVE-2025-38328, CVE-2025-38196, CVE-2025-38412, CVE-2025-38205, CVE-2025-38242, CVE-2025-38324, CVE-2025-38354, CVE-2025-38347, CVE-2025-38217, CVE-2025-38393, CVE-2025-38392, CVE-2025-38390, CVE-2025-38321, CVE-2025-38541, CVE-2025-38363, CVE-2025-38203, CVE-2025-38250, CVE-2025-38418, CVE-2025-38336, CVE-2025-38333, CVE-2025-38194, CVE-2025-38372, CVE-2025-38348, CVE-2025-38370, CVE-2025-38411, CVE-2025-38188, CVE-2025-38365, CVE-2025-38241, CVE-2025-38201,…
Record
USN-7833-3
Updated
2026-11-03
OSVUSN-7833-4 No score

linux-gcp-6.14 vulnerabilities

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • Ublk userspace block driver;
  • Bus devices;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • Cirrus firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • Multiple devices driver;
  • Media drivers;
  • TI TPS6594 PFSM driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • NVME drivers;
  • x86 platform drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • ChipIdea USB driver;
  • USB Type-C support driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • SMB network file system;
  • Memory Management;
  • Bluetooth subsystem;
  • Tracing infrastructure;
  • io_uring subsystem;
  • IPC subsystem;
  • BPF subsystem;
  • Perf events;
  • Kernel exit() syscall;
  • IRQ subsystem;
  • Scheduler infrastructure;
  • Maple Tree data structure library;
  • Memory management;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • Ethernet bridge;
  • Networking core;
  • IPv6 networking;
  • MultiProtocol Label Switching driver;
  • Netfilter;
  • NFC subsystem;
  • Rose network layer;
  • Network traffic control;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Unix domain sockets;
  • VMware vSockets driver;
  • WCD audio codecs;
  • USB sound devices; (CVE-2025-38339, CVE-2025-38391, CVE-2025-38262, CVE-2025-38345, CVE-2025-38387, CVE-2025-38373, CVE-2025-38395, CVE-2025-38330, CVE-2025-38425, CVE-2025-38210, CVE-2025-38206, CVE-2025-38219, CVE-2025-38245, CVE-2025-38253, CVE-2025-38401, CVE-2025-38410, CVE-2025-38086, CVE-2025-38340, CVE-2025-38368, CVE-2025-38385, CVE-2025-38384, CVE-2025-38326, CVE-2025-38224, CVE-2025-38338, CVE-2025-38191, CVE-2025-39682, CVE-2025-38343, CVE-2025-38090, CVE-2025-38228, CVE-2025-38182, CVE-2025-38231, CVE-2025-38183, CVE-2025-38184, CVE-2025-38237, CVE-2025-38413, CVE-2025-38356, CVE-2025-38246, CVE-2025-38202, CVE-2025-38248, CVE-2025-38254, CVE-2025-38426, CVE-2025-38429, CVE-2025-38364, CVE-2025-38388, CVE-2025-38435, CVE-2025-38403, CVE-2025-38186, CVE-2025-38199, CVE-2025-38402, CVE-2025-38181, CVE-2025-38264, CVE-2025-38362, CVE-2025-38341, CVE-2025-38422, CVE-2025-38331, CVE-2025-38423, CVE-2025-38233, CVE-2025-38337, CVE-2025-38328, CVE-2025-38196, CVE-2025-38412, CVE-2025-38205, CVE-2025-38242, CVE-2025-38324, CVE-2025-38354, CVE-2025-38347, CVE-2025-38217, CVE-2025-38393, CVE-2025-38392, CVE-2025-38390, CVE-2025-38321, CVE-2025-38541, CVE-2025-38363, CVE-2025-38203, CVE-2025-38250, CVE-2025-38418, CVE-2025-38336, CVE-2025-38333, CVE-2025-38194, CVE-2025-38372, CVE-2025-38348, CVE-2025-38370, CVE-2025-38411, CVE-2025-38188, CVE-2025-38365, CVE-2025-38241, CVE-2025-38201,…
Record
USN-7833-4
Updated
2026-11-03
OSVUSN-7834-1 No score

