CVE-2025-38676

iommu/amd: Avoid stack buffer overflow from kernel cmdline

7.8 HighPublic exploitFix available

What does this mean?

: 7.8v3.1, from NVD
: 0.42%36th percentile
Fixed in: 6.6.96.2-1kernel
Published: August 26, 2025
Modified: November 6, 2026
Weakness: CWE-787
Also known as: AZL-66692AZL-73815BELL-CVE-2025-38676CLSA-2026-1772815097CLSA-2026-1786352940CLSA-2026-1789141176DEBIAN-CVE-2025-38676DLA-4327-1
Show 56 moreShow less
DLA-4328-1DSA-6008-1DSA-6009-1EUVD-2025-26084GHSA-4grh-3wrc-7rxmOESA-2026-1303OESA-2026-1304OESA-2026-1339OESA-2026-1341ROOT-OS-DEBIAN-11-CVE-2025-38676ROOT-OS-DEBIAN-12-CVE-2025-38676ROOT-OS-DEBIAN-13-CVE-2025-38676ROOT-OS-UBUNTU-2204-CVE-2025-38676ROOT-OS-UBUNTU-2404-CVE-2025-38676SUSE-SU-2025:03600-1SUSE-SU-2025:03601-1SUSE-SU-2025:03602-1SUSE-SU-2025:03633-1SUSE-SU-2025:03634-1SUSE-SU-2025:20851-1SUSE-SU-2025:20861-1SUSE-SU-2025:20870-1SUSE-SU-2025:20898-1SUSE-SU-2025:21074-1SUSE-SU-2025:21139-1SUSE-SU-2025:21179-1SUSE-SU-2025:3725-1SUSE-SU-2025:3751-1SUSE-SU-2026:20560-1UBUNTU-CVE-2025-38676USN-7909-1USN-7909-2USN-7909-3USN-7909-4USN-7909-5USN-7910-1USN-7910-2USN-7933-1USN-7938-1USN-8028-1USN-8028-2USN-8028-3USN-8028-4USN-8028-5USN-8028-6USN-8028-7USN-8028-8USN-8031-1USN-8031-2USN-8031-3USN-8052-1USN-8052-2USN-8074-1USN-8074-2USN-8126-1openSUSE-SU-2025:20081-1

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Avoid stack buffer overflow from kernel cmdline

While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.42%Up 0.4 points since Aug 27, 2025

What each source reports

NVD Score used 7.8

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Avoid stack buffer overflow from kernel cmdline

While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.

Record: CVE-2025-38676
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-787
Updated: 2026-11-05

CVE List No score

iommu/amd: Avoid stack buffer overflow from kernel cmdline

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Avoid stack buffer overflow from kernel cmdline

While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.

Record: CVE-2025-38676
Updated: 2026-11-05

EUVDEUVD-2025-26084 No score

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Avoid stack buffer overflow from kernel cmdline

While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.

Record: EUVD-2025-26084
Updated: 2026-11-05

GitHub AdvisoriesGHSA-4grh-3wrc-7rxm 7.8

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack...

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Avoid stack buffer overflow from kernel cmdline

While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.

Record: GHSA-4grh-3wrc-7rxm
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-787
Updated: 2026-11-02

OSVBELL-CVE-2025-38676 7.8

Record: BELL-CVE-2025-38676
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2025-38676 7.8

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.

Record: DEBIAN-CVE-2025-38676
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-06

Show 44 moreShow less

OSVOESA-2026-1303 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()

Jakub added a lockdep_assert_no_hardirq() check in __page_pool_put_page() to increase test coverage.

syzbot found a splat caused by hard irq blocking in ptr_ring_resize_multiple() [1]

As current users of ptr_ring_resize_multiple() do not require hard irqs being masked, replace it to only block BH.

Rename helpers to better reflect they are safe against BH only.

ptr_ring_resize_multiple() to ptr_ring_resize_multiple_bh()
skb_array_resize_multiple() to skb_array_resize_multiple_bh()

[1]

WARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 __page_pool_put_page net/core/page_pool.c:709 [inline] WARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780 Modules linked in: CPU: 1 UID: 0 PID: 9150 Comm: syz.1.1052 Not tainted 6.11.0-rc3-syzkaller-00202-gf8669d7b5f5d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:__page_pool_put_page net/core/page_pool.c:709 [inline] RIP: 0010:page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780 Code: 74 0e e8 7c aa fb f7 eb 43 e8 75 aa fb f7 eb 3c 65 8b 1d 38 a8 6a 76 31 ff 89 de e8 a3 ae fb f7 85 db 74 0b e8 5a aa fb f7 90 <0f> 0b 90 eb 1d 65 8b 1d 15 a8 6a 76 31 ff 89 de e8 84 ae fb f7 85 RSP: 0018:ffffc9000bda6b58 EFLAGS: 00010083 RAX: ffffffff8997e523 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc9000fbd0000 RSI: 0000000000001842 RDI: 0000000000001843 RBP: 0000000000000000 R08: ffffffff8997df2c R09: 1ffffd40003a000d R10: dffffc0000000000 R11: fffff940003a000e R12: ffffea0001d00040 R13: ffff88802e8a4000 R14: dffffc0000000000 R15: 00000000ffffffff FS: 00007fb7aaf716c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa15a0d4b72 CR3: 00000000561b0000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> tun_ptr_free drivers/net/tun.c:617 [inline] __ptr_ring_swap_queue include/linux/ptr_ring.h:571 [inline] ptr_ring_resize_multiple_noprof include/linux/ptr_ring.h:643 [inline] tun_queue_resize drivers/net/tun.c:3694 [inline] tun_device_event+0xaaf/0x1080 drivers/net/tun.c:3714 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2032 [inline] call_netdevice_notifiers net/core/dev.c:2046 [inline] dev_change_tx_queue_len+0x158/0x2a0 net/core/dev.c:9024 do_setlink+0xff6/0x41f0 net/core/rtnetlink.c:2923 rtnl_setlink+0x40d/0x5a0 net/core/rtnetlink.c:3201 rtnetlink_rcv_msg+0x73f/0xcf0 net/core/rtnetlink.c:6647 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550(CVE-2024-57994)

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

Each cpu DAI should associate with a widget. However, the topology might not create the right number of DAI widgets for aggregated amps. And it will cause NULL pointer deference. Check that the DAI widget associated with the CPU DAI is valid to prevent NULL pointer deference due to missing DAI widgets in topologies with aggregated amps.(CVE-2024-58012)

In the Linux kernel, the following vulnerability has been resolved:

driver core: fix potential NULL pointer dereference in dev_uevent()

If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev->driver from a valid pointer to NULL may result in crash. Fix this by using READ_ONCE() when fetching the pointer, and take bus' drivers klist lock to make sure driver instance will not disappear while we access it.

Use WRITE_ONCE() when setting the…

Record: OESA-2026-1303
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-1304 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()

Jakub added a lockdep_assert_no_hardirq() check in __page_pool_put_page() to increase test coverage.

syzbot found a splat caused by hard irq blocking in ptr_ring_resize_multiple() [1]

As current users of ptr_ring_resize_multiple() do not require hard irqs being masked, replace it to only block BH.

Rename helpers to better reflect they are safe against BH only.

ptr_ring_resize_multiple() to ptr_ring_resize_multiple_bh()
skb_array_resize_multiple() to skb_array_resize_multiple_bh()

[1]

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

In the Linux kernel, the following vulnerability has been resolved:

driver core: fix potential NULL pointer dereference in dev_uevent()

Use WRITE_ONCE() when setting the…

Record: OESA-2026-1304
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-1339 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

md/dm-raid: don't call md_reap_sync_thread() directly

Currently md_reap_sync_thread() is called from raid_message() directly without holding 'reconfig_mutex', this is definitely unsafe because md_reap_sync_thread() can change many fields that is protected by 'reconfig_mutex'.

However, hold 'reconfig_mutex' here is still problematic because this will cause deadlock, for example, commit 130443d60b1b ("md: refactor idle/frozen_sync_thread() to fix deadlock").

Fix this problem by using stop_sync_thread() to unregister sync_thread, like md/raid did.(CVE-2024-35808)

In the Linux kernel, the following vulnerability has been resolved:

x86: fix user address masking non-canonical speculation issue

It turns out that AMD has a "Meltdown Lite(tm)" issue with non-canonical accesses in kernel space. And so using just the high bit to decide whether an access is in user space or kernel space ends up with the good old "leak speculative data" if you have the right gadget using the result:

CVE-2020-12965 “Transient Execution of Non-Canonical Accesses“

Now, the kernel surrounds the access with a STAC/CLAC pair, and those instructions end up serializing execution on older Zen architectures, which closes the speculation window.

But that was true only up until Zen 5, which renames the AC bit [1]. That improves performance of STAC/CLAC a lot, but also means that the speculation window is now open.

Note that this affects not just the new address masking, but also the regular valid_user_address() check used by access_ok(), and the asm version of the sign bit check in the get_user() helpers.

It does not affect put_user() or clear_user() variants, since there's no speculative result to be used in a gadget for those operations.(CVE-2024-50102)

In the Linux kernel, the following vulnerability has been resolved:

genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie

The IOMMU translation for MSI message addresses has been a 2-step process, separated in time:

iommu_dma_prepare_msi(): A cookie pointer containing the IOVA address is stored in the MSI descriptor when an MSI interrupt is allocated.
iommu_dma_compose_msi_msg(): this cookie pointer is used to compute a translated message address.

