Every CVE Search/ Get API key

CVE-2025-38468

net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree

htb_lookup_leaf has a BUG_ON that can trigger with the following:

tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class add dev lo parent 1: classid 1:1 htb rate 64bit tc qdisc add dev lo parent 1:1 handle 2: netem tc qdisc add dev lo parent 2:1 handle 3: blackhole ping -I lo -c1 -W0.001 127.0.0.1

The root cause is the following:

  1. htb_dequeue calls htb_dequeue_tree which calls the dequeue handler on the selected leaf qdisc
  2. netem_dequeue calls enqueue on the child qdisc
  3. blackhole_enqueue drops the packet and returns a value that is not just NET_XMIT_SUCCESS
  4. Because of this, netem_dequeue calls qdisc_tree_reduce_backlog, and since qlen is now 0, it calls htb_qlen_notify -> htb_deactivate -> htb_deactiviate_prios -> htb_remove_class_from_row -> htb_safe_rb_erase
  5. As this is the only class in the selected hprio rbtree, __rb_change_child in __rb_erase_augmented sets the rb_root pointer to NULL
  6. Because blackhole_dequeue returns NULL, netem_dequeue returns NULL, which causes htb_dequeue_tree to call htb_lookup_leaf with the same hprio rbtree, and fail the BUG_ON

The function graph for this scenario is shown here: 0) | htb_enqueue() { 0) + 13.635 us | netem_enqueue(); 0) 4.719 us | htb_activate_prios(); 0) # 2249.199 us | } 0) | htb_dequeue() { 0) 2.355 us | htb_lookup_leaf(); 0) | netem_dequeue() { 0) + 11.061 us | blackhole_enqueue(); 0) | qdisc_tree_reduce_backlog() { 0) | qdisc_lookup_rcu() { 0) 1.873 us | qdisc_match_from_root(); 0) 6.292 us | } 0) 1.894 us | htb_search(); 0) | htb_qlen_notify() { 0) 2.655 us | htb_deactivate_prios(); 0) 6.933 us | } 0) + 25.227 us | } 0) 1.983 us | blackhole_dequeue(); 0) + 86.553 us | } 0) # 2932.761 us | qdisc_warn_nonwc(); 0) | htb_lookup_leaf() { 0) | BUG_ON();

The full original bug report can be seen here [1].

We can fix this just by returning NULL instead of the BUG_ON, as htb_dequeue_tree returns NULL when htb_lookup_leaf returns NULL.

[1] https://lore.kernel.org/netdev/pF5XOOIim0IuEfhI-SOxTgRvNoDwuux7UHKnE_Y5-zVd4wmGvNk2ceHjKb8ORnzw0cGwfmVu42g9dL7XyJLf1NEzaztboTWcm0Ogxuojoeo=@willsroot.io/

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.20%Up 0.2 points since Jul 28, 2025
90%50%10%1%

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree

htb_lookup_leaf has a BUG_ON that can trigger with the following:

tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class add dev lo parent 1: classid 1:1 htb rate 64bit tc qdisc add dev lo parent 1:1 handle 2: netem tc qdisc add dev lo parent 2:1 handle 3: blackhole ping -I lo -c1 -W0.001 127.0.0.1

The root cause is the following:

  1. htb_dequeue calls htb_dequeue_tree which calls the dequeue handler on the selected leaf qdisc
  2. netem_dequeue calls enqueue on the child qdisc
  3. blackhole_enqueue drops the packet and returns a value that is not just NET_XMIT_SUCCESS
  4. Because of this, netem_dequeue calls qdisc_tree_reduce_backlog, and since qlen is now 0, it calls htb_qlen_notify -> htb_deactivate -> htb_deactiviate_prios -> htb_remove_class_from_row -> htb_safe_rb_erase
  5. As this is the only class in the selected hprio rbtree, __rb_change_child in __rb_erase_augmented sets the rb_root pointer to NULL
  6. Because blackhole_dequeue returns NULL, netem_dequeue returns NULL, which causes htb_dequeue_tree to call htb_lookup_leaf with the same hprio rbtree, and fail the BUG_ON

The function graph for this scenario is shown here: 0) | htb_enqueue() { 0) + 13.635 us | netem_enqueue(); 0) 4.719 us | htb_activate_prios(); 0) # 2249.199 us | } 0) | htb_dequeue() { 0) 2.355 us | htb_lookup_leaf(); 0) | netem_dequeue() { 0) + 11.061 us | blackhole_enqueue(); 0) | qdisc_tree_reduce_backlog() { 0) | qdisc_lookup_rcu() { 0) 1.873 us | qdisc_match_from_root(); 0) 6.292 us | } 0) 1.894 us | htb_search(); 0) | htb_qlen_notify() { 0) 2.655 us | htb_deactivate_prios(); 0) 6.933 us | } 0) + 25.227 us | } 0) 1.983 us | blackhole_dequeue(); 0) + 86.553 us | } 0) # 2932.761 us | qdisc_warn_nonwc(); 0) | htb_lookup_leaf() { 0) | BUG_ON();

The full original bug report can be seen here [1].

We can fix this just by returning NULL instead of the BUG_ON, as htb_dequeue_tree returns NULL when htb_lookup_leaf returns NULL.

[1] https://lore.kernel.org/netdev/pF5XOOIim0IuEfhI-SOxTgRvNoDwuux7UHKnE_Y5-zVd4wmGvNk2ceHjKb8ORnzw0cGwfmVu42g9dL7XyJLf1NEzaztboTWcm0Ogxuojoeo=@willsroot.io/

Record
CVE-2025-38468
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-05
CVE List No score

net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree

htb_lookup_leaf has a BUG_ON that can trigger with the following:

tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class add dev lo parent 1: classid 1:1 htb rate 64bit tc qdisc add dev lo parent 1:1 handle 2: netem tc qdisc add dev lo parent 2:1 handle 3: blackhole ping -I lo -c1 -W0.001 127.0.0.1

The root cause is the following:

  1. htb_dequeue calls htb_dequeue_tree which calls the dequeue handler on the selected leaf qdisc
  2. netem_dequeue calls enqueue on the child qdisc
  3. blackhole_enqueue drops the packet and returns a value that is not just NET_XMIT_SUCCESS
  4. Because of this, netem_dequeue calls qdisc_tree_reduce_backlog, and since qlen is now 0, it calls htb_qlen_notify -> htb_deactivate -> htb_deactiviate_prios -> htb_remove_class_from_row -> htb_safe_rb_erase
  5. As this is the only class in the selected hprio rbtree, __rb_change_child in __rb_erase_augmented sets the rb_root pointer to NULL
  6. Because blackhole_dequeue returns NULL, netem_dequeue returns NULL, which causes htb_dequeue_tree to call htb_lookup_leaf with the same hprio rbtree, and fail the BUG_ON

The function graph for this scenario is shown here: 0) | htb_enqueue() { 0) + 13.635 us | netem_enqueue(); 0) 4.719 us | htb_activate_prios(); 0) # 2249.199 us | } 0) | htb_dequeue() { 0) 2.355 us | htb_lookup_leaf(); 0) | netem_dequeue() { 0) + 11.061 us | blackhole_enqueue(); 0) | qdisc_tree_reduce_backlog() { 0) | qdisc_lookup_rcu() { 0) 1.873 us | qdisc_match_from_root(); 0) 6.292 us | } 0) 1.894 us | htb_search(); 0) | htb_qlen_notify() { 0) 2.655 us | htb_deactivate_prios(); 0) 6.933 us | } 0) + 25.227 us | } 0) 1.983 us | blackhole_dequeue(); 0) + 86.553 us | } 0) # 2932.761 us | qdisc_warn_nonwc(); 0) | htb_lookup_leaf() { 0) | BUG_ON();

The full original bug report can be seen here [1].

We can fix this just by returning NULL instead of the BUG_ON, as htb_dequeue_tree returns NULL when htb_lookup_leaf returns NULL.

[1] https://lore.kernel.org/netdev/pF5XOOIim0IuEfhI-SOxTgRvNoDwuux7UHKnE_Y5-zVd4wmGvNk2ceHjKb8ORnzw0cGwfmVu42g9dL7XyJLf1NEzaztboTWcm0Ogxuojoeo=@willsroot.io/

Record
CVE-2025-38468
Updated
2026-11-05
EUVDEUVD-2025-22894 No score

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree

htb_lookup_leaf has a BUG_ON that can trigger with the following:

tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class add dev lo parent 1: classid 1:1 htb rate 64bit tc qdisc add dev lo parent 1:1 handle 2: netem tc qdisc add dev lo parent 2:1 handle 3: blackhole ping -I lo -c1 -W0.001 127.0.0.1

The root cause is the following:

  1. htb_dequeue calls htb_dequeue_tree which calls the dequeue handler on the selected leaf qdisc
  2. netem_dequeue calls enqueue on the child qdisc
  3. blackhole_enqueue drops the packet and returns a value that is not just NET_XMIT_SUCCESS
  4. Because of this, netem_dequeue calls qdisc_tree_reduce_backlog, and since qlen is now 0, it calls htb_qlen_notify -> htb_deactivate -> htb_deactiviate_prios -> htb_remove_class_from_row -> htb_safe_rb_erase
  5. As this is the only class in the selected hprio rbtree, __rb_change_child in __rb_erase_augmented sets the rb_root pointer to NULL
  6. Because blackhole_dequeue returns NULL, netem_dequeue returns NULL, which causes htb_dequeue_tree to call htb_lookup_leaf with the same hprio rbtree, and fail the BUG_ON

The function graph for this scenario is shown here: 0) | htb_enqueue() { 0) + 13.635 us | netem_enqueue(); 0) 4.719 us | htb_activate_prios(); 0) # 2249.199 us | } 0) | htb_dequeue() { 0) 2.355 us | htb_lookup_leaf(); 0) | netem_dequeue() { 0) + 11.061 us | blackhole_enqueue(); 0) | qdisc_tree_reduce_backlog() { 0) | qdisc_lookup_rcu() { 0) 1.873 us | qdisc_match_from_root(); 0) 6.292 us | } 0) 1.894 us | htb_search(); 0) | htb_qlen_notify() { 0) 2.655 us | htb_deactivate_prios(); 0) 6.933 us | } 0) + 25.227 us | } 0) 1.983 us | blackhole_dequeue(); 0) + 86.553 us | } 0) # 2932.761 us | qdisc_warn_nonwc(); 0) | htb_lookup_leaf() { 0) | BUG_ON();

The full original bug report can be seen here [1].