linux-azure, linux-azure-6.14, linux-azure-nvidia-6.14 vulnerabilities

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • Ublk userspace block driver;
  • Bus devices;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • Cirrus firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • Multiple devices driver;
  • Media drivers;
  • TI TPS6594 PFSM driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • NVME drivers;
  • x86 platform drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • ChipIdea USB driver;
  • USB Type-C support driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • SMB network file system;
  • Memory Management;
  • Bluetooth subsystem;
  • Tracing infrastructure;
  • io_uring subsystem;
  • IPC subsystem;
  • BPF subsystem;
  • Perf events;
  • Kernel exit() syscall;
  • IRQ subsystem;
  • Scheduler infrastructure;
  • Maple Tree data structure library;
  • Memory management;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • Ethernet bridge;
  • Networking core;
  • IPv6 networking;
  • MultiProtocol Label Switching driver;
  • Netfilter;
  • NFC subsystem;
  • Rose network layer;
  • Network traffic control;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Unix domain sockets;
  • VMware vSockets driver;
  • WCD audio codecs;
  • USB sound devices; (CVE-2025-38217, CVE-2025-38259, CVE-2025-38257, CVE-2025-38388, CVE-2025-38258, CVE-2025-38086, CVE-2025-38416, CVE-2025-38428, CVE-2025-38368, CVE-2025-38233, CVE-2025-38391, CVE-2025-38364, CVE-2025-38328, CVE-2025-38417, CVE-2025-38228, CVE-2025-38413, CVE-2025-38360, CVE-2025-38248, CVE-2025-38346, CVE-2025-38197, CVE-2025-38179, CVE-2025-38186, CVE-2025-38356, CVE-2025-38371, CVE-2025-38231, CVE-2025-38249, CVE-2025-38334, CVE-2025-38325, CVE-2025-38353, CVE-2025-38422, CVE-2025-38387, CVE-2025-38225, CVE-2025-38224, CVE-2025-38400, CVE-2025-38245, CVE-2025-38411, CVE-2025-38205, CVE-2025-38362, CVE-2025-38200, CVE-2025-38250, CVE-2025-38541, CVE-2025-38326, CVE-2025-38342, CVE-2025-38208, CVE-2025-38261, CVE-2025-38407, CVE-2025-38202, CVE-2025-38331, CVE-2025-38189, CVE-2025-38090, CVE-2025-38184, CVE-2025-38255, CVE-2025-38419, CVE-2025-38340, CVE-2025-38383, CVE-2025-38423, CVE-2025-38332, CVE-2025-38246, CVE-2025-38429, CVE-2025-38410, CVE-2025-38396, CVE-2025-38262, CVE-2025-38191, CVE-2025-38420, CVE-2025-38226, CVE-2025-38341, CVE-2025-38199, CVE-2025-38085, CVE-2025-38188, CVE-2025-38253, CVE-2025-38182, CVE-2025-38087, CVE-2025-38203, CVE-2025-38194, CVE-2025-38227, CVE-2025-38365, CVE-2025-38238, CVE-2025-38201, CVE-2025-38196, CVE-2025-38232, CVE-2025-38361, CVE-2025-38392, CVE-2025-38254, CVE-2025-38370, CVE-2025-38192, CVE-2025-38229, CVE-2025-38241,…
Record
USN-7834-1
Updated
2026-11-03
OSVUSN-7856-1 No score

linux-hwe-6.14 vulnerabilities

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • Ublk userspace block driver;
  • Bus devices;
  • DMA engine subsystem;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • Cirrus firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • Multiple devices driver;
  • Media drivers;
  • TI TPS6594 PFSM driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • NVME drivers;
  • x86 platform drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • ChipIdea USB driver;
  • USB Type-C support driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • Ext4 file system;
  • F2FS file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • SMB network file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • Memory Management;
  • Bluetooth subsystem;
  • Tracing infrastructure;
  • io_uring subsystem;
  • IPC subsystem;
  • BPF subsystem;
  • Perf events;
  • Kernel exit() syscall;
  • IRQ subsystem;
  • Scheduler infrastructure;
  • Maple Tree data structure library;
  • Memory management;
  • Ethernet bridge;
  • Networking core;
  • IPv6 networking;
  • MultiProtocol Label Switching driver;
  • Netfilter;
  • NFC subsystem;
  • Rose network layer;
  • Network traffic control;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • Unix domain sockets;
  • VMware vSockets driver;
  • WCD audio codecs;
  • USB sound devices; (CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38087, CVE-2025-38089, CVE-2025-38090, CVE-2025-38179, CVE-2025-38180, CVE-2025-38181, CVE-2025-38182, CVE-2025-38183, CVE-2025-38184, CVE-2025-38185, CVE-2025-38186, CVE-2025-38188, CVE-2025-38189, CVE-2025-38190, CVE-2025-38191, CVE-2025-38192, CVE-2025-38193, CVE-2025-38194, CVE-2025-38196, CVE-2025-38197, CVE-2025-38198, CVE-2025-38199, CVE-2025-38200, CVE-2025-38201, CVE-2025-38202, CVE-2025-38203, CVE-2025-38204, CVE-2025-38205, CVE-2025-38206, CVE-2025-38208, CVE-2025-38210, CVE-2025-38211, CVE-2025-38212, CVE-2025-38214, CVE-2025-38215, CVE-2025-38217, CVE-2025-38218, CVE-2025-38219, CVE-2025-38220, CVE-2025-38222, CVE-2025-38223, CVE-2025-38224, CVE-2025-38225, CVE-2025-38226, CVE-2025-38227, CVE-2025-38228, CVE-2025-38229, CVE-2025-38230, CVE-2025-38231, CVE-2025-38232, CVE-2025-38233, CVE-2025-38234, CVE-2025-38236, CVE-2025-38237, CVE-2025-38238, CVE-2025-38239, CVE-2025-38241, CVE-2025-38242, CVE-2025-38244, CVE-2025-38245, CVE-2025-38246, CVE-2025-38248, CVE-2025-38249, CVE-2025-38250, CVE-2025-38251, CVE-2025-38253, CVE-2025-38254, CVE-2025-38255, CVE-2025-38256, CVE-2025-38257, CVE-2025-38258, CVE-2025-38259, CVE-2025-38260, CVE-2025-38261, CVE-2025-38262, CVE-2025-38263, CVE-2025-38264, CVE-2025-38320, CVE-2025-38321, CVE-2025-38322, CVE-2025-38323, CVE-2025-38324, CVE-2025-38325,…
Record
USN-7856-1
Updated
2026-11-02
OSVUSN-8028-1 No score