This has an inherent lifetime problem for the pointer stored in the cookie that must remain valid between the two steps. However, there is no locking at the irq layer that helps protect the lifetime. Today, this works under the assumption that the iommu domain is not changed while MSI interrupts being programmed. This is true for normal DMA API users within the kernel, as the iommu domain is attached before the driver is probed and cannot be changed while a driver is attached.

Classic VFIO type1 also prevented changing the iommu domain while VFIO was running as it does not support changing the "container" after starting up.

However, iommufd has improved this so that the iommu domain can be changed during VFIO operation. This potentially allows userspace to directly race VFIO_DEVICE_ATTACH_IOMMUFD_PT (which calls iommu_attach_group()) and VFIO_DEVICE_SET_IRQS (which calls into iommu_dma_compose_msi_msg()).

This potentially causes both the cookie pointer and the unlocked call to iommu_get_domain_for_dev() on the MSI translation path to become UAFs.

Fix the MSI cookie UAF by removing the cookie pointer. The translated IOVA address is already known during iommu_dma_prepare_msi() and cannot change. Thus, it can simply be stored as an integer in the MSI descriptor.

The other UAF related to iommu_get_domain_for_dev() will be addressed in patch "iommu: Make iommu_dma_prepare_msi() into a generic operation" by using the IOMMU group mutex.(CVE-2025-38062)

In the Linux kernel, the…

Record: OESA-2026-1339
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-1341 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:kernel/resource: fix kfree() of bootmem memory againSince commit ebff7d8f270d ( mem hotunplug: fix kfree() of bootmemmemory ), we could get a resource allocated during boot viaalloc_resource(). And it s required to release the resource usingfree_resource(). Howerver, many people use kfree directly which willresult in kernel BUG. In order to fix this without fixing every callsite, just leak a couple of bytes in such corner case.(CVE-2022-49190)

In the Linux kernel, the following vulnerability has been resolved:drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback()There is a deadlock in rtw_surveydone_event_callback(),which is shown below: (Thread 1) | (Thread 2) | _set_timer()rtw_surveydone_event_callback()| mod_timer() spin_lock_bh() //(1) | (wait a time) ... | rtw_scan_timeout_handler() del_timer_sync() | spin_lock_bh() //(2) (wait timer to stop) | ...We hold pmlmepriv->lock in position (1) of thread 1 and usedel_timer_sync() to wait timer to stop, but timer handleralso need pmlmepriv->lock in position (2) of thread 2.As a result, rtw_surveydone_event_callback() will block forever.This patch extracts del_timer_sync() from the protection ofspin_lock_bh(), which could let timer handler to obtainthe needed lock. What`s more, we change spin_lock_bh() inrtw_scan_timeout_handler() to spin_lock_irq(). Otherwise,spin_lock_bh() will also cause deadlock() in timer handler.(CVE-2022-49309)

In the Linux kernel, the following vulnerability has been resolved:

drm/scheduler: fix fence ref counting

We leaked dependency fences when processes were beeing killed.

Additional to that grab a reference to the last scheduled fence.(CVE-2022-49829)

In the Linux kernel, the following vulnerability has been resolved:

usb: cdns3: fix random warning message when driver load

Warning log: [ 4.141392] Unexpected gfp: 0x4 (GFP_DMA32). Fixing up to gfp: 0xa20 (GFP_ATOMIC). Fix your code! [ 4.150340] CPU: 1 PID: 175 Comm: 1-0050 Not tainted 5.15.5-00039-g2fd9ae1b568c #20 [ 4.158010] Hardware name: Freescale i.MX8QXP MEK (DT) [ 4.163155] Call trace: [ 4.165600] dump_backtrace+0x0/0x1b0 [ 4.169286] show_stack+0x18/0x68 [ 4.172611] dump_stack_lvl+0x68/0x84 [ 4.176286] dump_stack+0x18/0x34 [ 4.179613] kmalloc_fix_flags+0x60/0x88 [ 4.183550] new_slab+0x334/0x370 [ 4.186878] ___slab_alloc.part.108+0x4d4/0x748 [ 4.191419] __slab_alloc.isra.109+0x30/0x78 [ 4.195702] kmem_cache_alloc+0x40c/0x420 [ 4.199725] dma_pool_alloc+0xac/0x1f8 [ 4.203486] cdns3_allocate_trb_pool+0xb4/0xd0

pool_alloc_page(struct dma_pool *pool, gfp_t mem_flags) { ... page = kmalloc(sizeof(*page), mem_flags); page->vaddr = dma_alloc_coherent(pool->dev, pool->allocation, &page->dma, mem_flags); ... }

kmalloc was called with mem_flags, which is passed down in cdns3_allocate_trb_pool() and have GFP_DMA32 flags. kmall_fix_flags() report warning.

GFP_DMA32 is not useful at all. dma_alloc_coherent() will handle DMA memory region correctly by pool->dev. GFP_DMA32 can be removed safely.(CVE-2022-50151)

In the Linux kernel, the following vulnerability has been resolved:

of: check previous kernel's ima-kexec-buffer against memory bounds

Presently ima_get_kexec_buffer() doesn't check if the previous kernel's ima-kexec-buffer lies outside the addressable memory range. This can result in a kernel panic if the new kernel is booted with 'mem=X' arg and the ima-kexec-buffer was allocated beyond that range by the previous kernel. The panic is usually of the form below:

$ sudo kexec --initrd initrd vmlinux --append='mem=16G'

<snip> BUG: Unable to handle kernel data access on read at…

Record: OESA-2026-1341
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-11-CVE-2025-38676 7.8

CVE-2025-38676 in linux - Patched by Root

Root has patched CVE-2025-38676 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-11-CVE-2025-38676
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2025-38676 7.8

CVE-2025-38676 in linux - Patched by Root

Root has patched CVE-2025-38676 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2025-38676
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-13-CVE-2025-38676 7.8

CVE-2025-38676 in linux - Patched by Root

Root has patched CVE-2025-38676 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-13-CVE-2025-38676
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-03

OSVROOT-OS-UBUNTU-2204-CVE-2025-38676 7.8

CVE-2025-38676 in linux - Patched by Root

Root has patched CVE-2025-38676 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2025-38676
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-06

OSVROOT-OS-UBUNTU-2404-CVE-2025-38676 7.8

CVE-2025-38676 in linux - Patched by Root

Root has patched CVE-2025-38676 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2025-38676
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-06

OSVUBUNTU-CVE-2025-38676 7.8

Record: UBUNTU-CVE-2025-38676
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-06

OSVAZL-66692 No score

CVE-2025-38676 affecting package kernel for versions less than 6.6.96.2-1

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Avoid stack buffer overflow from kernel cmdline

While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.

Record: AZL-66692
Updated: 2026-11-02

OSVAZL-73815 No score

CVE-2025-38676 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Avoid stack buffer overflow from kernel cmdline

While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.

Record: AZL-73815
Updated: 2026-11-02

OSVCLSA-2026-1772815097 No score

Fix of 104 CVEs

CVE-2025-38699
- scsi: bfa: Double-free fix {CVE-2025-38699}
CVE-2025-38697
- jfs: upper bound check of tree index in dbAllocAG {CVE-2025-38697}
CVE-2025-39823
- KVM: x86: use array_index_nospec with indices that come from guest {CVE-2025-39823}
CVE-2025-39689
- ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689}
CVE-2025-39749
- rcu: Protect ->defer_qs_iw_pending from data race {CVE-2025-39749}
CVE-2025-38728
- smb3: fix for slab out of bounds on mount to ksmbd {CVE-2025-38728}
CVE-2025-38676
- iommu/amd: Avoid stack buffer overflow from kernel cmdline {CVE-2025-38676}
CVE-2025-38574
- pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574}
CVE-2025-38572
- ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572}
CVE-2025-38685
- fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685}
CVE-2025-38563
- vm_ops: rename .split() callback to .may_split() {CVE-2025-38563}
- perf/core: Prevent VMA split of buffer mappings {CVE-2025-38563}
CVE-2025-38702
- fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702}
CVE-2025-39911
- i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911}
CVE-2025-39971
- i40e: fix idx validation in config queues msg {CVE-2025-39971}
CVE-2025-40154
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping {CVE-2025-40154}
CVE-2025-39973
- i40e: increase max descriptors for XL710 {CVE-2025-39973}
- i40e: add validation for ring_len param {CVE-2025-39973}
CVE-2022-49026
- e100: Fix possible use after free in e100_xmit_prepare {CVE-2022-49026}
CVE-2025-38724
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724}
CVE-2025-39853
- i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853}
CVE-2025-39860
- Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() {CVE-2025-39860}
CVE-2025-39891
- wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891}
CVE-2025-38530
- comedi: pcl812: Fix bit shift out of bounds {CVE-2025-38530}
CVE-2025-38529
- comedi: aio_iiro_16: Fix bit shift out of bounds {CVE-2025-38529}
CVE-2025-38497
- usb: gadget: configfs: Fix OOB read on empty string write {CVE-2025-38497}
CVE-2025-38483
- comedi: das16m1: Fix bit shift out of bounds {CVE-2025-38483}
CVE-2025-38482
- comedi: das6402: Fix bit shift out of bounds {CVE-2025-38482}
CVE-2025-39702
- ipv6: sr: Fix MAC comparison to be constant-time {CVE-2025-39702}
CVE-2025-39730
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() {CVE-2025-39730}
CVE-2025-39841
- scsi: lpfc: Fix buffer free/clear order in deferred receive path {CVE-2025-39841}
CVE-2025-39817
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817}
CVE-2025-38494
- HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38494}
- HID: core: ensure __hid_request reserves the report ID as the first byte {CVE-2025-38494}
- HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494}
CVE-2025-39757
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757}
CVE-2025-38527
- smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527}
CVE-2023-52854
- padata: Fix refcnt handling in padata_free_shell() {CVE-2023-52854}
CVE-2024-35867
- smb: client: fix potential UAF in cifs_stats_proc_show() {CVE-2024-35867}
CVE-2024-50061
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition {CVE-2024-50061}
CVE-2025-39965 -…