We can fix this just by returning NULL instead of the BUG_ON, as htb_dequeue_tree returns NULL when htb_lookup_leaf returns NULL.

[1] https://lore.kernel.org/netdev/pF5XOOIim0IuEfhI-SOxTgRvNoDwuux7UHKnE_Y5-zVd4wmGvNk2ceHjKb8ORnzw0cGwfmVu42g9dL7XyJLf1NEzaztboTWcm0Ogxuojoeo=@willsroot.io/

Record
EUVD-2025-22894
Updated
2026-11-05
GitHub AdvisoriesGHSA-4mqg-q94g-wmfr 5.5

In the Linux kernel, the following vulnerability has been resolved: net/sched: Return NULL when...

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree

htb_lookup_leaf has a BUG_ON that can trigger with the following:

tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class add dev lo parent 1: classid 1:1 htb rate 64bit tc qdisc add dev lo parent 1:1 handle 2: netem tc qdisc add dev lo parent 2:1 handle 3: blackhole ping -I lo -c1 -W0.001 127.0.0.1

The root cause is the following:

  1. htb_dequeue calls htb_dequeue_tree which calls the dequeue handler on the selected leaf qdisc
  2. netem_dequeue calls enqueue on the child qdisc
  3. blackhole_enqueue drops the packet and returns a value that is not just NET_XMIT_SUCCESS
  4. Because of this, netem_dequeue calls qdisc_tree_reduce_backlog, and since qlen is now 0, it calls htb_qlen_notify -> htb_deactivate -> htb_deactiviate_prios -> htb_remove_class_from_row -> htb_safe_rb_erase
  5. As this is the only class in the selected hprio rbtree, __rb_change_child in __rb_erase_augmented sets the rb_root pointer to NULL
  6. Because blackhole_dequeue returns NULL, netem_dequeue returns NULL, which causes htb_dequeue_tree to call htb_lookup_leaf with the same hprio rbtree, and fail the BUG_ON

The function graph for this scenario is shown here: 0) | htb_enqueue() { 0) + 13.635 us | netem_enqueue(); 0) 4.719 us | htb_activate_prios(); 0) # 2249.199 us | } 0) | htb_dequeue() { 0) 2.355 us | htb_lookup_leaf(); 0) | netem_dequeue() { 0) + 11.061 us | blackhole_enqueue(); 0) | qdisc_tree_reduce_backlog() { 0) | qdisc_lookup_rcu() { 0) 1.873 us | qdisc_match_from_root(); 0) 6.292 us | } 0) 1.894 us | htb_search(); 0) | htb_qlen_notify() { 0) 2.655 us | htb_deactivate_prios(); 0) 6.933 us | } 0) + 25.227 us | } 0) 1.983 us | blackhole_dequeue(); 0) + 86.553 us | } 0) # 2932.761 us | qdisc_warn_nonwc(); 0) | htb_lookup_leaf() { 0) | BUG_ON();

The full original bug report can be seen here [1].

We can fix this just by returning NULL instead of the BUG_ON, as htb_dequeue_tree returns NULL when htb_lookup_leaf returns NULL.

[1] https://lore.kernel.org/netdev/pF5XOOIim0IuEfhI-SOxTgRvNoDwuux7UHKnE_Y5-zVd4wmGvNk2ceHjKb8ORnzw0cGwfmVu42g9dL7XyJLf1NEzaztboTWcm0Ogxuojoeo=@willsroot.io/

Record
GHSA-4mqg-q94g-wmfr
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSVBELL-CVE-2025-38468 5.5
Record
BELL-CVE-2025-38468
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2025-38468 5.5

In the Linux kernel, the following vulnerability has been resolved: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree htb_lookup_leaf has a BUG_ON that can trigger with the following: tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class add dev lo parent 1: classid 1:1 htb rate 64bit tc qdisc add dev lo parent 1:1 handle 2: netem tc qdisc add dev lo parent 2:1 handle 3: blackhole ping -I lo -c1 -W0.001 127.0.0.1 The root cause is the following: 1. htb_dequeue calls htb_dequeue_tree which calls the dequeue handler on the selected leaf qdisc 2. netem_dequeue calls enqueue on the child qdisc 3. blackhole_enqueue drops the packet and returns a value that is not just NET_XMIT_SUCCESS 4. Because of this, netem_dequeue calls qdisc_tree_reduce_backlog, and since qlen is now 0, it calls htb_qlen_notify -> htb_deactivate -> htb_deactiviate_prios -> htb_remove_class_from_row -> htb_safe_rb_erase 5. As this is the only class in the selected hprio rbtree, __rb_change_child in __rb_erase_augmented sets the rb_root pointer to NULL 6. Because blackhole_dequeue returns NULL, netem_dequeue returns NULL, which causes htb_dequeue_tree to call htb_lookup_leaf with the same hprio rbtree, and fail the BUG_ON The function graph for this scenario is shown here: 0) | htb_enqueue() { 0) + 13.635 us | netem_enqueue(); 0) 4.719 us | htb_activate_prios(); 0) # 2249.199 us | } 0) | htb_dequeue() { 0) 2.355 us | htb_lookup_leaf(); 0) | netem_dequeue() { 0) + 11.061 us | blackhole_enqueue(); 0) | qdisc_tree_reduce_backlog() { 0) | qdisc_lookup_rcu() { 0) 1.873 us | qdisc_match_from_root(); 0) 6.292 us | } 0) 1.894 us | htb_search(); 0) | htb_qlen_notify() { 0) 2.655 us | htb_deactivate_prios(); 0) 6.933 us | } 0) + 25.227 us | } 0) 1.983 us | blackhole_dequeue(); 0) + 86.553 us | } 0) # 2932.761 us | qdisc_warn_nonwc(); 0) | htb_lookup_leaf() { 0) | BUG_ON(); ------------------------------------------ The full original bug report can be seen here [1]. We can fix this just by returning NULL instead of the BUG_ON, as htb_dequeue_tree returns NULL when htb_lookup_leaf returns NULL. [1] https://lore.kernel.org/netdev/pF5XOOIim0IuEfhI-SOxTgRvNoDwuux7UHKnE_Y5-zVd4wmGvNk2ceHjKb8ORnzw0cGwfmVu42g9dL7XyJLf1NEzaztboTWcm0Ogxuojoeo=@willsroot.io/

Record
DEBIAN-CVE-2025-38468
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-06
Show 44 moreShow less
OSVRHSA-2025:20095 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:20095
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:20095 7.8

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)

  • kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)

  • kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)

  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)

  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)

  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)

  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)

  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)

  • kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)

  • kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)

  • kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633)

  • kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)

  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)

  • kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)

  • kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)

  • kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)

  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)

  • kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)

  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)

  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)

  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)

  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)

  • kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)

  • kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)

  • kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)

  • kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)

  • kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)

  • kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)

  • kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)

  • kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)

  • kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)

  • kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)

  • kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)

  • kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)

  • kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)

  • kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)

  • kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)

  • kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)

  • kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)

  • kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)

  • kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)

  • kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)

  • kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)

  • kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)

  • kernel: HID: multitouch: Add NULL check in mt_input_configured…

Record
RLSA-2025:20095
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2025-38468 5.5

CVE-2025-38468 in linux - Patched by Root

Root has patched CVE-2025-38468 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2025-38468
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-38468 5.5

CVE-2025-38468 in linux - Patched by Root

Root has patched CVE-2025-38468 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2025-38468
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2025-38468 5.5

CVE-2025-38468 in linux - Patched by Root

Root has patched CVE-2025-38468 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2025-38468
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2025-38468 5.5

CVE-2025-38468 in linux - Patched by Root

Root has patched CVE-2025-38468 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2025-38468
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2025-38468 6.8