linux, linux-raspi vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system;…
Record
USN-8028-1
Updated
2026-11-03
OSVUSN-8028-2 No score

linux-realtime-6.8 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8028-2
Updated
2026-11-03
OSVUSN-8028-3 No score

linux-realtime, linux-raspi-realtime vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8028-3
Updated
2026-11-03
OSVUSN-8028-4 No score

linux-aws-fips, linux-fips vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8028-4
Updated
2026-11-03
OSVUSN-8028-5 No score

linux-aws, linux-aws-6.8, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8028-5
Updated
2026-11-03
OSVUSN-8028-6 No score

linux-hwe-6.8, linux-lowlatency-hwe-6.8 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8028-6
Updated
2026-11-03
OSVUSN-8028-7 No score

linux-nvidia-lowlatency vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8028-7
Updated
2026-11-03
OSVUSN-8028-8 No score

linux-ibm, linux-ibm-6.8 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8028-8
Updated
2026-11-03
OSVUSN-8031-1 No score

linux-gcp-6.8 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8031-1
Updated
2026-11-03
OSVUSN-8031-2 No score

linux-gcp-fips vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8031-2
Updated
2026-11-03
OSVUSN-8031-3 No score

linux-gcp, linux-gke vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8031-3
Updated
2026-11-03

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-cross-headers
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-doc
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-headers
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules-extra-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-tools
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-tools-libs
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-tools-libs-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel
Azure Linux:2
 through 5.15.200.1-1 None known
linux-lts
Alpaquita:23
 6.1.143-r1 and later None known
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
Kernel
Linux
 5.6.0 up to 6.6.96, 6.7.0 up to 6.12.36, 6.13.0 up to 6.15.5
6.6.966.12.366.15.5
linux
Debian:12
 All versions, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.187-16.1.190-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+1
 None known
linux
Debian:13
 before 6.12.37-1
6.12.37-1
linux
Debian:14
 before 6.12.37-1
6.12.37-1
kernel-linus
Mageia:9
From an advisory covering 237 CVEs
 before 6.6.101-1.mga9
6.6.101-1.mga9
kernel
Mageia:9
From an advisory covering 237 CVEs
 before 6.6.101-1.mga9
6.6.101-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 237 CVEs
 before 7.1.10-7.mga9
7.1.10-7.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 237 CVEs
 before 3.24-83.mga9
3.24-83.mga9
wireless-regdb
Mageia:9
From an advisory covering 237 CVEs
 before 20250710-1.mga9
20250710-1.mga9
kernel
openEuler:24.03-LTS
From an advisory covering 46 CVEs
 before 6.6.0-107.0.0.99.oe2403
6.6.0-107.0.0.99.oe2403
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 46 CVEs
 before 6.6.0-107.0.0.110.oe2403sp1
6.6.0-107.0.0.110.oe2403sp1
kernel
openEuler:24.03-LTS-SP2
From an advisory covering 46 CVEs
 before 6.6.0-107.0.0.113.oe2403sp2
6.6.0-107.0.0.113.oe2403sp2
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-doc
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-tools-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
libperf-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
perf
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
perf-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
python3-perf
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
python3-perf-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
rtla
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
rv
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-abi-stablelists
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-uki-virt
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-modules-extra-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-tools
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-tools-libs
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-uki-virt
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-uki-virt-addons
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel
Rocky Linux:10
From an advisory covering 88 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-livepatch-SLE15-SP7-RT_Update_3
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 260 CVEs
 before 1-150700.1.5.1
1-150700.1.5.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 260 CVEs
 before 6.4.0-150700.7.13.1
6.4.0-150700.7.13.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 260 CVEs
 before 6.4.0-150700.7.13.1
6.4.0-150700.7.13.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 260 CVEs
 before 6.4.0-150700.7.13.1
6.4.0-150700.7.13.1
kernel-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 447 CVEs
 before 6.4.0-15061.28.coco15sp6.1