Record: CLSA-2026-1772815097
Updated: 2026-11-02

OSVCLSA-2026-1786352940 No score

kernel: Fix of 148 CVEs

KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level {CVE-2026-63807}
KVM: x86: Check for invalid/obsolete root after making MMU pages available {CVE-2026-64561}
ubi: Fix use-after-free when volume resizing failed {CVE-2023-53271}
ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() {CVE-2025-37912}
wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() {CVE-2026-53318}
dpll: Prevent duplicate registrations {CVE-2026-23129}
pinmux: fix race causing mux_owner NULL with active mux_usecount {CVE-2025-38632}
HID: apple: validate feature-report field count to prevent NULL pointer dereference {CVE-2025-38557}
thunderbolt: Limit XDomain response copy to actual frame size {CVE-2026-53146}
net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery {CVE-2026-43466}
virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false {CVE-2026-31469}
scsi: target: Reset t_task_cdb pointer in error case {CVE-2025-68782}
ubi: ubi_create_volume: Fix use-after-free when volume creation failed {CVE-2022-49388}
drm/xe/reg_sr: Fix leak on xa_store failure {CVE-2026-23418}
ASoC: soc-core: flush delayed work before removing DAIs and widgets {CVE-2026-43459}
md/raid10: wait barrier before returning discard request with REQ_NOWAIT {CVE-2025-40325}
nbd: defer config put in recv_work {CVE-2025-68372}
nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference {CVE-2026-23148}
net: hns3: using the num_tqps in the vf driver to apply for resources {CVE-2025-71064}
net/mlx5e: Disable MACsec offload for uplink representor profile {CVE-2025-38020}
serial: imx: fix tx statemachine deadlock {CVE-2023-52456}
dm-thin: fix metadata refcount underflow {CVE-2026-46107}
net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure {CVE-2026-53229}
drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
usbnet:fix NPE during rx_complete {CVE-2025-22050}
platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it {CVE-2025-21645}
driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() {CVE-2025-21810}
usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916}
ALSA: seq: dummy: fix UMP event stack overread {CVE-2026-53241}
pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled {CVE-2026-31655}
net/mlx5: Bridge, fix the crash caused by LAG state check {CVE-2025-21970}
ALSA: timer: Don't take register_mutex with copy_from/to_user() {CVE-2025-23134}
md/raid5: validate payload size before accessing journal metadata {CVE-2026-46070}
nvmet-fc: move lsop put work to nvmet_fc_ls_req_op {CVE-2025-40171}
iommu: Fix potential memory leak in iopf_queue_remove_device() {CVE-2025-21770}
Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak {CVE-2025-40035}
scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails {CVE-2026-45997}
can: dev: can_set_termination(): allow sleeping GPIOs {CVE-2024-56625}
nvme-tcp: fix the memleak while create new ctrl failed {CVE-2024-56632}
ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() {CVE-2026-46146}
pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains {CVE-2026-23187}
wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path {CVE-2025-22128}
octeon_ep: Fix memory leak in octep_device_setup() {CVE-2026-23160}
pinctrl: check the return value of pinmux_ops::get_function_name() {CVE-2025-40030}
net: tun: fix tun_napi_alloc_frags() {CVE-2024-56372}
wifi: iwlwifi: mvm: clean up ROC on failure {CVE-2025-21906}
ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd {CVE-2025-40275}
dpll: fix xa_alloc_cyclic() error handling {CVE-2025-22016}
usb: usbtmc: Flush anchored URBs in usbtmc_release {CVE-2026-31758}
RDMA/siw: Fix potential NULL pointer dereference in header processing…

Record: CLSA-2026-1786352940
Updated: 2026-11-02

OSVCLSA-2026-1789141176 No score

kernel: Fix of 131 CVEs

net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers {CVE-2026-74700}
ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
tipc: read le->link under the node lock in tipc_node_link_down() {CVE-2026-74609}
ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
bpf, sockmap: Fix sk_redir use-after-free in send verdict {CVE-2026-74589}
sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565}
scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
geneve: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}
sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
net/packet: reset the MAC header on the packet-socket transmit path {CVE-2026-74667}
ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}
RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
drm/i915: Fix potential UAF in TTM object purge {CVE-2026-63884}
wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request {CVE-2026-68363}
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}
sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
Bluetooth: hci_sync: Protect UUID list traversal {CVE-2026-68189}
net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
libceph: remove debugfs files before client teardown {CVE-2026-68153}
media: rtl2832: fix use-after-free in rtl2832_remove() {CVE-2026-68214}
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async {CVE-2026-64219}
pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
fbdev: Fix invalid page access after closing deferred I/O devices {CVE-2023-52731}
Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252}
net_sched: red: fix a race in __red_change() {CVE-2025-38108}
iio: event: Fix event FIFO reset race {CVE-2026-64496}
netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
openvswitch: fix GSO userspace truncation underflow {CVE-2026-68123}
media: cx23885: add ioremap return check and cleanup {CVE-2026-68226}
tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev {CVE-2026-68176} -…

Record: CLSA-2026-1789141176
Updated: 2026-11-02

OSV No score

iommu/amd: Avoid stack buffer overflow from kernel cmdline

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Avoid stack buffer overflow from kernel cmdline

While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of "acpiid" if the "str" argument is maximum length.

Record: CVE-2025-38676
Updated: 2026-11-07

OSVopenSUSE-SU-2025:20081-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…

Record: openSUSE-SU-2025:20081-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03600-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do not BUG…

Record: SUSE-SU-2025:03600-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03601-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38628: vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1248616).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media:…

Record: SUSE-SU-2025:03601-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03602-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-39782: jbd2: prevent softlockup in jbd2_log_do_checkpoint() (bsc#1249526).
CVE-2025-39773: net: bridge: fix soft lockup in br_multicast_query_expired() (bsc#1249504).
CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1249516).
CVE-2025-39718: vsock/virtio: Validate length in packet header before skb_put() (bsc#1249305).
CVE-2025-39705: drm/amd/display: fix a Null pointer dereference vulnerability (bsc#1249295).
CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (bsc#1249315).
CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (bsc#1249374).
CVE-2025-39682: tls: fix handling of zero-length records on the rx_list (bsc#1249284).
CVE-2025-39678: platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL (bsc#1249290).
CVE-2025-38732: netfilter: nf_reject: do not leak dst refcount for loopback packets (bsc#1249262).
CVE-2025-38730: io_uring/net: commit partial buffers on retry (bsc#1249172).
CVE-2025-38722: habanalabs: fix UAF in export_dmabuf() (bsc#1249163).
CVE-2025-38721: netfilter: ctnetlink: fix refcount leak on table dump (bsc#1249176).
CVE-2025-38709: loop: Avoid updating block size under exclusive owner (bsc#1249199).
CVE-2025-38705: drm/amd/pm: fix null pointer access (bsc#1249334).
CVE-2025-38701: ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (bsc#1249258).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248338).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38591: bpf: Reject narrower access to pointer ctx fields (bsc#1248363).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38585: staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() (bsc#1248355).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38560: x86/sev: Evict cache lines during SNP memory validation (bsc#1248312).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38546: atm: clip: Fix memory leak of struct clip_vcc (bsc#1248223).
CVE-2025-38544: rxrpc:…

Record: SUSE-SU-2025:03602-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03633-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38245: atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister() (bsc#1246193).
CVE-2025-38251: atm: clip: prevent NULL deref in clip_push() (bsc#1246181).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38360: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (bsc#1247078).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38439: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (bsc#1247155).
CVE-2025-38440: net/mlx5e: Fix race between DIM disable and net_dim() (bsc#1247290).
CVE-2025-38441: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (bsc#1247167).
CVE-2025-38444: raid10: cleanup memleak at raid10_make_request (bsc#1247162).
CVE-2025-38445: md/raid1: Fix stack memory use after return in raid1_reshape (bsc#1247229).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38458: atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (bsc#1247116).
CVE-2025-38459: atm: clip: Fix infinite recursive call of clip_push() (bsc#1247119).
CVE-2025-38464: tipc: Fix use-after-free in tipc_conn_close() (bsc#1247112).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38472: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (bsc#1247313).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38490: net: libwx: remove duplicate…

Record: SUSE-SU-2025:03633-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03634-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38245: atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister() (bsc#1246193).
CVE-2025-38251: atm: clip: prevent NULL deref in clip_push() (bsc#1246181).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38360: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (bsc#1247078).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38439: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (bsc#1247155).
CVE-2025-38441: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (bsc#1247167).
CVE-2025-38444: raid10: cleanup memleak at raid10_make_request (bsc#1247162).
CVE-2025-38445: md/raid1: Fix stack memory use after return in raid1_reshape (bsc#1247229).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38458: atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (bsc#1247116).
CVE-2025-38459: atm: clip: Fix infinite recursive call of clip_push() (bsc#1247119).
CVE-2025-38464: tipc: Fix use-after-free in tipc_conn_close() (bsc#1247112).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38472: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (bsc#1247313).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (bsc#1247243).
CVE-2025-38491: mptcp: make fallback action and fallback decision…