In the Linux kernel, the following vulnerability has been resolved: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree htb_lookup_leaf has a BUG_ON that can trigger with the following: tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class add dev lo parent 1: classid 1:1 htb rate 64bit tc qdisc add dev lo parent 1:1 handle 2: netem tc qdisc add dev lo parent 2:1 handle 3: blackhole ping -I lo -c1 -W0.001 127.0.0.1 The root cause is the following: 1. htb_dequeue calls htb_dequeue_tree which calls the dequeue handler on the selected leaf qdisc 2. netem_dequeue calls enqueue on the child qdisc 3. blackhole_enqueue drops the packet and returns a value that is not just NET_XMIT_SUCCESS 4. Because of this, netem_dequeue calls qdisc_tree_reduce_backlog, and since qlen is now 0, it calls htb_qlen_notify -> htb_deactivate -> htb_deactiviate_prios -> htb_remove_class_from_row -> htb_safe_rb_erase 5. As this is the only class in the selected hprio rbtree, __rb_change_child in __rb_erase_augmented sets the rb_root pointer to NULL 6. Because blackhole_dequeue returns NULL, netem_dequeue returns NULL, which causes htb_dequeue_tree to call htb_lookup_leaf with the same hprio rbtree, and fail the BUG_ON The function graph for this scenario is shown here: 0) | htb_enqueue() { 0) + 13.635 us | netem_enqueue(); 0) 4.719 us | htb_activate_prios(); 0) # 2249.199 us | } 0) | htb_dequeue() { 0) 2.355 us | htb_lookup_leaf(); 0) | netem_dequeue() { 0) + 11.061 us | blackhole_enqueue(); 0) | qdisc_tree_reduce_backlog() { 0) | qdisc_lookup_rcu() { 0) 1.873 us | qdisc_match_from_root(); 0) 6.292 us | } 0) 1.894 us | htb_search(); 0) | htb_qlen_notify() { 0) 2.655 us | htb_deactivate_prios(); 0) 6.933 us | } 0) + 25.227 us | } 0) 1.983 us | blackhole_dequeue(); 0) + 86.553 us | } 0) # 2932.761 us | qdisc_warn_nonwc(); 0) | htb_lookup_leaf() { 0) | BUG_ON(); ------------------------------------------ The full original bug report can be seen here [1]. We can fix this just by returning NULL instead of the BUG_ON, as htb_dequeue_tree returns NULL when htb_lookup_leaf returns NULL. [1] https://lore.kernel.org/netdev/pF5XOOIim0IuEfhI-SOxTgRvNoDwuux7UHKnE_Y5-zVd4wmGvNk2ceHjKb8ORnzw0cGwfmVu42g9dL7XyJLf1NEzaztboTWcm0Ogxuojoeo=@willsroot.io/

Record
UBUNTU-CVE-2025-38468
CVSS 4.0
6.8 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-06
OSVALSA-2025:20095 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: xen: Xen hypercall page unsafe against speculative attacks (Xen Security Advisory 466) (CVE-2024-53241)
  • kernel: exfat: fix out-of-bounds access of directory entries (CVE-2024-53147)
  • kernel: zram: fix NULL pointer in comp_algorithm_show() (CVE-2024-53222)
  • kernel: nfsd: release svc_expkey/svc_export with rcu_work (CVE-2024-53216)
  • kernel: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (CVE-2024-56662)
  • kernel: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (CVE-2024-56675)
  • kernel: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (CVE-2024-56690)
  • kernel: igb: Fix potential invalid memory access in igb_init_module() (CVE-2024-52332)
  • kernel: af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (CVE-2024-57901)
  • kernel: af_packet: fix vlan_get_tci() vs MSG_PEEK (CVE-2024-57902)
  • kernel: io_uring/sqpoll: zero sqd->thread on tctx errors (CVE-2025-21633)
  • kernel: ipvlan: Fix use-after-free in ipvlan_get_iflink(). (CVE-2025-21652)
  • kernel: sched: sch_cake: add bounds checks to host bulk flow fairness counts (CVE-2025-21647)
  • kernel: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (CVE-2025-21655)
  • kernel: netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled (CVE-2024-57941)
  • kernel: netfs: Fix ceph copy to cache on write-begin (CVE-2024-57942)
  • kernel: zram: fix potential UAF of zram table (CVE-2025-21671)
  • kernel: pktgen: Avoid out-of-bounds access in get_imix_entries (CVE-2025-21680)
  • kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug (CVE-2025-21693)
  • kernel: cachestat: fix page cache statistics permission checking (CVE-2025-21691)
  • kernel: mm: clear uffd-wp PTE/PMD state on mremap() (CVE-2025-21696)
  • kernel: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (CVE-2025-21702)
  • kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (CVE-2025-21732)
  • kernel: NFSD: fix hang in nfsd4_shutdown_callback (CVE-2025-21795)
  • kernel: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (CVE-2024-54456)
  • kernel: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() (CVE-2024-57987)
  • kernel: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (CVE-2024-58014)
  • kernel: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() (CVE-2024-57988)
  • kernel: drm/xe/tracing: Fix a potential TP_printk UAF (CVE-2024-49570)
  • kernel: media: intel/ipu6: remove cpu latency qos request on error (CVE-2024-58004)
  • kernel: usbnet: ipheth: use static NDP16 location in URB (CVE-2025-21742)
  • kernel: usbnet: ipheth: fix possible overflow in DPE length check (CVE-2025-21743)
  • kernel: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links (CVE-2024-57989)
  • kernel: wifi: ath12k: Fix for out-of bound access error (CVE-2024-58015)
  • kernel: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() (CVE-2024-57995)
  • kernel: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796)
  • kernel: workqueue: Put the pwq after detaching the rescuer from the pool (CVE-2025-21786)
  • kernel: tpm: Change to kvalloc() in eventlog/acpi.c (CVE-2024-58005)
  • kernel: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (CVE-2024-58013)
  • kernel: ring-buffer: Validate the persistent meta data subbuf array (CVE-2025-21777)
  • kernel: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (CVE-2025-21738)
  • kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (CVE-2024-57986)
  • kernel: padata: avoid UAF for reorder_work (CVE-2025-21726)
  • kernel: vrf: use RCU protection in l3mdev_l3_out() (CVE-2025-21791)
  • kernel: HID:…
Record
ALSA-2025:20095
Updated
2026-11-02
OSVAZL-65910 No score

CVE-2025-38468 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree

htb_lookup_leaf has a BUG_ON that can trigger with the following:

tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class add dev lo parent 1: classid 1:1 htb rate 64bit tc qdisc add dev lo parent 1:1 handle 2: netem tc qdisc add dev lo parent 2:1 handle 3: blackhole ping -I lo -c1 -W0.001 127.0.0.1

The root cause is the following:

  1. htb_dequeue calls htb_dequeue_tree which calls the dequeue handler on the selected leaf qdisc
  2. netem_dequeue calls enqueue on the child qdisc
  3. blackhole_enqueue drops the packet and returns a value that is not just NET_XMIT_SUCCESS
  4. Because of this, netem_dequeue calls qdisc_tree_reduce_backlog, and since qlen is now 0, it calls htb_qlen_notify -> htb_deactivate -> htb_deactiviate_prios -> htb_remove_class_from_row -> htb_safe_rb_erase
  5. As this is the only class in the selected hprio rbtree, __rb_change_child in __rb_erase_augmented sets the rb_root pointer to NULL
  6. Because blackhole_dequeue returns NULL, netem_dequeue returns NULL, which causes htb_dequeue_tree to call htb_lookup_leaf with the same hprio rbtree, and fail the BUG_ON

The function graph for this scenario is shown here: 0) | htb_enqueue() { 0) + 13.635 us | netem_enqueue(); 0) 4.719 us | htb_activate_prios(); 0) # 2249.199 us | } 0) | htb_dequeue() { 0) 2.355 us | htb_lookup_leaf(); 0) | netem_dequeue() { 0) + 11.061 us | blackhole_enqueue(); 0) | qdisc_tree_reduce_backlog() { 0) | qdisc_lookup_rcu() { 0) 1.873 us | qdisc_match_from_root(); 0) 6.292 us | } 0) 1.894 us | htb_search(); 0) | htb_qlen_notify() { 0) 2.655 us | htb_deactivate_prios(); 0) 6.933 us | } 0) + 25.227 us | } 0) 1.983 us | blackhole_dequeue(); 0) + 86.553 us | } 0) # 2932.761 us | qdisc_warn_nonwc(); 0) | htb_lookup_leaf() { 0) | BUG_ON();

The full original bug report can be seen here [1].

We can fix this just by returning NULL instead of the BUG_ON, as htb_dequeue_tree returns NULL when htb_lookup_leaf returns NULL.

[1] https://lore.kernel.org/netdev/pF5XOOIim0IuEfhI-SOxTgRvNoDwuux7UHKnE_Y5-zVd4wmGvNk2ceHjKb8ORnzw0cGwfmVu42g9dL7XyJLf1NEzaztboTWcm0Ogxuojoeo=@willsroot.io/

Record
AZL-65910
Updated
2026-11-02
OSVAZL-72965 No score

CVE-2025-38468 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree

htb_lookup_leaf has a BUG_ON that can trigger with the following:

tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class add dev lo parent 1: classid 1:1 htb rate 64bit tc qdisc add dev lo parent 1:1 handle 2: netem tc qdisc add dev lo parent 2:1 handle 3: blackhole ping -I lo -c1 -W0.001 127.0.0.1

The root cause is the following:

  1. htb_dequeue calls htb_dequeue_tree which calls the dequeue handler on the selected leaf qdisc
  2. netem_dequeue calls enqueue on the child qdisc
  3. blackhole_enqueue drops the packet and returns a value that is not just NET_XMIT_SUCCESS
  4. Because of this, netem_dequeue calls qdisc_tree_reduce_backlog, and since qlen is now 0, it calls htb_qlen_notify -> htb_deactivate -> htb_deactiviate_prios -> htb_remove_class_from_row -> htb_safe_rb_erase
  5. As this is the only class in the selected hprio rbtree, __rb_change_child in __rb_erase_augmented sets the rb_root pointer to NULL
  6. Because blackhole_dequeue returns NULL, netem_dequeue returns NULL, which causes htb_dequeue_tree to call htb_lookup_leaf with the same hprio rbtree, and fail the BUG_ON

The function graph for this scenario is shown here: 0) | htb_enqueue() { 0) + 13.635 us | netem_enqueue(); 0) 4.719 us | htb_activate_prios(); 0) # 2249.199 us | } 0) | htb_dequeue() { 0) 2.355 us | htb_lookup_leaf(); 0) | netem_dequeue() { 0) + 11.061 us | blackhole_enqueue(); 0) | qdisc_tree_reduce_backlog() { 0) | qdisc_lookup_rcu() { 0) 1.873 us | qdisc_match_from_root(); 0) 6.292 us | } 0) 1.894 us | htb_search(); 0) | htb_qlen_notify() { 0) 2.655 us | htb_deactivate_prios(); 0) 6.933 us | } 0) + 25.227 us | } 0) 1.983 us | blackhole_dequeue(); 0) + 86.553 us | } 0) # 2932.761 us | qdisc_warn_nonwc(); 0) | htb_lookup_leaf() { 0) | BUG_ON();

The full original bug report can be seen here [1].