6.4.0-15061.28.coco15sp6.1
kernel-coco_debug
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 447 CVEs
 before 6.4.0-15061.28.coco15sp6.1
6.4.0-15061.28.coco15sp6.1
kernel-source-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 447 CVEs
 before 6.4.0-15061.28.coco15sp6.1
6.4.0-15061.28.coco15sp6.1
kernel-syms-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 447 CVEs
 before 6.4.0-15061.28.coco15sp6.1
6.4.0-15061.28.coco15sp6.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1.150600.12.28.4
6.4.0-150600.23.65.1.150600.12.28.4
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-livepatch-SLE15-SP6_Update_14
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 238 CVEs
 before 1-150600.13.3.4
1-150600.13.3.4
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1.150600.12.28.4
6.4.0-150600.23.65.1.150600.12.28.4
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1.150700.17.9.4
6.4.0-150700.53.11.1.150700.17.9.4
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.3
6.4.0-150700.53.11.3
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-livepatch-SLE15-SP7_Update_3
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 264 CVEs
 before 1-150700.15.3.4
1-150700.15.3.4
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 264 CVEs
 before 6.4.0-150700.53.11.1
6.4.0-150700.53.11.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 265 CVEs
 before 6.4.0-150700.20.11.1
6.4.0-150700.20.11.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 265 CVEs
 before 6.4.0-150700.20.11.1
6.4.0-150700.20.11.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 265 CVEs
 before 6.4.0-150700.20.11.1
6.4.0-150700.20.11.1
kernel-livepatch-SLE15-SP6-RT_Update_14
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 235 CVEs
 before 1-150600.1.5.1
1-150600.1.5.1
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 235 CVEs
 before 6.4.0-35.1
6.4.0-35.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 235 CVEs
 before 6.4.0-35.1
6.4.0-35.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 235 CVEs
 before 6.4.0-32.1
6.4.0-32.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 235 CVEs
 before 6.4.0-32.1.21.10
6.4.0-32.1.21.10
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 235 CVEs
 before 6.4.0-32.1
6.4.0-32.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 235 CVEs
 before 6.4.0-32.1
6.4.0-32.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 235 CVEs
 before 6.4.0-35.1
6.4.0-35.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 235 CVEs
 before 6.4.0-35.1
6.4.0-35.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 235 CVEs
 before 6.4.0-32.1
6.4.0-32.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 235 CVEs
 before 6.4.0-32.1.21.10
6.4.0-32.1.21.10
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 235 CVEs
 before 6.4.0-32.1
6.4.0-32.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 235 CVEs
 before 6.4.0-32.1
6.4.0-32.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-azure-fde-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1
Show 45 moreShow less
5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 45 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-intel-iotg-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1
Show 45 moreShow less
5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1
 None known
linux-lowlatency-hwe-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
 None known
linux-nvidia-tegra-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1
Show 38 moreShow less
5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.15.15.0-1055.55~20.04.15.15.0-1057.57~20.04.15.15.0-1058.58~20.04.15.15.0-1060.60~20.04.15.15.0-1061.61~20.04.15.15.0-1063.63~20.04.15.15.0-1064.66~20.04.15.15.0-1065.67~20.04.15.15.0-1066.68~20.04.15.15.0-1067.69~20.04.15.15.0-1068.70~20.04.15.15.0-1070.72~20.04.15.15.0-1071.73~20.04.1
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.15
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1
Show 45 moreShow less
5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.15.15.0-1060.64~20.04.15.15.0-1061.65~20.04.15.15.0-1062.66~20.04.15.15.0-1063.67~20.04.15.15.0-1064.68~20.04.15.15.0-1065.69~20.04.15.15.0-1066.70~20.04.15.15.0-1067.71~20.04.15.15.0-1068.72~20.04.15.15.0-1069.73~20.04.15.15.0-1070.74~20.04.15.15.0-1071.75~20.04.15.15.0-1072.76~20.04.1
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1.160000.2.4
6.12.0-160000.6.1.160000.2.4
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
affectedOSV
affectedOSV
affectedCVE List, EUVD, NVD
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-38369 is a high vulnerability (CVSS 7.8) in Linux, published July 25, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 8th percentile. Fixed in linux-lts 6.12.41-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 213 package rows, 751 versions, 3,706 references and the rest of 38 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 5 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open