Record: SUSE-SU-2025:03634-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20851-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do…

Record: SUSE-SU-2025:20851-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20861-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do…

Record: SUSE-SU-2025:20861-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20870-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4:…

Record: SUSE-SU-2025:20870-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20898-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4:…

Record: SUSE-SU-2025:20898-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21074-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…

Record: SUSE-SU-2025:21074-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21139-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…

Record: SUSE-SU-2025:21139-1
Updated: 2026-11-02

OSVSUSE-SU-2025:21179-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…

Record: SUSE-SU-2025:21179-1
Updated: 2026-11-02

OSVSUSE-SU-2025:3725-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38628: vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1248616).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do not BUG when…

Record: SUSE-SU-2025:3725-1
Updated: 2026-11-02

OSVSUSE-SU-2025:3751-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
CVE-2025-38701: ext4: do not…

Record: SUSE-SU-2025:3751-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20560-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…

Record: SUSE-SU-2026:20560-1
Updated: 2026-11-02

OSVUSN-7909-1 No score

linux, linux-aws, linux-aws-5.15, linux-gcp-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle, linux-oracle-5.15, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
ATM drivers;
DRBD Distributed Replicated Block Device drivers;
Bus devices;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
PHY drivers;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
small TFT LCD display modules;
Trusted Execution Environment drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
EFI Variable file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
NFS page cache wrapper;
Memory management;
Networking subsytem;
UDP network protocol;
Perf events;
RCU subsystem;
Tracing infrastructure;
802.1Q VLAN protocol;
Appletalk network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
TLS protocol;
Wireless networking;
SoC audio core drivers;
USB sound devices; (CVE-2022-50070, CVE-2022-50327, CVE-2023-52935, CVE-2023-53074, CVE-2024-50061, CVE-2024-53068, CVE-2025-37925, CVE-2025-37968, CVE-2025-38095, CVE-2025-38148, CVE-2025-38165, CVE-2025-38335, CVE-2025-38347, CVE-2025-38468, CVE-2025-38470, CVE-2025-38473, CVE-2025-38474, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38487, CVE-2025-38488, CVE-2025-38494, CVE-2025-38495, CVE-2025-38497, CVE-2025-38499, CVE-2025-38502, CVE-2025-38527, CVE-2025-38528, CVE-2025-38529, CVE-2025-38530, CVE-2025-38535, CVE-2025-38538, CVE-2025-38539, CVE-2025-38548, CVE-2025-38550, CVE-2025-38553, CVE-2025-38555, CVE-2025-38563, CVE-2025-38565, CVE-2025-38569, CVE-2025-38572, CVE-2025-38574, CVE-2025-38576, CVE-2025-38577, CVE-2025-38578, CVE-2025-38579, CVE-2025-38581, CVE-2025-38583, CVE-2025-38601, CVE-2025-38602, CVE-2025-38604, CVE-2025-38608, CVE-2025-38609, CVE-2025-38612, CVE-2025-38614, CVE-2025-38622, CVE-2025-38623, CVE-2025-38624, CVE-2025-38630, CVE-2025-38634, CVE-2025-38635, CVE-2025-38639, CVE-2025-38645, CVE-2025-38650, CVE-2025-38652, CVE-2025-38663, CVE-2025-38664, CVE-2025-38666, CVE-2025-38668, CVE-2025-38670, CVE-2025-38671, CVE-2025-38676, CVE-2025-38677, CVE-2025-38678, CVE-2025-38680, CVE-2025-38681, CVE-2025-38683, CVE-2025-38684, CVE-2025-38685, CVE-2025-38687, CVE-2025-38691, CVE-2025-38693, CVE-2025-38694, CVE-2025-38695, CVE-2025-38696, CVE-2025-38697, CVE-2025-38698, CVE-2025-38699, CVE-2025-38700, CVE-2025-38701, CVE-2025-38706, CVE-2025-38707, CVE-2025-38708, CVE-2025-38711, CVE-2025-38712,…

Record: USN-7909-1
Updated: 2026-11-03

OSVUSN-7909-2 No score

linux-intel-iot-realtime, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
ATM drivers;
DRBD Distributed Replicated Block Device drivers;
Bus devices;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
PHY drivers;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
small TFT LCD display modules;
Trusted Execution Environment drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
EFI Variable file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
NFS page cache wrapper;
Memory management;
Networking subsytem;
UDP network protocol;
Perf events;
RCU subsystem;
Tracing infrastructure;
802.1Q VLAN protocol;
Appletalk network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
TLS protocol;
Wireless networking;
SoC audio core drivers;
USB sound devices; (CVE-2022-50070, CVE-2022-50327, CVE-2023-52935, CVE-2023-53074, CVE-2024-50061, CVE-2024-53068, CVE-2025-37925, CVE-2025-37968, CVE-2025-38095, CVE-2025-38148, CVE-2025-38165, CVE-2025-38335, CVE-2025-38347, CVE-2025-38468, CVE-2025-38470, CVE-2025-38473, CVE-2025-38474, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38487, CVE-2025-38488, CVE-2025-38494, CVE-2025-38495, CVE-2025-38497, CVE-2025-38499, CVE-2025-38502, CVE-2025-38527, CVE-2025-38528, CVE-2025-38529, CVE-2025-38530, CVE-2025-38535, CVE-2025-38538, CVE-2025-38539, CVE-2025-38548, CVE-2025-38550, CVE-2025-38553, CVE-2025-38555, CVE-2025-38563, CVE-2025-38565, CVE-2025-38569, CVE-2025-38572, CVE-2025-38574, CVE-2025-38576, CVE-2025-38577, CVE-2025-38578, CVE-2025-38579, CVE-2025-38581, CVE-2025-38583, CVE-2025-38601, CVE-2025-38602, CVE-2025-38604, CVE-2025-38608, CVE-2025-38609, CVE-2025-38612, CVE-2025-38614, CVE-2025-38622, CVE-2025-38623, CVE-2025-38624, CVE-2025-38630, CVE-2025-38634, CVE-2025-38635, CVE-2025-38639, CVE-2025-38645, CVE-2025-38650, CVE-2025-38652, CVE-2025-38663, CVE-2025-38664, CVE-2025-38666, CVE-2025-38668, CVE-2025-38670, CVE-2025-38671, CVE-2025-38676, CVE-2025-38677, CVE-2025-38678, CVE-2025-38680, CVE-2025-38681, CVE-2025-38683, CVE-2025-38684, CVE-2025-38685, CVE-2025-38687, CVE-2025-38691, CVE-2025-38693, CVE-2025-38694, CVE-2025-38695, CVE-2025-38696, CVE-2025-38697, CVE-2025-38698, CVE-2025-38699, CVE-2025-38700, CVE-2025-38701, CVE-2025-38706, CVE-2025-38707, CVE-2025-38708, CVE-2025-38711, CVE-2025-38712,…

Record: USN-7909-2
Updated: 2026-11-03

OSVUSN-7909-3 No score

linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
ATM drivers;
DRBD Distributed Replicated Block Device drivers;
Bus devices;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
PHY drivers;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
small TFT LCD display modules;
Trusted Execution Environment drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
EFI Variable file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
NFS page cache wrapper;
Memory management;
Networking subsytem;
UDP network protocol;
Perf events;
RCU subsystem;
Tracing infrastructure;
802.1Q VLAN protocol;
Appletalk network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
TLS protocol;
Wireless networking;
SoC audio core drivers;
USB sound devices; (CVE-2022-50070, CVE-2022-50327, CVE-2023-52935, CVE-2023-53074, CVE-2024-50061, CVE-2024-53068, CVE-2025-37925, CVE-2025-37968, CVE-2025-38095, CVE-2025-38148, CVE-2025-38165, CVE-2025-38335, CVE-2025-38347, CVE-2025-38468, CVE-2025-38470, CVE-2025-38473, CVE-2025-38474, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38487, CVE-2025-38488, CVE-2025-38494, CVE-2025-38495, CVE-2025-38497, CVE-2025-38499, CVE-2025-38502, CVE-2025-38527, CVE-2025-38528, CVE-2025-38529, CVE-2025-38530, CVE-2025-38535, CVE-2025-38538, CVE-2025-38539, CVE-2025-38548, CVE-2025-38550, CVE-2025-38553, CVE-2025-38555, CVE-2025-38563, CVE-2025-38565, CVE-2025-38569, CVE-2025-38572, CVE-2025-38574, CVE-2025-38576, CVE-2025-38577, CVE-2025-38578, CVE-2025-38579, CVE-2025-38581, CVE-2025-38583, CVE-2025-38601, CVE-2025-38602, CVE-2025-38604, CVE-2025-38608, CVE-2025-38609, CVE-2025-38612, CVE-2025-38614, CVE-2025-38622, CVE-2025-38623, CVE-2025-38624, CVE-2025-38630, CVE-2025-38634, CVE-2025-38635, CVE-2025-38639, CVE-2025-38645, CVE-2025-38650, CVE-2025-38652, CVE-2025-38663, CVE-2025-38664, CVE-2025-38666, CVE-2025-38668, CVE-2025-38670, CVE-2025-38671, CVE-2025-38676, CVE-2025-38677, CVE-2025-38678, CVE-2025-38680, CVE-2025-38681, CVE-2025-38683, CVE-2025-38684, CVE-2025-38685, CVE-2025-38687, CVE-2025-38691, CVE-2025-38693, CVE-2025-38694, CVE-2025-38695, CVE-2025-38696, CVE-2025-38697, CVE-2025-38698, CVE-2025-38699, CVE-2025-38700, CVE-2025-38701, CVE-2025-38706, CVE-2025-38707, CVE-2025-38708, CVE-2025-38711, CVE-2025-38712,…