We can fix this just by returning NULL instead of the BUG_ON, as htb_dequeue_tree returns NULL when htb_lookup_leaf returns NULL.

[1] https://lore.kernel.org/netdev/pF5XOOIim0IuEfhI-SOxTgRvNoDwuux7UHKnE_Y5-zVd4wmGvNk2ceHjKb8ORnzw0cGwfmVu42g9dL7XyJLf1NEzaztboTWcm0Ogxuojoeo=@willsroot.io/

Record
AZL-72965
Updated
2026-11-02
OSVCLSA-2025-1764085382 No score

kernel-uek: Fix of 236 CVEs

  • drm/amd/display: Skip on writeback when it's not applicable {CVE-2024-36914}
  • ASoC: topology: Fix references to freed memory {CVE-2024-41069}
  • Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
  • Bluetooth: SCO: Fix not validating setsockopt user input
  • drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
  • xfs: don't walk off the end of a directory data block {CVE-2024-41013}
  • wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937}
  • Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
  • net/rds: Fix rs_recv_pending counting issue
  • LTS tag: v5.4.301
  • net: rtnetlink: fix module reference count leak issue in rtnetlink_rcv_msg
  • media: s5p-mfc: remove an unused/uninitialized variable
  • NFSD: Fix last write offset handling in layoutcommit
  • NFSD: Minor cleanup in layoutcommit processing
  • padata: Reset next CPU when reorder sequence wraps around
  • KEYS: trusted_tpm1: Compare HMAC values in constant time
  • NFSD: Define a proc_layoutcommit for the FlexFiles layout type {CVE-2025-40087}
  • vfs: Don't leak disconnected dentries on umount {CVE-2025-40105}
  • jbd2: ensure that all ongoing I/O complete before freeing blocks
  • ext4: detect invalid INLINE_DATA + EXTENTS flag combination {CVE-2025-40167}
  • drm/amdgpu: use atomic functions with memory barriers for vm fault info
  • ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() {CVE-2025-40198}
  • spi: cadence-quadspi: Flush posted register writes before DAC access
  • spi: cadence-quadspi: Flush posted register writes before INDAC access
  • memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
  • memory: samsung: exynos-srom: Correct alignment
  • arm64: errata: Apply workarounds for Neoverse-V3AE
  • arm64: cputype: Add Neoverse-V3AE definitions
  • comedi: fix divide-by-zero in comedi_buf_munge() {CVE-2025-40106}
  • binder: remove "invalid inc weak" check
  • xhci: dbc: enable back DbC in resume if it was enabled before suspend
  • usb/core/quirks: Add Huawei ME906S to wakeup quirk
  • USB: serial: option: add Telit FN920C04 ECM compositions
  • USB: serial: option: add Quectel RG255C
  • USB: serial: option: add UNISOC UIS7720
  • net: ravb: Ensure memory write completes before ringing TX doorbell
  • net: usb: rtl8150: Fix frame padding
  • ocfs2: clear extent cache after moving/defragmenting extents
  • MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering
  • Revert "cpuidle: menu: Avoid discarding useful information"
  • net: bonding: fix possible peer notify event loss or dup issue
  • sctp: avoid NULL dereference when chunk data buffer is missing
  • arm64, mm: avoid always making PTE dirty in pte_mkwrite()
  • net: enetc: correct the value of ENETC_RXB_TRUESIZE
  • rtnetlink: Allow deleting FDB entries in user namespace
  • net: rtnetlink: add NLM_F_BULK support to rtnl_fdb_del
  • net: add ndo_fdb_del_bulk
  • net: rtnetlink: add bulk delete support flag
  • net: netlink: add NLM_F_BULK delete request modifier
  • net: rtnetlink: use BIT for flag values
  • net: rtnetlink: add helper to extract msg type's kind
  • net: rtnetlink: add msg kind names
  • net: rtnetlink: remove redundant assignment to variable err
  • m68k: bitops: Fix find_*_bit() signatures
  • hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super()
  • hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
  • dlm: check for defined force value in dlm_lockspace_release
  • hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
  • hfs: validate record offset in hfsplus_bmap_alloc
  • hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
  • hfs: make proper initalization of struct hfs_find_data
  • hfs: clear offset and space out of valid records in b-tree node
  • exec: Fix incorrect type for ret
  • hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() {CVE-2025-40088}
  • ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
  • sched/fair: Fix pelt lost idle time…
Record
CLSA-2025-1764085382
Updated
2026-11-02
OSVCLSA-2026-1777616064 No score

kernel: Fix of 264 CVEs

  • crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431}
  • crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431}
  • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431}
  • crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431}
  • crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431}
  • crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
  • crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431}
  • crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431}
  • crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
  • crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431}
  • wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() {CVE-2022-50551}
  • bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099}
  • libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116}
  • scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
  • ftrace: Fix use-after-free for dynamic ftrace_ops {CVE-2022-49892}
  • intel_th: msu: Fix vmalloced buffers {CVE-2022-50142}
  • vt: Clear selection before changing the font {CVE-2022-49948}
  • ACPICA: Fix error code path in acpi_ds_call_control_method() {CVE-2022-50411}
  • usbnet: Run unregister_netdev() before unbind_all() {CVE-2022-50220}
  • ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917}
  • bpf: Propagate error from htab_lock_bucket() to userspace {CVE-2022-50490}
  • binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497}
  • module: fix [e_shstrndx].sh_size=0 OOB access {CVE-2022-49444}
  • ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770}
  • tracing: Fix potential double free in create_var_ref() {CVE-2022-49410}
  • powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue {CVE-2022-50366}
  • Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times {CVE-2022-50419}
  • xsk: Fix xsk_diag use-after-free error during socket cleanup {CVE-2023-53426}
  • svcrdma: bound check rq_pages index in inline path {CVE-2025-71068}
  • net: hns3: add VLAN id validation before using {CVE-2025-71112}
  • net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907}
  • capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870}
  • ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS {CVE-2022-50315}
  • i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
  • team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
  • staging: vme_user: Fix possible UAF in tsi148_dma_list_add {CVE-2022-50384}
  • ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076}
  • ftrace: Add cond_resched() to ftrace_graph_set_hash() {CVE-2025-37940}
  • net: stmmac: Fix accessing freed irq affinity_hint {CVE-2025-23155}
  • ext4: set goal start correctly in ext4_mb_normalize_request {CVE-2023-54021}
  • netfilter: ipset: fix region locking in hash types {CVE-2025-37997}
  • openvswitch: Fix unsafe attribute parsing in output_userspace() {CVE-2025-37998}
  • wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() {CVE-2025-37990}
  • nfs: handle failure of nfs_get_lock_context in unlock path {CVE-2025-38023}
  • drm/amd/pm: Prevent division by zero {CVE-2025-37767}
  • netfilter: ctnetlink: remove refcounting in expectation dumpers {CVE-2025-39764}
  • tracing: Fix null pointer dereference in tracing_err_log_open() {CVE-2023-53167}
  • ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386}
  • scsi: qla2xxx: Pointer may be dereferenced {CVE-2023-53150}
  • net: pktgen: fix access outside of user given buffer in pktgen_thread_write() {CVE-2025-38061}
  • dm cache: prevent BUG_ON by blocking retries on failed device resumes {CVE-2025-38066} -…
Record
CLSA-2026-1777616064
Updated
2026-11-02
OSVCLSA-2026-1778787063 No score