Record: USN-7909-3
Updated: 2026-11-03

OSVUSN-7909-4 No score

linux-gcp, linux-gke, linux-gkeop vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
ATM drivers;
DRBD Distributed Replicated Block Device drivers;
Bus devices;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
PHY drivers;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
small TFT LCD display modules;
Trusted Execution Environment drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
EFI Variable file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
NFS page cache wrapper;
Memory management;
Networking subsytem;
UDP network protocol;
Perf events;
RCU subsystem;
Tracing infrastructure;
802.1Q VLAN protocol;
Appletalk network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
TLS protocol;
Wireless networking;
SoC audio core drivers;
USB sound devices; (CVE-2022-50070, CVE-2022-50327, CVE-2023-52935, CVE-2023-53074, CVE-2024-50061, CVE-2024-53068, CVE-2025-37925, CVE-2025-37968, CVE-2025-38095, CVE-2025-38148, CVE-2025-38165, CVE-2025-38335, CVE-2025-38347, CVE-2025-38468, CVE-2025-38470, CVE-2025-38473, CVE-2025-38474, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38487, CVE-2025-38488, CVE-2025-38494, CVE-2025-38495, CVE-2025-38497, CVE-2025-38499, CVE-2025-38502, CVE-2025-38527, CVE-2025-38528, CVE-2025-38529, CVE-2025-38530, CVE-2025-38535, CVE-2025-38538, CVE-2025-38539, CVE-2025-38548, CVE-2025-38550, CVE-2025-38553, CVE-2025-38555, CVE-2025-38563, CVE-2025-38565, CVE-2025-38569, CVE-2025-38572, CVE-2025-38574, CVE-2025-38576, CVE-2025-38577, CVE-2025-38578, CVE-2025-38579, CVE-2025-38581, CVE-2025-38583, CVE-2025-38601, CVE-2025-38602, CVE-2025-38604, CVE-2025-38608, CVE-2025-38609, CVE-2025-38612, CVE-2025-38614, CVE-2025-38622, CVE-2025-38623, CVE-2025-38624, CVE-2025-38630, CVE-2025-38634, CVE-2025-38635, CVE-2025-38639, CVE-2025-38645, CVE-2025-38650, CVE-2025-38652, CVE-2025-38663, CVE-2025-38664, CVE-2025-38666, CVE-2025-38668, CVE-2025-38670, CVE-2025-38671, CVE-2025-38676, CVE-2025-38677, CVE-2025-38678, CVE-2025-38680, CVE-2025-38681, CVE-2025-38683, CVE-2025-38684, CVE-2025-38685, CVE-2025-38687, CVE-2025-38691, CVE-2025-38693, CVE-2025-38694, CVE-2025-38695, CVE-2025-38696, CVE-2025-38697, CVE-2025-38698, CVE-2025-38699, CVE-2025-38700, CVE-2025-38701, CVE-2025-38706, CVE-2025-38707, CVE-2025-38708, CVE-2025-38711, CVE-2025-38712,…

Record: USN-7909-4
Updated: 2026-11-03

OSVUSN-7909-5 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
ATM drivers;
DRBD Distributed Replicated Block Device drivers;
Bus devices;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
PHY drivers;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
small TFT LCD display modules;
Trusted Execution Environment drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
EFI Variable file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
NFS page cache wrapper;
Memory management;
Networking subsytem;
UDP network protocol;
Perf events;
RCU subsystem;
Tracing infrastructure;
802.1Q VLAN protocol;
Appletalk network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
TLS protocol;
Wireless networking;
SoC audio core drivers;
USB sound devices; (CVE-2022-50070, CVE-2022-50327, CVE-2023-52935, CVE-2023-53074, CVE-2024-50061, CVE-2024-53068, CVE-2025-37925, CVE-2025-37968, CVE-2025-38095, CVE-2025-38148, CVE-2025-38165, CVE-2025-38335, CVE-2025-38347, CVE-2025-38468, CVE-2025-38470, CVE-2025-38473, CVE-2025-38474, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38487, CVE-2025-38488, CVE-2025-38494, CVE-2025-38495, CVE-2025-38497, CVE-2025-38499, CVE-2025-38502, CVE-2025-38527, CVE-2025-38528, CVE-2025-38529, CVE-2025-38530, CVE-2025-38535, CVE-2025-38538, CVE-2025-38539, CVE-2025-38548, CVE-2025-38550, CVE-2025-38553, CVE-2025-38555, CVE-2025-38563, CVE-2025-38565, CVE-2025-38569, CVE-2025-38572, CVE-2025-38574, CVE-2025-38576, CVE-2025-38577, CVE-2025-38578, CVE-2025-38579, CVE-2025-38581, CVE-2025-38583, CVE-2025-38601, CVE-2025-38602, CVE-2025-38604, CVE-2025-38608, CVE-2025-38609, CVE-2025-38612, CVE-2025-38614, CVE-2025-38622, CVE-2025-38623, CVE-2025-38624, CVE-2025-38630, CVE-2025-38634, CVE-2025-38635, CVE-2025-38639, CVE-2025-38645, CVE-2025-38650, CVE-2025-38652, CVE-2025-38663, CVE-2025-38664, CVE-2025-38666, CVE-2025-38668, CVE-2025-38670, CVE-2025-38671, CVE-2025-38676, CVE-2025-38677, CVE-2025-38678, CVE-2025-38680, CVE-2025-38681, CVE-2025-38683, CVE-2025-38684, CVE-2025-38685, CVE-2025-38687, CVE-2025-38691, CVE-2025-38693, CVE-2025-38694, CVE-2025-38695, CVE-2025-38696, CVE-2025-38697, CVE-2025-38698, CVE-2025-38699, CVE-2025-38700, CVE-2025-38701, CVE-2025-38706, CVE-2025-38707, CVE-2025-38708, CVE-2025-38711, CVE-2025-38712,…

Record: USN-7909-5
Updated: 2026-11-03

OSVUSN-7910-1 No score

linux-azure-fips vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this to expose sensitive information from the host OS. (CVE-2025-40300)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
ATM drivers;
DRBD Distributed Replicated Block Device drivers;
Bus devices;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
PHY drivers;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
small TFT LCD display modules;
Trusted Execution Environment drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
EFI Variable file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
NFS page cache wrapper;
Memory management;
Networking subsytem;
UDP network protocol;
Perf events;
RCU subsystem;
Tracing infrastructure;
802.1Q VLAN protocol;
Appletalk network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
TLS protocol;
Wireless networking;
SoC audio core drivers;
USB sound devices; (CVE-2022-50070, CVE-2022-50327, CVE-2023-52935, CVE-2023-53074, CVE-2024-50061, CVE-2024-53068, CVE-2025-37925, CVE-2025-37968, CVE-2025-38095, CVE-2025-38148, CVE-2025-38165, CVE-2025-38335, CVE-2025-38347, CVE-2025-38468, CVE-2025-38470, CVE-2025-38473, CVE-2025-38474, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38487, CVE-2025-38488, CVE-2025-38494, CVE-2025-38495, CVE-2025-38497, CVE-2025-38499, CVE-2025-38502, CVE-2025-38527, CVE-2025-38528, CVE-2025-38529, CVE-2025-38530, CVE-2025-38535, CVE-2025-38538, CVE-2025-38539, CVE-2025-38548, CVE-2025-38550, CVE-2025-38553, CVE-2025-38555, CVE-2025-38563, CVE-2025-38565, CVE-2025-38569, CVE-2025-38572, CVE-2025-38574, CVE-2025-38576, CVE-2025-38577, CVE-2025-38578, CVE-2025-38579, CVE-2025-38581, CVE-2025-38583, CVE-2025-38601, CVE-2025-38602, CVE-2025-38604, CVE-2025-38608, CVE-2025-38609, CVE-2025-38612, CVE-2025-38614, CVE-2025-38622, CVE-2025-38623, CVE-2025-38624, CVE-2025-38630, CVE-2025-38634, CVE-2025-38635, CVE-2025-38639, CVE-2025-38645, CVE-2025-38650, CVE-2025-38652, CVE-2025-38663, CVE-2025-38664, CVE-2025-38666, CVE-2025-38668, CVE-2025-38670, CVE-2025-38671, CVE-2025-38676,…

Record: USN-7910-1
Updated: 2026-11-03

OSVUSN-7910-2 No score

linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
ATM drivers;
DRBD Distributed Replicated Block Device drivers;
Bus devices;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
PHY drivers;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
small TFT LCD display modules;
Trusted Execution Environment drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
EFI Variable file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
NFS page cache wrapper;
Memory management;
Networking subsytem;
UDP network protocol;
Perf events;
RCU subsystem;
Tracing infrastructure;
802.1Q VLAN protocol;
Appletalk network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
TLS protocol;
Wireless networking;
SoC audio core drivers;
USB sound devices; (CVE-2022-50070, CVE-2022-50327, CVE-2023-52935, CVE-2023-53074, CVE-2024-50061, CVE-2024-53068, CVE-2025-37925, CVE-2025-37968, CVE-2025-38095, CVE-2025-38148, CVE-2025-38165, CVE-2025-38335, CVE-2025-38347, CVE-2025-38468, CVE-2025-38470, CVE-2025-38473, CVE-2025-38474, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38487, CVE-2025-38488, CVE-2025-38494, CVE-2025-38495, CVE-2025-38497, CVE-2025-38499, CVE-2025-38502, CVE-2025-38527, CVE-2025-38528, CVE-2025-38529, CVE-2025-38530, CVE-2025-38535, CVE-2025-38538, CVE-2025-38539, CVE-2025-38548, CVE-2025-38550, CVE-2025-38553, CVE-2025-38555, CVE-2025-38563, CVE-2025-38565, CVE-2025-38569, CVE-2025-38572, CVE-2025-38574, CVE-2025-38576, CVE-2025-38577, CVE-2025-38578, CVE-2025-38579, CVE-2025-38581, CVE-2025-38583, CVE-2025-38601, CVE-2025-38602, CVE-2025-38604, CVE-2025-38608, CVE-2025-38609, CVE-2025-38612, CVE-2025-38614, CVE-2025-38622, CVE-2025-38623, CVE-2025-38624, CVE-2025-38630, CVE-2025-38634, CVE-2025-38635, CVE-2025-38639, CVE-2025-38645, CVE-2025-38650, CVE-2025-38652, CVE-2025-38663, CVE-2025-38664, CVE-2025-38666, CVE-2025-38668, CVE-2025-38670, CVE-2025-38671, CVE-2025-38676,…

Record: USN-7910-2
Updated: 2026-11-03

OSVUSN-7933-1 No score

linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
ACPI drivers;
ATM drivers;
DRBD Distributed Replicated Block Device drivers;
Bus devices;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
PHY drivers;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
small TFT LCD display modules;
Trusted Execution Environment drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
EFI Variable file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
NFS page cache wrapper;
Memory management;
Networking subsytem;
UDP network protocol;
Perf events;
RCU subsystem;
Tracing infrastructure;
802.1Q VLAN protocol;
Appletalk network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
Netlink;
Packet sockets;
Network traffic control;
SCTP protocol;
TLS protocol;
VMware vSockets driver;
Wireless networking;
SoC audio core drivers;
USB sound devices; (CVE-2022-50070, CVE-2022-50327, CVE-2023-52593, CVE-2023-52935, CVE-2023-53074, CVE-2024-26700, CVE-2024-26896, CVE-2024-50061, CVE-2024-53068, CVE-2025-37925, CVE-2025-37968, CVE-2025-38095, CVE-2025-38148, CVE-2025-38165, CVE-2025-38335, CVE-2025-38347, CVE-2025-38468, CVE-2025-38470, CVE-2025-38473, CVE-2025-38474, CVE-2025-38476, CVE-2025-38477, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38487, CVE-2025-38488, CVE-2025-38494, CVE-2025-38495, CVE-2025-38497, CVE-2025-38499, CVE-2025-38502, CVE-2025-38527, CVE-2025-38528, CVE-2025-38529, CVE-2025-38530, CVE-2025-38535, CVE-2025-38538, CVE-2025-38539, CVE-2025-38548, CVE-2025-38550, CVE-2025-38553, CVE-2025-38555, CVE-2025-38563, CVE-2025-38565, CVE-2025-38569, CVE-2025-38572, CVE-2025-38574, CVE-2025-38576, CVE-2025-38577, CVE-2025-38578, CVE-2025-38579, CVE-2025-38581, CVE-2025-38583, CVE-2025-38601, CVE-2025-38602, CVE-2025-38604, CVE-2025-38608, CVE-2025-38609, CVE-2025-38612, CVE-2025-38614, CVE-2025-38617, CVE-2025-38618, CVE-2025-38622, CVE-2025-38623, CVE-2025-38624, CVE-2025-38630, CVE-2025-38634, CVE-2025-38635, CVE-2025-38639,…

Record: USN-7933-1
Updated: 2026-11-03

OSVUSN-7938-1 No score

linux-azure-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
DRBD Distributed Replicated Block Device drivers;
Bus devices;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
ARM SCMI message protocol;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
IOMMU subsystem;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PCCARD (PCMCIA/CardBus) bus subsystem;
PHY drivers;
Power supply drivers;
Voltage and Current Regulator drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
small TFT LCD display modules;
Trusted Execution Environment drivers;
TTY drivers;
UFS subsystem;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
Framebuffer layer;
AFS file system;
BTRFS file system;
File systems infrastructure;
EFI Variable file system;
Ext4 file system;
F2FS file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
SMB network file system;
Asynchronous Transfer Mode (ATM) subsystem;
BPF subsystem;
NFS page cache wrapper;
Memory management;
Networking subsytem;
UDP network protocol;
Perf events;
RCU subsystem;
Tracing infrastructure;
802.1Q VLAN protocol;
Appletalk network protocol;
Amateur Radio drivers;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Networking core;
HSR network protocol;
IPv4 networking;
IPv6 networking;
Multipath TCP;
Netfilter;
Network traffic control;
SCTP protocol;
TLS protocol;
Wireless networking;
SoC audio core drivers;
USB sound devices; (CVE-2022-49390, CVE-2022-50070, CVE-2022-50327, CVE-2023-52935, CVE-2023-53074, CVE-2024-47691, CVE-2024-50061, CVE-2024-50067, CVE-2024-53068, CVE-2024-53090, CVE-2024-53218, CVE-2025-21855, CVE-2025-37925, CVE-2025-37968, CVE-2025-38095, CVE-2025-38148, CVE-2025-38165, CVE-2025-38335, CVE-2025-38347, CVE-2025-38468, CVE-2025-38470, CVE-2025-38473, CVE-2025-38474, CVE-2025-38476, CVE-2025-38478, CVE-2025-38480, CVE-2025-38481, CVE-2025-38482, CVE-2025-38483, CVE-2025-38487, CVE-2025-38488, CVE-2025-38494, CVE-2025-38495, CVE-2025-38497, CVE-2025-38499, CVE-2025-38502, CVE-2025-38527, CVE-2025-38528, CVE-2025-38529, CVE-2025-38530, CVE-2025-38535, CVE-2025-38538, CVE-2025-38539, CVE-2025-38548, CVE-2025-38550, CVE-2025-38553, CVE-2025-38555, CVE-2025-38563, CVE-2025-38565, CVE-2025-38569, CVE-2025-38572, CVE-2025-38574, CVE-2025-38576, CVE-2025-38577, CVE-2025-38578, CVE-2025-38579, CVE-2025-38581, CVE-2025-38583, CVE-2025-38601, CVE-2025-38602, CVE-2025-38604, CVE-2025-38608, CVE-2025-38609, CVE-2025-38612, CVE-2025-38614, CVE-2025-38622, CVE-2025-38623, CVE-2025-38624, CVE-2025-38630, CVE-2025-38634, CVE-2025-38635, CVE-2025-38639, CVE-2025-38645,…

Record: USN-7938-1
Updated: 2026-11-03

OSVUSN-8028-1 No score

linux, linux-raspi vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system;…

Record: USN-8028-1
Updated: 2026-11-03

OSVUSN-8028-2 No score

linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-2
Updated: 2026-11-03

OSVUSN-8028-3 No score

linux-realtime, linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
ATA over ethernet (AOE) driver;
DRBD Distributed Replicated Block Device drivers;
Network block device driver;
Ublk userspace block driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Device frequency scaling framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
FPGA Framework;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
HW tracing;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
MCB driver;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Microchip PCI driver;
Intel Management Engine Interface driver;
PCI Endpoint Test driver;
TI TPS6594 PFSM driver;
VMware VMCI Driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
PCI subsystem;
Amlogic Meson DDR PMU;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
QCOM SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
USB core drivers;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
Renesas USBHS Controller drivers;
USB Type-C support driver;
USB Type-C Connector System Software Interface driver;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Backlight driver;
Framebuffer layer;
TSM Common Guest driver;
Virtio drivers;
Xen hypervisor drivers;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
Ext4 file system;
F2FS file system;
GFS2 file system;
JFFS2 file system;
JFS file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Overlay file system; …