kernel: Fix of 123 CVEs

  • net: skbuff: propagate shared-frag marker through pskb_copy()
  • mptcp: always handle address removal under msk socket lock {CVE-2025-21875}
  • uprobes: Reject the shared zeropage in uprobe_write_opcode() {CVE-2025-21881}
  • net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error {CVE-2025-21924}
  • wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() {CVE-2025-21744}
  • mptcp: fix NULL pointer in can_accept_new_subflow {CVE-2025-23145}
  • bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock {CVE-2025-21951}
  • blk-cgroup: Fix class @block_class's subsystem refcount leakage {CVE-2025-21745}
  • net/mlx5: handle errors in mlx5_chains_create_table() {CVE-2025-21975}
  • USB: hub: Ignore non-compliant devices with too many configs or interfaces {CVE-2025-21776}
  • wifi: iwlwifi: don't warn when if there is a FW error {CVE-2025-38096}
  • ice: fix memory leak in aRFS after reset {CVE-2025-21981}
  • KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel {CVE-2025-21779}
  • Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken {CVE-2025-38099}
  • regulator: check that dummy regulator has been probed before using it {CVE-2025-22008}
  • acpi: nfit: fix narrowing conversion in acpi_nfit_ctl {CVE-2025-22044}
  • drm/scheduler: signal scheduled fence when kill job {CVE-2025-38436}
  • nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request {CVE-2025-38430}
  • net: decrease cached dst counters in dst_release {CVE-2025-22057}
  • bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT {CVE-2025-38439}
  • net: fix NULL pointer dereference in l3mdev_l3_rcv {CVE-2025-22103}
  • dlm: prevent NPD when writing a positive value to event_done {CVE-2025-23131}
  • drm/amd/display: fix a Null pointer dereference vulnerability {CVE-2025-39705}
  • net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree {CVE-2025-38468}
  • drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params {CVE-2025-21941}
  • drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities {CVE-2025-39707}
  • HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948}
  • usb: net: sierra: check for no status endpoint {CVE-2025-38474}
  • drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() {CVE-2025-21996}
  • wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() {CVE-2025-38643}
  • netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets {CVE-2025-22063}
  • vxlan: Fix NPD when refreshing an FDB entry with a nexthop object {CVE-2025-39851}
  • thermal: int340x: Add NULL check for adev {CVE-2025-23136}
  • Bluetooth: l2cap: Check encryption key size on incoming connection {CVE-2025-39889}
  • dm thin: make get_first_thin use rcu-safe list first function {CVE-2025-21664}
  • tracing: Add down_write(trace_event_sem) when adding trace event {CVE-2025-38539}
  • usbnet: Fix using smp_processor_id() in preemptible code warnings {CVE-2025-40164}
  • bpf: Send signals asynchronously if !preemptible {CVE-2025-21728}
  • ima: Fix a potential integer overflow in ima_appraise_measurement {CVE-2022-49643}
  • dm-stripe: fix a possible integer overflow {CVE-2025-39940}
  • usbnet: gl620a: fix endpoint checking in genelink_bind() {CVE-2025-21877}
  • fs: dlm: fix use after free in midcomms commit {CVE-2023-53629}
  • usbnet: fix memory leak in error case {CVE-2022-49657}
  • wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
  • can: j1939: j1939_send_one(): fix missing CAN header initialization {CVE-2022-49845}
  • ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494}
  • posix-clock: Fix missing timespec64 check in pc_clock_settime() {CVE-2024-50195}
  • net_sched: Prevent creation of classes with TC_H_ROOT {CVE-2025-21971}
  • mm/slub: avoid accessing metadata when pointer is invalid in object_err() {CVE-2025-39902}
  • RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow…
Record
CLSA-2026-1778787063
Updated
2026-11-02
OSV No score

net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree

htb_lookup_leaf has a BUG_ON that can trigger with the following:

tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class add dev lo parent 1: classid 1:1 htb rate 64bit tc qdisc add dev lo parent 1:1 handle 2: netem tc qdisc add dev lo parent 2:1 handle 3: blackhole ping -I lo -c1 -W0.001 127.0.0.1

The root cause is the following:

  1. htb_dequeue calls htb_dequeue_tree which calls the dequeue handler on the selected leaf qdisc
  2. netem_dequeue calls enqueue on the child qdisc
  3. blackhole_enqueue drops the packet and returns a value that is not just NET_XMIT_SUCCESS
  4. Because of this, netem_dequeue calls qdisc_tree_reduce_backlog, and since qlen is now 0, it calls htb_qlen_notify -> htb_deactivate -> htb_deactiviate_prios -> htb_remove_class_from_row -> htb_safe_rb_erase
  5. As this is the only class in the selected hprio rbtree, __rb_change_child in __rb_erase_augmented sets the rb_root pointer to NULL
  6. Because blackhole_dequeue returns NULL, netem_dequeue returns NULL, which causes htb_dequeue_tree to call htb_lookup_leaf with the same hprio rbtree, and fail the BUG_ON

The function graph for this scenario is shown here: 0) | htb_enqueue() { 0) + 13.635 us | netem_enqueue(); 0) 4.719 us | htb_activate_prios(); 0) # 2249.199 us | } 0) | htb_dequeue() { 0) 2.355 us | htb_lookup_leaf(); 0) | netem_dequeue() { 0) + 11.061 us | blackhole_enqueue(); 0) | qdisc_tree_reduce_backlog() { 0) | qdisc_lookup_rcu() { 0) 1.873 us | qdisc_match_from_root(); 0) 6.292 us | } 0) 1.894 us | htb_search(); 0) | htb_qlen_notify() { 0) 2.655 us | htb_deactivate_prios(); 0) 6.933 us | } 0) + 25.227 us | } 0) 1.983 us | blackhole_dequeue(); 0) + 86.553 us | } 0) # 2932.761 us | qdisc_warn_nonwc(); 0) | htb_lookup_leaf() { 0) | BUG_ON();

The full original bug report can be seen here [1].

We can fix this just by returning NULL instead of the BUG_ON, as htb_dequeue_tree returns NULL when htb_lookup_leaf returns NULL.

[1] https://lore.kernel.org/netdev/pF5XOOIim0IuEfhI-SOxTgRvNoDwuux7UHKnE_Y5-zVd4wmGvNk2ceHjKb8ORnzw0cGwfmVu42g9dL7XyJLf1NEzaztboTWcm0Ogxuojoeo=@willsroot.io/

Record
CVE-2025-38468
Updated
2026-11-07
OSVMGASA-2025-0218 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.101 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2025-0218
Updated
2026-11-02
OSVMGASA-2025-0219 No score

Updated kernel, kmod-virtualbox, kmod-xtables-addons & wireless-regdb packages fix security vulnerabilities

Upstream kernel version 6.6.101 fixes bugs and vulnerabilities. The kmod-virtualbox, kmod-xtables-addons & wireless-regdb packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record
MGASA-2025-0219
Updated
2026-11-02
OSVopenSUSE-SU-2025:20081-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
openSUSE-SU-2025:20081-1
Updated
2026-11-02
OSVSUSE-SU-2025:02846-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631).
  • CVE-2021-46987: btrfs: fix deadlock when cloning inline extents and using qgroups (bsc#1220704).
  • CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference (bsc#1205711).
  • CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
  • CVE-2022-49319: iommu/arm-smmu-v3: check return value after calling platform_get_resource() (bsc#1238374).
  • CVE-2022-49323: iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (bsc#1238400).
  • CVE-2022-49768: 9p/fd: fix issue of list_del corruption in p9_fd_cancel() (bsc#1242446).
  • CVE-2022-49825: ata: libata-transport: fix error handling in ata_tport_add() (bsc#1242548).
  • CVE-2022-49934: wifi: mac80211: Fix UAF in ieee80211_scan_rx() (bsc#1245051).
  • CVE-2022-49948: vt: Clear selection before changing the font (bsc#1245058).
  • CVE-2022-49969: drm/amd/display: clear optc underflow before turn off odm clock (bsc#1245060).
  • CVE-2022-49993: loop: Check for overflow while configuring loop (bsc#1245121).
  • CVE-2022-50025: cxl: Fix a memory leak in an error handling path (bsc#1245132).
  • CVE-2022-50027: scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (bsc#1245073).
  • CVE-2022-50030: scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (bsc#1245265).
  • CVE-2022-50033: usb: host: ohci-ppc-of: Fix refcount leak bug (bsc#1245139).
  • CVE-2022-50103: sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed (bsc#1244840).
  • CVE-2022-50149: driver core: fix potential deadlock in __driver_attach (bsc#1244883).
  • CVE-2022-50226: crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak (bsc#1244860).
  • CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629).
  • CVE-2023-52878: can: dev: can_put_echo_skb(): do not crash kernel if can_priv::echo_skb is accessed out of bounds (bsc#1225000).
  • CVE-2023-53020: l2tp: close all race conditions in l2tp_tunnel_register() (bsc#1240224).
  • CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).
  • CVE-2023-53118: scsi: core: Fix a procfs host directory removal regression (bsc#1242365).
  • CVE-2024-26974: crypto: qat - resolve race condition during AER recovery (bsc#1223638).
  • CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2025-21731: nbd: do not allow reconnect after disconnect (bsc#1237881).
  • CVE-2025-21928: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (bsc#1240722).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38040: serial: mctrl_gpio: split disable_ms into sync and no_sync APIs (bsc#1245078).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for…
Record
SUSE-SU-2025:02846-1
Updated
2026-11-02
OSVSUSE-SU-2025:02849-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
  • CVE-2023-52923: netfilter: nf_tables: split async and sync catchall in two functions (bsc#1236104).
  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
  • CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
  • CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
  • CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
  • CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
  • CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
  • CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
  • CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
  • CVE-2025-38468: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (bsc#1247437).
  • CVE-2025-38477: net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (bsc#1247314).
  • CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247349).
  • CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247348).
  • CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).

The following non-security bugs were fixed:

  • Revert 'hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).'
  • Revert 'mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race'
  • Revert 'mm/hugetlb: unshare page tables during VMA split, not before'
Record
SUSE-SU-2025:02849-1
Updated
2026-11-02
OSVSUSE-SU-2025:02851-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
  • CVE-2023-52923: netfilter: nf_tables: split async and sync catchall in two functions (bsc#1236104).
  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
  • CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
  • CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
  • CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
  • CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
  • CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
  • CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
  • CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
  • CVE-2025-38468: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (bsc#1247437).
  • CVE-2025-38477: net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (bsc#1247314).
  • CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247349).
  • CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247348).
  • CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).

The following non-security bugs were fixed:

  • Revert 'hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).'
  • Revert 'mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race'
  • Revert 'mm/hugetlb: unshare page tables during VMA split, not before'
Record
SUSE-SU-2025:02851-1
Updated
2026-11-02
OSVSUSE-SU-2025:02852-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
  • CVE-2023-52923: netfilter: nf_tables: split async and sync catchall in two functions (bsc#1236104).
  • CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
  • CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
  • CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
  • CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
  • CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
  • CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
  • CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
  • CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
  • CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
  • CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
  • CVE-2025-38289: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (bsc#1246287).
  • CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
  • CVE-2025-38468: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (bsc#1247437).
  • CVE-2025-38477: net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (bsc#1247314).
  • CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247349).
  • CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247348).
  • CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).