Record: USN-8028-3
Updated: 2026-11-03

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` Azure Linux:3	before 6.6.96.2-1	6.6.96.2-1
`kernel` Azure Linux:2	before 5.15.200.1-1	5.15.200.1-1
`linux-lts` Alpaquita:23	6.1.147-r0 up to 6.1.151-r0	6.1.151-r0
`linux-lts` Alpaquita:25	6.12.41-r0 up to 6.12.44-r0	6.12.44-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`linux-buildinfo-5.4.0-225-tuxcare.els7-generic` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-buildinfo-5.4.0-225-tuxcare.els7-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-cloud-tools-5.4.0-225-tuxcare.els7` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-cloud-tools-5.4.0-225-tuxcare.els7-generic` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-cloud-tools-5.4.0-225-tuxcare.els7-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`linux-cloud-tools-common` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-doc` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-headers-5.4.0-225-tuxcare.els7` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-headers-5.4.0-225-tuxcare.els7-generic` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-headers-5.4.0-225-tuxcare.els7-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-image-unsigned-5.4.0-225-tuxcare.els7-generic` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-image-unsigned-5.4.0-225-tuxcare.els7-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-libc-dev` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-modules-5.4.0-225-tuxcare.els7-generic` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-modules-5.4.0-225-tuxcare.els7-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-modules-extra-5.4.0-225-tuxcare.els7-generic` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-source-5.4.0` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-tools-5.4.0-225-tuxcare.els7` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-tools-5.4.0-225-tuxcare.els7-generic` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-tools-5.4.0-225-tuxcare.els7-lowlatency` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-tools-common` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`linux-tools-host` TuxCare:Ubuntu:20.04 From an advisory covering 72 CVEs	before 5.4.0-225.245	5.4.0-225.245
`kernel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-cross-headers` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-uki-virt-addons` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-doc` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-headers` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-kvm` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-kvm` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`Kernel` Linux	before 5.10.241, 5.11.0 up to 5.15.190, 5.16.0 up to 6.1.149, 6.2.0 up to 6.6.103, 6.3.0 up to 6.12.44, 6.7.0 up to 6.16.4	5.10.2415.15.1906.1.1496.6.1036.12.446.16.4
`linux` Debian:12	before 6.1.153-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 38 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.153-1
`linux` Debian:13	before 6.12.48-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+1	6.12.48-1
`linux` Debian:14	before 6.16.5-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.113-16.12.115-16.12.115-26.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp1	6.16.5-1
`linux` Debian:11 From an advisory covering 331 CVEs	before 5.10.244-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 41 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.234-15.10.237-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.244-1
`linux-6.1` Debian:11 From an advisory covering 465 CVEs	before 6.1.153-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1 Show 6 moreShow less 6.1.128-1~deb11u16.1.129-1~deb11u16.1.137-1~deb11u16.1.140-1~deb11u16.1.147-1~deb11u16.1.148-1~deb11u1	6.1.153-1~deb11u1
`linux` Debian:13 From an advisory covering 126 CVEs	before 6.12.48-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+1	6.12.48-1
`linux` Debian:12 From an advisory covering 138 CVEs	before 6.1.153-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 38 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.153-1
`kernel` openEuler:24.03-LTS From an advisory covering 99 CVEs	before 6.6.0-138.0.0.119.oe2403	6.6.0-138.0.0.119.oe2403
`kernel` openEuler:24.03-LTS-SP1 From an advisory covering 99 CVEs	before 6.6.0-138.0.0.132.oe2403sp1	6.6.0-138.0.0.132.oe2403sp1
`kernel` openEuler:24.03-LTS-SP2 From an advisory covering 21 CVEs	before 6.6.0-139.0.0.133.oe2403sp2	6.6.0-139.0.0.133.oe2403sp2
`kernel` openEuler:22.03-LTS-SP4 From an advisory covering 58 CVEs	before 5.10.0-301.0.0.204.oe2203sp4	5.10.0-301.0.0.204.oe2203sp4
`linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`rootio-linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`rootio-linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`linux` Root:Debian:13	before 6.12.115-2.aikido.164	6.12.115-2.aikido.164
`rootio-linux` Root:Debian:13	before 6.12.115-2.aikido.164	6.12.115-2.aikido.164
`linux` Root:Ubuntu:22.04	before 5.15.0-203.213.aikido.119	5.15.0-203.213.aikido.119
`rootio-linux` Root:Ubuntu:22.04	before 5.15.0-203.213.aikido.119	5.15.0-203.213.aikido.119
`linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1.150600.12.32.1	6.4.0-150600.23.73.1.150600.12.32.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-livepatch-SLE15-SP6_Update_16` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 346 CVEs	before 1-150600.13.3.1	1-150600.13.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1.150600.12.32.1	6.4.0-150600.23.73.1.150600.12.32.1
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.23.73.1	6.4.0-150600.23.73.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 96 CVEs	before 6.4.0-150700.53.19.1	6.4.0-150700.53.19.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 96 CVEs	before 6.4.0-150700.53.19.1	6.4.0-150700.53.19.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 96 CVEs	before 6.4.0-150700.53.19.1.150700.17.13.1	6.4.0-150700.53.19.1.150700.17.13.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 96 CVEs	before 6.4.0-150700.53.19.1	6.4.0-150700.53.19.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 96 CVEs	before 6.4.0-150700.53.19.1	6.4.0-150700.53.19.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 96 CVEs	before 6.4.0-150700.53.19.1	6.4.0-150700.53.19.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 96 CVEs	before 6.4.0-150700.53.19.1	6.4.0-150700.53.19.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 96 CVEs	before 6.4.0-150700.53.19.1	6.4.0-150700.53.19.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 96 CVEs	before 6.4.0-150700.53.19.1	6.4.0-150700.53.19.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 96 CVEs	before 6.4.0-150700.53.19.1	6.4.0-150700.53.19.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 96 CVEs	before 6.4.0-150700.53.19.1	6.4.0-150700.53.19.1
`kernel-livepatch-SLE15-SP7_Update_5` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 96 CVEs	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 96 CVEs	before 6.4.0-150700.53.19.1	6.4.0-150700.53.19.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 96 CVEs	before 6.4.0-150700.53.19.1	6.4.0-150700.53.19.1
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 149 CVEs	before 6.4.0-15061.32.coco15sp6.1	6.4.0-15061.32.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 149 CVEs	before 6.4.0-15061.32.coco15sp6.1	6.4.0-15061.32.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 149 CVEs	before 6.4.0-15061.32.coco15sp6.1	6.4.0-15061.32.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 149 CVEs	before 6.4.0-15061.32.coco15sp6.1	6.4.0-15061.32.coco15sp6.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 196 CVEs	before 6.4.0-150700.20.15.2	6.4.0-150700.20.15.2
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 196 CVEs	before 6.4.0-150700.20.15.2	6.4.0-150700.20.15.2
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 196 CVEs	before 6.4.0-150700.20.15.1	6.4.0-150700.20.15.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 445 CVEs	before 6.4.0-150600.8.52.1	6.4.0-150600.8.52.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-35.1.21.12	6.4.0-35.1.21.12
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-35.1.21.12	6.4.0-35.1.21.12
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-35.1	6.4.0-35.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-37.1	6.4.0-37.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 346 CVEs	before 6.4.0-37.1	6.4.0-37.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-37.1	6.4.0-37.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 346 CVEs	before 6.4.0-37.1	6.4.0-37.1
`kernel-64kb` SUSE:Linux Micro 6.2 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-default` SUSE:Linux Micro 6.2 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-default-base` SUSE:Linux Micro 6.2 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1.160000.2.4	6.12.0-160000.6.1.160000.2.4
`kernel-rt` SUSE:Linux Micro 6.2 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-source` SUSE:Linux Micro 6.2 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-64kb` SUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-default` SUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-default-base` SUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1.160000.2.4	6.12.0-160000.6.1.160000.2.4
`kernel-docs` SUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-obs-qa` SUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-source` SUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-syms` SUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-64kb` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-default` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1.160000.2.4	6.12.0-160000.6.1.160000.2.4
`kernel-docs` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-obs-qa` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-source` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-livepatch-SLE15-SP7-RT_Update_5` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 94 CVEs	before 1-150700.1.3.1	1-150700.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 94 CVEs	before 6.4.0-150700.7.19.1	6.4.0-150700.7.19.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 94 CVEs	before 6.4.0-150700.7.19.1	6.4.0-150700.7.19.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 94 CVEs	before 6.4.0-150700.7.19.1	6.4.0-150700.7.19.1
`kernel-livepatch-SLE15-SP6-RT_Update_16` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 346 CVEs	before 1-150600.1.3.1	1-150600.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 346 CVEs	before 6.4.0-150600.10.55.1	6.4.0-150600.10.55.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	None known
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	None known
`linux` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	None known
`linux-aws` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1097.104~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	5.15.0-1097.104~20.04.1
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1102.111~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	5.15.0-1102.111~20.04.1
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-bluefield` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 45 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92	None known
`linux-gcp` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1097.106~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1	5.15.0-1097.106~20.04.1
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-163.173~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-163.173~20.04.1
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-ibm` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8 Show 45 moreShow less 5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71	None known
`linux-ibm-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1091.94~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 41 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.1	5.15.0-1091.94~20.04.1
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-intel-iotg-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1092.98~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 45 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1	5.15.0-1092.98~20.04.1
`linux-iot` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11 Show 45 moreShow less 5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1035.365.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1042.435.4.0-1043.445.4.0-1044.455.4.0-1045.465.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1060.635.4.0-1061.645.4.0-1062.65	None known
`linux-kvm` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78	None known
`linux-lowlatency-hwe-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-163.173~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-163.173~20.04.1
`linux-nvidia-tegra-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1049.49~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 20 moreShow less 5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.1	5.15.0-1049.49~20.04.1
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1034.365.4.0-1035.385.4.0-1037.405.4.0-1038.415.4.0-1039.425.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1045.495.4.0-1046.505.4.0-1048.525.4.0-1049.535.4.0-1052.565.4.0-1053.575.4.0-1054.585.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1061.655.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1066.715.4.0-1067.725.4.0-1069.755.4.0-1070.765.4.0-1071.775.4.0-1073.795.4.0-1076.83	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1094.100~20.04.1, plus listed versions 5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1	5.15.0-1094.100~20.04.1
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1007.75.4.0-1008.85.4.0-1011.115.4.0-1012.125.4.0-1013.13 Show 45 moreShow less 5.4.0-1015.155.4.0-1016.175.4.0-1018.205.4.0-1019.215.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1029.325.4.0-1030.335.4.0-1032.355.4.0-1033.365.4.0-1034.375.4.0-1035.385.4.0-1036.395.4.0-1038.415.4.0-1041.455.4.0-1042.465.4.0-1043.475.4.0-1044.485.4.0-1045.495.4.0-1046.505.4.0-1047.525.4.0-1048.535.4.0-1050.565.4.0-1052.585.4.0-1053.605.4.0-1055.625.4.0-1056.635.4.0-1058.655.4.0-1059.675.4.0-1060.685.4.0-1062.705.4.0-1065.755.4.0-1066.765.4.0-1068.785.4.0-1069.795.4.0-1070.805.4.0-1071.815.4.0-1073.845.4.0-1074.855.4.0-1077.885.4.0-1078.89	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1092.96~20.04.1, plus listed versions 5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1 Show 45 moreShow less 5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.15.15.0-1060.64~20.04.15.15.0-1061.65~20.04.15.15.0-1062.66~20.04.15.15.0-1063.67~20.04.15.15.0-1064.68~20.04.15.15.0-1065.69~20.04.15.15.0-1066.70~20.04.15.15.0-1067.71~20.04.15.15.0-1068.72~20.04.15.15.0-1069.73~20.04.15.15.0-1070.74~20.04.15.15.0-1071.75~20.04.15.15.0-1072.76~20.04.1	5.15.0-1092.96~20.04.1
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-xilinx-zynqmp` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1020.245.4.0-1021.255.4.0-1022.265.4.0-1023.275.4.0-1024.28 Show 45 moreShow less 5.4.0-1025.295.4.0-1026.305.4.0-1027.315.4.0-1028.325.4.0-1029.335.4.0-1030.345.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1035.395.4.0-1036.405.4.0-1037.415.4.0-1038.425.4.0-1039.435.4.0-1040.445.4.0-1041.455.4.0-1042.465.4.0-1043.475.4.0-1044.485.4.0-1045.495.4.0-1046.505.4.0-1047.515.4.0-1048.525.4.0-1049.535.4.0-1050.545.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1054.585.4.0-1055.595.4.0-1056.605.4.0-1058.625.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.76	None known
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:20.04:LTS	All versions, plus listed versions 5.4.0-1021.21+fips25.4.0-1069.73+fips25.4.0-1071.76+fips15.4.0-1072.77+fips15.4.0-1073.78+fips1 Show 45 moreShow less 5.4.0-1078.84+fips15.4.0-1080.87+fips15.4.0-1081.88+fips15.4.0-1083.90+fips15.4.0-1085.92+fips15.4.0-1086.93+fips15.4.0-1088.96+fips15.4.0-1089.97+fips15.4.0-1092.100+fips15.4.0-1093.101+fips15.4.0-1094.102+fips15.4.0-1096.104+fips15.4.0-1099.107+fips15.4.0-1100.108+fips15.4.0-1101.109+fips15.4.0-1102.110+fips15.4.0-1103.111+fips15.4.0-1104.112+fips15.4.0-1105.113+fips15.4.0-1106.114+fips15.4.0-1107.115+fips15.4.0-1108.116+fips15.4.0-1109.118+fips15.4.0-1110.119+fips15.4.0-1111.120+fips15.4.0-1112.121+fips15.4.0-1113.123+fips15.4.0-1114.124+fips15.4.0-1116.126+fips15.4.0-1117.127+fips15.4.0-1118.128+fips15.4.0-1119.129+fips15.4.0-1120.130+fips15.4.0-1121.131+fips15.4.0-1122.132+fips15.4.0-1123.133+fips15.4.0-1124.134+fips15.4.0-1125.135+fips15.4.0-1126.136+fips25.4.0-1127.137+fips15.4.0-1128.138+fips15.4.0-1129.139+fips15.4.0-1130.140+fips15.4.0-1131.141+fips15.4.0-1132.142+fips1	None known
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:20.04:LTS	All versions, plus listed versions 5.4.0-1022.22+fips15.4.0-1073.76+fips15.4.0-1074.77+fips15.4.0-1076.79+fips15.4.0-1078.81+fips1 Show 45 moreShow less 5.4.0-1080.83+fips15.4.0-1083.87+fips15.4.0-1085.90+fips15.4.0-1086.91+fips15.4.0-1089.94+fips15.4.0-1090.95+fips15.4.0-1091.96+fips15.4.0-1094.100+fips15.4.0-1095.101+fips15.4.0-1098.104+fips15.4.0-1100.106+fips15.4.0-1101.107+fips15.4.0-1103.109+fips15.4.0-1104.110+fips15.4.0-1105.111+fips15.4.0-1106.112+fips15.4.0-1107.113+fips15.4.0-1108.114+fips15.4.0-1109.115+fips15.4.0-1110.116+fips15.4.0-1111.117+fips15.4.0-1112.118+fips15.4.0-1113.119+fips15.4.0-1114.120+fips15.4.0-1115.122+fips15.4.0-1116.123+fips15.4.0-1117.124+fips15.4.0-1118.125+fips15.4.0-1119.126+fips15.4.0-1121.128+fips15.4.0-1122.129+fips15.4.0-1123.130+fips15.4.0-1124.131+fips15.4.0-1126.133+fips15.4.0-1127.134+fips15.4.0-1128.135+fips15.4.0-1129.136+fips15.4.0-1130.137+fips15.4.0-1131.138+fips15.4.0-1132.139+fips15.4.0-1133.140+fips15.4.0-1134.141+fips15.4.0-1135.142+fips15.4.0-1136.143+fips15.4.0-1137.144+fips1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:20.04:LTS	All versions, plus listed versions 5.4.0-1026.305.4.0-1028.325.4.0-1031.365.4.0-1032.375.4.0-1033.38 Show 45 moreShow less 5.4.0-1034.405.4.0-1035.415.4.0-1036.425.4.0-1037.435.4.0-1038.445.4.0-1040.465.4.0-1041.475.4.0-1042.485.4.0-1043.495.4.0-1045.515.4.0-1046.525.4.0-1047.535.4.0-1048.545.4.0-1049.555.4.0-1051.575.4.0-1054.615.4.0-1056.645.4.0-1057.655.4.0-1059.675.4.0-1060.685.4.0-1061.695.4.0-1062.705.4.0-1064.735.4.0-1065.745.4.0-1068.775.4.0-1069.785.4.0-1070.795.4.0-1072.815.4.0-1073.825.4.0-1074.835.4.0-1075.845.4.0-1076.855.4.0-1077.865.4.0-1078.875.4.0-1079.885.4.0-1080.895.4.0-1081.905.4.0-1082.915.4.0-1083.925.4.0-1084.935.4.0-1085.945.4.0-1086.955.4.0-1087.965.4.0-1088.975.4.0-1089.98	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:20.04:LTS	All versions, plus listed versions 5.4.0-1021.21+fips15.4.0-1067.71~20.04.15.4.0-1069.73+fips25.4.0-1071.75+fips15.4.0-1073.78+fips1 Show 45 moreShow less 5.4.0-1075.80+fips15.4.0-1078.84+fips15.4.0-1080.87+fips15.4.0-1081.88+fips15.4.0-1086.94+fips15.4.0-1087.95+fips15.4.0-1089.97+fips15.4.0-1092.101+fips15.4.0-1093.102+fips15.4.0-1096.105+fips15.4.0-1097.106+fips15.4.0-1098.107+fips15.4.0-1100.109+fips15.4.0-1101.110+fips15.4.0-1102.111+fips15.4.0-1103.112+fips15.4.0-1104.113+fips15.4.0-1105.114+fips15.4.0-1106.115+fips15.4.0-1107.116+fips15.4.0-1108.117+fips15.4.0-1109.118+fips15.4.0-1110.119+fips15.4.0-1111.120+fips15.4.0-1112.121+fips15.4.0-1113.122+fips15.4.0-1115.124+fips15.4.0-1116.125+fips15.4.0-1117.126+fips15.4.0-1118.127+fips15.4.0-1120.129+fips15.4.0-1121.130+fips15.4.0-1122.131+fips15.4.0-1124.133+fips15.4.0-1125.134+fips15.4.0-1126.135+fips15.4.0-1127.136+fips15.4.0-1128.137+fips15.4.0-1129.138+fips15.4.0-1130.139+fips15.4.0-1131.140+fips15.4.0-1132.141+fips15.4.0-1133.142+fips15.4.0-1134.143+fips15.4.0-1135.144+fips1	None known
`linux` Ubuntu:22.04:LTS	before 5.15.0-163.173, plus listed versions 5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23 Show 45 moreShow less 5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115	5.15.0-163.173
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws` Ubuntu:22.04:LTS	before 5.15.0-1097.104, plus listed versions 5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7 Show 45 moreShow less 5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71	5.15.0-1097.104
`dtb-aarch64` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-64kb` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-default` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-default-base` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1.160000.2.4	6.12.0-160000.6.1.160000.2.4
`kernel-docs` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-kvmsmall` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-obs-build` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-obs-qa` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-rt` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-source` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-syms` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-zfcpdump` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	14mb1v45h/CVE-2025-38676	2025-08-27

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	CVE List, EUVD, NVD
Nov 3, 2026	facts	OSV
Nov 3, 2026	affected	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-38676 is a high vulnerability (CVSS 7.8) in Debian Linux, published August 26, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in kernel 6.6.96.2-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 234 package rows, 1,404 versions, 3,296 references and the rest of 35 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 13 source records.