The following non-security bugs were fixed:

  • Revert 'hugetlb: unshare some PMDs when splitting VMAs' (bsc#1245431).
  • Revert 'mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race'
  • Revert 'mm/hugetlb: unshare page tables during VMA split, not before'
  • bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (bsc#1244523).
  • net: usb: usbnet: restore usb%d name exception for local mac addresses (bsc#1234480 bsc#1246555).
Record
SUSE-SU-2025:02852-1
Updated
2026-11-02
OSVSUSE-SU-2025:02853-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664 bsc#1247831).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…
Record
SUSE-SU-2025:02853-1
Updated
2026-11-02
OSVSUSE-SU-2025:02923-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition (bsc#1139073).
  • CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
  • CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (bsc#1246183).
  • CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).
  • CVE-2025-38371: drm/v3d: Disable interrupts before resetting the GPU (bsc#1247178).
  • CVE-2025-38392: idpf: convert control queue mutex to a spinlock (bsc#1247169).
  • CVE-2025-38399: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (bsc#1247097).
  • CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (bsc#1247252).
  • CVE-2025-38457: net/sched: Abort __tc_modify_qdisc if parent class does not exist (bsc#1247098).
  • CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
  • CVE-2025-38465: netlink: make sure we allow at least one dump skb (bsc#1247118).
  • CVE-2025-38470: kABI fix for net: vlan: fix VLAN 0 refcount imbalance of toggling (bsc#1247288).
  • CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247450).
  • CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (bsc#1247243).
  • CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).
  • CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
  • CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
  • CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
  • CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
  • CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
  • CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
  • CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
  • CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
  • CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
  • CVE-2025-23163: net:…
Record
SUSE-SU-2025:02923-1
Updated
2026-11-02
OSVSUSE-SU-2025:02969-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…
Record
SUSE-SU-2025:02969-1
Updated
2026-11-02
OSVSUSE-SU-2025:02996-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (1230216).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…
Record
SUSE-SU-2025:02996-1
Updated
2026-11-02
OSVSUSE-SU-2025:02997-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695)
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-39298:mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (bsc#1227082).
  • CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma…
Record
SUSE-SU-2025:02997-1
Updated
2026-11-02
OSVSUSE-SU-2025:03011-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695).
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-39298:mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (bsc#1227082).
  • CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664 bsc#1247831).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
  • CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147:…
Record
SUSE-SU-2025:03011-1
Updated
2026-11-02
OSVSUSE-SU-2025:03023-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may (bsc#1139073)
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
  • CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
  • CVE-2025-38188:…
Record
SUSE-SU-2025:03023-1
Updated
2026-11-02
OSVSUSE-SU-2025:03310-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-49492: nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (bsc#1238954).
  • CVE-2022-50116: tty: n_gsm: fix deadlock and link starvation in outgoing data path (bsc#1244824).
  • CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-58239: tls: stop recv() if initial process_rx_list gave us non-DATA (bsc#1248614).
  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
  • CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
  • CVE-2025-38323: net: atm: add lec_mutex (bsc#1246473).
  • CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
  • CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).
  • CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
  • CVE-2025-38468: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (bsc#1247437).
  • CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247314).
  • CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1247976).
  • CVE-2025-38546: atm: clip: Fix memory leak of struct clip_vcc (bsc#1248223).
  • CVE-2025-38563: perf/core: Prevent VMA split of buffer mappings (bsc#1248306).
  • CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248338).
  • CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1248621).
  • CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511).
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248748).

The following non-security bugs were fixed:

  • NFSv4.1: fix backchannel max_resp_sz verification check (bsc#1247518).
  • scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() (bsc#1243278).
  • scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes).
  • Disable N_GSM (jsc#PED-8240).
Record
SUSE-SU-2025:03310-1
Updated
2026-11-02
OSVSUSE-SU-2025:03344-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110).
  • CVE-2022-50116: kernel: tty: n_gsm: fix deadlock and link starvation in outgoing data path (bsc#1244824).
  • CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-53093: nvme-multipath: defer partition scanning (bsc#1233640).
  • CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
  • CVE-2024-58239: tls: stop recv() if initial process_rx_list gave us non-DATA (bsc#1248614).
  • CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38323: net: atm: add lec_mutex (bsc#1246473).
  • CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
  • CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).
  • CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
  • CVE-2025-38468: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (bsc#1247437).
  • CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247314).
  • CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247349).
  • CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247348).
  • CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).
  • CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1247976).
  • CVE-2025-38546: atm: clip: Fix memory leak of struct clip_vcc (bsc#1248223).
  • CVE-2025-38555: usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1248297).
  • CVE-2025-38560: x86/sev: Evict cache lines during SNP memory validation (bsc#1248312).
  • CVE-2025-38563: perf/core: Prevent VMA split of buffer mappings (bsc#1248306).
  • CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248338).
  • CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1248621).
  • CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511).
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248748).

The following non-security bugs were fixed:

  • Disable N_GSM (jsc#PED-8240).
  • NFSv4.1: fix backchannel max_resp_sz verification check (bsc#1247518).
  • NFSv4: fairly test all delegations on a SEQ4_ revocation (bsc#1246211).
  • kabi fix for NFSv4: fairly test all delegations on a SEQ4_ revocation (bsc#1246211).
Record
SUSE-SU-2025:03344-1
Updated
2026-11-02
OSVSUSE-SU-2025:03384-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-49492: nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (bsc#1238954).
  • CVE-2022-50116: kernel: tty: n_gsm: fix deadlock and link starvation in outgoing data path (bsc#1244824).
  • CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).
  • CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
  • CVE-2024-58239: tls: stop recv() if initial process_rx_list gave us non-DATA (bsc#1248614).
  • CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
  • CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
  • CVE-2025-38323: net: atm: add lec_mutex (bsc#1246473).
  • CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
  • CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).
  • CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
  • CVE-2025-38468: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (bsc#1247437).
  • CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247314).
  • CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).
  • CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1247976).
  • CVE-2025-38546: atm: clip: Fix memory leak of struct clip_vcc (bsc#1248223).
  • CVE-2025-38563: perf/core: Prevent VMA split of buffer mappings (bsc#1248306).
  • CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248338).
  • CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1248621).
  • CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511).
  • CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248748).

The following non-security bugs were fixed:

  • Disable N_GSM (bsc#1244824 jsc#PED-8240).
  • NFSv4.1: fix backchannel max_resp_sz verification check (bsc#1247518).
  • scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() (bsc#1243278).
  • scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes).
Record
SUSE-SU-2025:03384-1
Updated
2026-11-02
OSVSUSE-SU-2025:20577-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
  • CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
  • CVE-2025-38188:…
Record
SUSE-SU-2025:20577-1
Updated
2026-11-02
OSVSUSE-SU-2025:20586-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
  • CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
  • CVE-2025-38188:…
Record
SUSE-SU-2025:20586-1
Updated
2026-11-02
OSVSUSE-SU-2025:20601-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
  • CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
  • CVE-2025-38188:…
Record
SUSE-SU-2025:20601-1
Updated
2026-11-02
OSVSUSE-SU-2025:20602-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
  • CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
  • CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
  • CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
  • CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
  • CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
  • CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
  • CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
  • CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
  • CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
  • CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
  • CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
  • CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
  • CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
  • CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
  • CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
  • CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
  • CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
  • CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
  • CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
  • CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
  • CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
  • CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
  • CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
  • CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
  • CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
  • CVE-2025-38188:…
Record
SUSE-SU-2025:20602-1
Updated
2026-11-02
OSVSUSE-SU-2025:21074-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
SUSE-SU-2025:21074-1
Updated
2026-11-02
OSVSUSE-SU-2025:21139-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
SUSE-SU-2025:21139-1
Updated
2026-11-02
OSVSUSE-SU-2025:21179-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
SUSE-SU-2025:21179-1
Updated
2026-11-02
OSVSUSE-SU-2026:20560-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
SUSE-SU-2026:20560-1
Updated
2026-11-02
OSVUSN-7879-1 No score

linux, linux-aws, linux-gcp, linux-hwe-6.14, linux-oracle, linux-realtime vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Network block device driver;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Multiple devices driver;
  • Media drivers;
  • Network drivers;
  • Mellanox network drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • ASPEED SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • USB Gadget drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • File systems infrastructure;
  • F2FS file system;
  • GFS2 file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • DRM display driver;
  • io_uring subsystem;
  • Internal shared memory driver;
  • padata parallel execution mechanism;
  • Networking subsytem;
  • Bluetooth subsystem;
  • Netfilter;
  • UDP network protocol;
  • Tracing infrastructure;
  • BPF subsystem;
  • Perf events;
  • Padata parallel execution mechanism;
  • Codetag library;
  • KASAN memory debugging framework;
  • Memory management;
  • 802.1Q VLAN protocol;
  • Appletalk network protocol;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netlink;
  • RxRPC session sockets;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • VMware vSockets driver;
  • Wireless networking;
  • XFRM subsystem;
  • ADI SoundPort AD1816A based soundcard drivers;
  • MediaTek ASoC drivers;
  • SOF drivers;
  • USB sound devices;
  • KVM subsystem; (CVE-2025-38335, CVE-2025-38349, CVE-2025-38351, CVE-2025-38437, CVE-2025-38438, CVE-2025-38439, CVE-2025-38440, CVE-2025-38441, CVE-2025-38443, CVE-2025-38444, CVE-2025-38445, CVE-2025-38446, CVE-2025-38448, CVE-2025-38449, CVE-2025-38450, CVE-2025-38451, CVE-2025-38452, CVE-2025-38453, CVE-2025-38454, CVE-2025-38455, CVE-2025-38456, CVE-2025-38457, CVE-2025-38458, CVE-2025-38459, CVE-2025-38460, CVE-2025-38461, CVE-2025-38462, CVE-2025-38463, CVE-2025-38464, CVE-2025-38465, CVE-2025-38466, CVE-2025-38467, CVE-2025-38468, CVE-2025-38469, CVE-2025-38470, CVE-2025-38471, CVE-2025-38472, CVE-2025-38473, CVE-2025-38474, CVE-2025-38475, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38484, CVE-2025-38485, CVE-2025-38487, CVE-2025-38488, CVE-2025-38489, CVE-2025-38490, CVE-2025-38491, CVE-2025-38492, CVE-2025-38493, CVE-2025-38494, CVE-2025-38495, CVE-2025-38496, CVE-2025-38497, CVE-2025-38501, CVE-2025-38503, CVE-2025-38505, CVE-2025-38506, CVE-2025-38507, CVE-2025-38508, CVE-2025-38509, CVE-2025-38510, CVE-2025-38511, CVE-2025-38512, CVE-2025-38513, CVE-2025-38514, CVE-2025-38515, CVE-2025-38516, CVE-2025-38517, CVE-2025-38520,…
Record
USN-7879-1
Updated
2026-11-02
OSVUSN-7879-2 No score

linux-realtime-6.14 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Network block device driver;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Multiple devices driver;
  • Media drivers;
  • Network drivers;
  • Mellanox network drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • ASPEED SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • USB Gadget drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • File systems infrastructure;
  • F2FS file system;
  • GFS2 file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • DRM display driver;
  • io_uring subsystem;
  • Internal shared memory driver;
  • padata parallel execution mechanism;
  • Networking subsytem;
  • Bluetooth subsystem;
  • Netfilter;
  • UDP network protocol;
  • Tracing infrastructure;
  • BPF subsystem;
  • Perf events;
  • Padata parallel execution mechanism;
  • Codetag library;
  • KASAN memory debugging framework;
  • Memory management;
  • 802.1Q VLAN protocol;
  • Appletalk network protocol;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netlink;
  • RxRPC session sockets;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • VMware vSockets driver;
  • Wireless networking;
  • XFRM subsystem;
  • ADI SoundPort AD1816A based soundcard drivers;
  • MediaTek ASoC drivers;
  • SOF drivers;
  • USB sound devices;
  • KVM subsystem; (CVE-2025-38335, CVE-2025-38349, CVE-2025-38351, CVE-2025-38437, CVE-2025-38438, CVE-2025-38439, CVE-2025-38440, CVE-2025-38441, CVE-2025-38443, CVE-2025-38444, CVE-2025-38445, CVE-2025-38446, CVE-2025-38448, CVE-2025-38449, CVE-2025-38450, CVE-2025-38451, CVE-2025-38452, CVE-2025-38453, CVE-2025-38454, CVE-2025-38455, CVE-2025-38456, CVE-2025-38457, CVE-2025-38458, CVE-2025-38459, CVE-2025-38460, CVE-2025-38461, CVE-2025-38462, CVE-2025-38463, CVE-2025-38464, CVE-2025-38465, CVE-2025-38466, CVE-2025-38467, CVE-2025-38468, CVE-2025-38469, CVE-2025-38470, CVE-2025-38471, CVE-2025-38472, CVE-2025-38473, CVE-2025-38474, CVE-2025-38475, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38484, CVE-2025-38485, CVE-2025-38487, CVE-2025-38488, CVE-2025-38489, CVE-2025-38490, CVE-2025-38491, CVE-2025-38492, CVE-2025-38493, CVE-2025-38494, CVE-2025-38495, CVE-2025-38496, CVE-2025-38497, CVE-2025-38501, CVE-2025-38503, CVE-2025-38505, CVE-2025-38506, CVE-2025-38507, CVE-2025-38508, CVE-2025-38509, CVE-2025-38510, CVE-2025-38511, CVE-2025-38512, CVE-2025-38513, CVE-2025-38514, CVE-2025-38515, CVE-2025-38516, CVE-2025-38517, CVE-2025-38520,…
Record
USN-7879-2
Updated
2026-11-03
OSVUSN-7879-3 No score

linux-aws-6.14, linux-oracle-6.14 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Network block device driver;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Multiple devices driver;
  • Media drivers;
  • Network drivers;
  • Mellanox network drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • ASPEED SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • USB Gadget drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • File systems infrastructure;
  • F2FS file system;
  • GFS2 file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • DRM display driver;
  • io_uring subsystem;
  • Internal shared memory driver;
  • padata parallel execution mechanism;
  • Networking subsytem;
  • Bluetooth subsystem;
  • Netfilter;
  • UDP network protocol;
  • Tracing infrastructure;
  • BPF subsystem;
  • Perf events;
  • Padata parallel execution mechanism;
  • Codetag library;
  • KASAN memory debugging framework;
  • Memory management;
  • 802.1Q VLAN protocol;
  • Appletalk network protocol;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netlink;
  • RxRPC session sockets;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • VMware vSockets driver;
  • Wireless networking;
  • XFRM subsystem;
  • ADI SoundPort AD1816A based soundcard drivers;
  • MediaTek ASoC drivers;
  • SOF drivers;
  • USB sound devices;
  • KVM subsystem; (CVE-2025-38335, CVE-2025-38349, CVE-2025-38351, CVE-2025-38437, CVE-2025-38438, CVE-2025-38439, CVE-2025-38440, CVE-2025-38441, CVE-2025-38443, CVE-2025-38444, CVE-2025-38445, CVE-2025-38446, CVE-2025-38448, CVE-2025-38449, CVE-2025-38450, CVE-2025-38451, CVE-2025-38452, CVE-2025-38453, CVE-2025-38454, CVE-2025-38455, CVE-2025-38456, CVE-2025-38457, CVE-2025-38458, CVE-2025-38459, CVE-2025-38460, CVE-2025-38461, CVE-2025-38462, CVE-2025-38463, CVE-2025-38464, CVE-2025-38465, CVE-2025-38466, CVE-2025-38467, CVE-2025-38468, CVE-2025-38469, CVE-2025-38470, CVE-2025-38471, CVE-2025-38472, CVE-2025-38473, CVE-2025-38474, CVE-2025-38475, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38484, CVE-2025-38485, CVE-2025-38487, CVE-2025-38488, CVE-2025-38489, CVE-2025-38490, CVE-2025-38491, CVE-2025-38492, CVE-2025-38493, CVE-2025-38494, CVE-2025-38495, CVE-2025-38496, CVE-2025-38497, CVE-2025-38501, CVE-2025-38503, CVE-2025-38505, CVE-2025-38506, CVE-2025-38507, CVE-2025-38508, CVE-2025-38509, CVE-2025-38510, CVE-2025-38511, CVE-2025-38512, CVE-2025-38513, CVE-2025-38514, CVE-2025-38515, CVE-2025-38516, CVE-2025-38517, CVE-2025-38520,…
Record
USN-7879-3
Updated
2026-11-03
OSVUSN-7879-4 No score

linux-gcp-6.14, linux-raspi vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Network block device driver;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Multiple devices driver;
  • Media drivers;
  • Network drivers;
  • Mellanox network drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • ASPEED SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • USB Gadget drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • File systems infrastructure;
  • F2FS file system;
  • GFS2 file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • DRM display driver;
  • io_uring subsystem;
  • Internal shared memory driver;
  • padata parallel execution mechanism;
  • Networking subsytem;
  • Bluetooth subsystem;
  • Netfilter;
  • UDP network protocol;
  • Tracing infrastructure;
  • BPF subsystem;
  • Perf events;
  • Padata parallel execution mechanism;
  • Codetag library;
  • KASAN memory debugging framework;
  • Memory management;
  • 802.1Q VLAN protocol;
  • Appletalk network protocol;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netlink;
  • RxRPC session sockets;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • VMware vSockets driver;
  • Wireless networking;
  • XFRM subsystem;
  • ADI SoundPort AD1816A based soundcard drivers;
  • MediaTek ASoC drivers;
  • SOF drivers;
  • USB sound devices;
  • KVM subsystem; (CVE-2025-38335, CVE-2025-38349, CVE-2025-38351, CVE-2025-38437, CVE-2025-38438, CVE-2025-38439, CVE-2025-38440, CVE-2025-38441, CVE-2025-38443, CVE-2025-38444, CVE-2025-38445, CVE-2025-38446, CVE-2025-38448, CVE-2025-38449, CVE-2025-38450, CVE-2025-38451, CVE-2025-38452, CVE-2025-38453, CVE-2025-38454, CVE-2025-38455, CVE-2025-38456, CVE-2025-38457, CVE-2025-38458, CVE-2025-38459, CVE-2025-38460, CVE-2025-38461, CVE-2025-38462, CVE-2025-38463, CVE-2025-38464, CVE-2025-38465, CVE-2025-38466, CVE-2025-38467, CVE-2025-38468, CVE-2025-38469, CVE-2025-38470, CVE-2025-38471, CVE-2025-38472, CVE-2025-38473, CVE-2025-38474, CVE-2025-38475, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38484, CVE-2025-38485, CVE-2025-38487, CVE-2025-38488, CVE-2025-38489, CVE-2025-38490, CVE-2025-38491, CVE-2025-38492, CVE-2025-38493, CVE-2025-38494, CVE-2025-38495, CVE-2025-38496, CVE-2025-38497, CVE-2025-38501, CVE-2025-38503, CVE-2025-38505, CVE-2025-38506, CVE-2025-38507, CVE-2025-38508, CVE-2025-38509, CVE-2025-38510, CVE-2025-38511, CVE-2025-38512, CVE-2025-38513, CVE-2025-38514, CVE-2025-38515, CVE-2025-38516, CVE-2025-38517, CVE-2025-38520,…
Record
USN-7879-4
Updated
2026-11-03
OSVUSN-7880-1 No score

linux-oem-6.14 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • PowerPC architecture;
  • S390 architecture;
  • x86 architecture;
  • Network block device driver;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • IIO subsystem;
  • IIO ADC drivers;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Multiple devices driver;
  • Media drivers;
  • Network drivers;
  • Mellanox network drivers;
  • PCI subsystem;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • ASPEED SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • USB Gadget drivers;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • File systems infrastructure;
  • F2FS file system;
  • GFS2 file system;
  • Network file systems library;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Proc file system;
  • SMB network file system;
  • DRM display driver;
  • io_uring subsystem;
  • Internal shared memory driver;
  • padata parallel execution mechanism;
  • Networking subsytem;
  • Bluetooth subsystem;
  • Netfilter;
  • UDP network protocol;
  • Tracing infrastructure;
  • BPF subsystem;
  • Perf events;
  • Padata parallel execution mechanism;
  • Codetag library;
  • KASAN memory debugging framework;
  • Memory management;
  • 802.1Q VLAN protocol;
  • Appletalk network protocol;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netlink;
  • RxRPC session sockets;
  • Network traffic control;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • VMware vSockets driver;
  • Wireless networking;
  • XFRM subsystem;
  • ADI SoundPort AD1816A based soundcard drivers;
  • MediaTek ASoC drivers;
  • SOF drivers;
  • USB sound devices;
  • KVM subsystem; (CVE-2025-38335, CVE-2025-38349, CVE-2025-38351, CVE-2025-38437, CVE-2025-38438, CVE-2025-38439, CVE-2025-38440, CVE-2025-38441, CVE-2025-38443, CVE-2025-38444, CVE-2025-38445, CVE-2025-38446, CVE-2025-38448, CVE-2025-38449, CVE-2025-38450, CVE-2025-38451, CVE-2025-38452, CVE-2025-38453, CVE-2025-38454, CVE-2025-38455, CVE-2025-38456, CVE-2025-38457, CVE-2025-38458, CVE-2025-38459, CVE-2025-38460, CVE-2025-38461, CVE-2025-38462, CVE-2025-38463, CVE-2025-38464, CVE-2025-38465, CVE-2025-38466, CVE-2025-38467, CVE-2025-38468, CVE-2025-38469, CVE-2025-38470, CVE-2025-38471, CVE-2025-38472, CVE-2025-38473, CVE-2025-38474, CVE-2025-38475, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38484, CVE-2025-38485, CVE-2025-38487, CVE-2025-38488, CVE-2025-38489, CVE-2025-38490, CVE-2025-38491, CVE-2025-38492, CVE-2025-38493, CVE-2025-38494, CVE-2025-38495, CVE-2025-38496, CVE-2025-38497, CVE-2025-38501, CVE-2025-38503, CVE-2025-38505, CVE-2025-38506, CVE-2025-38507, CVE-2025-38508, CVE-2025-38509, CVE-2025-38510, CVE-2025-38511, CVE-2025-38512, CVE-2025-38513, CVE-2025-38514, CVE-2025-38515, CVE-2025-38516, CVE-2025-38517, CVE-2025-38520, CVE-2025-38521,…
Record
USN-7880-1
Updated
2026-11-03

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-cross-headers
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-devel-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-doc
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-headers
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-modules-extra-matched
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-devel
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-modules
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-modules-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-64k-modules-extra
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-core
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel-rt-debug
AlmaLinux:10
From an advisory covering 88 CVEs
 before 6.12.0-124.8.1.el10_1
6.12.0-124.8.1.el10_1
kernel
Azure Linux:3
 before 6.6.104.2-1
6.6.104.2-1
kernel
Azure Linux:2
 before 5.15.200.1-1
5.15.200.1-1
linux-lts
Alpaquita:23
 6.1.143-r1 up to 6.1.147-r0
6.1.147-r0
linux-lts
Alpaquita:25
 6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek-container
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek-container-debug
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek-debug
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek-devel
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek-headers
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek-tools
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
perf
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
python-perf
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.7.els30
7.0.0-284.1101.el9_2.tuxcare.7.els30
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 260 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els30
5.14.0-284.1101.el9_2.tuxcare.7.els30
Kernel
Linux
 2.6.29 up to 5.4.297, 5.5.0 up to 5.10.241, 5.11.0 up to 5.15.190, 5.16.0 up to 6.1.147, 6.2.0 up to 6.6.100, 6.7.0 up to 6.12.40, 6.13.0 up to 6.15.8
5.4.2975.10.2415.15.1906.1.1476.6.1006.12.406.15.8
linux
Debian:12
 before 6.1.147-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 36 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.147-1
linux
Debian:13
 before 6.12.41-1, plus listed versions
6.12.38-1
6.12.41-1
linux
Debian:14
 before 6.16.3-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.115-16.12.115-26.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp1
6.16.3-1
linux
Debian:11
From an advisory covering 331 CVEs
 before 5.10.244-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 41 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.234-15.10.237-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.244-1
linux-6.1
Debian:11
From an advisory covering 465 CVEs
 before 6.1.153-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1
Show 6 moreShow less
6.1.128-1~deb11u16.1.129-1~deb11u16.1.137-1~deb11u16.1.140-1~deb11u16.1.147-1~deb11u16.1.148-1~deb11u1
6.1.153-1~deb11u1
linux
Debian:12
From an advisory covering 233 CVEs
 before 6.1.147-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 36 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.147-1
linux
Debian:13
From an advisory covering 66 CVEs
 before 6.12.41-1, plus listed versions
6.12.38-1
6.12.41-1
kernel-linus
Mageia:9
From an advisory covering 237 CVEs
 before 6.6.101-1.mga9
6.6.101-1.mga9
kernel
Mageia:9
From an advisory covering 237 CVEs
 before 6.6.101-1.mga9
6.6.101-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 237 CVEs
 before 7.1.10-7.mga9
7.1.10-7.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 237 CVEs
 before 3.24-83.mga9
3.24-83.mga9
wireless-regdb
Mageia:9
From an advisory covering 237 CVEs
 before 20250710-1.mga9
20250710-1.mga9
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-doc
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-rt-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-tools-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-devel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
libperf-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
perf
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
perf-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
python3-perf
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
python3-perf-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
rtla
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
rv
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-modules-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-64k-modules-extra
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-abi-stablelists
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-core
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel-debug-modules
Red Hat:enterprise_linux:10.1
From an advisory covering 123 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
kernel
Rocky Linux:10
From an advisory covering 88 CVEs
 before 0:6.12.0-124.8.1.el10_1
0:6.12.0-124.8.1.el10_1
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 83 CVEs
 before 4.12.14-122.269.1
4.12.14-122.269.1
kgraft-patch-SLE12-SP5_Update_71
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 83 CVEs
 before 1-8.3.1
1-8.3.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 83 CVEs
 before 4.12.14-122.269.1
4.12.14-122.269.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 83 CVEs
 before 4.12.14-122.269.1
4.12.14-122.269.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 83 CVEs
 before 4.12.14-122.269.1
4.12.14-122.269.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 83 CVEs
 before 4.12.14-122.269.1
4.12.14-122.269.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 83 CVEs
 before 4.12.14-122.269.1
4.12.14-122.269.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 83 CVEs
 before 4.12.14-122.269.1
4.12.14-122.269.1
kernel-default
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1.150400.24.88.1
5.14.21-150400.24.173.1.150400.24.88.1
kernel-default
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1.150400.24.88.1
5.14.21-150400.24.173.1.150400.24.88.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-livepatch-SLE15-SP4_Update_43
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 28 CVEs
 before 1-150400.9.3.1
1-150400.9.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1.150400.24.88.1
5.14.21-150400.24.173.1.150400.24.88.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1.150400.24.88.1
5.14.21-150400.24.173.1.150400.24.88.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1.150400.24.88.1
5.14.21-150400.24.173.1.150400.24.88.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1.150400.24.88.1
5.14.21-150400.24.173.1.150400.24.88.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default
SUSE:Manager Proxy LTS 4.3
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default-base
SUSE:Manager Proxy LTS 4.3
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1.150400.24.88.1
5.14.21-150400.24.173.1.150400.24.88.1
kernel-source
SUSE:Manager Proxy LTS 4.3
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-syms
SUSE:Manager Proxy LTS 4.3
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default
SUSE:Manager Server LTS 4.3
From an advisory covering 28 CVEs
 before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1.150600.12.28.4
6.4.0-150600.23.65.1.150600.12.28.4
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
 before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
 before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux-aws
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
 None known
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
 None known
linux
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
 None known
linux-aws
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-kvm
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
 None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1.160000.2.4
6.12.0-160000.6.1.160000.2.4
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
affectedOSV
affectedCVE List, EUVD, NVD
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-38468 is a medium vulnerability (CVSS 5.5) in Debian Linux, published July 28, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 9th percentile. Fixed in kernel 6.6.104.2-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 593 package rows, 2,259 versions, 4,368 references and the rest of 27 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 26 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open