Every CVE Search/ Get API key

CVE-2025-39948

ice: fix Rx page leak on multi-buffer frames

9.8 CriticalFix available

In the Linux kernel, the following vulnerability has been resolved:

ice: fix Rx page leak on multi-buffer frames

The ice_put_rx_mbuf() function handles calling ice_put_rx_buf() for each buffer in the current frame. This function was introduced as part of handling multi-buffer XDP support in the ice driver.

It works by iterating over the buffers from first_desc up to 1 plus the total number of fragments in the frame, cached from before the XDP program was executed.

If the hardware posts a descriptor with a size of 0, the logic used in ice_put_rx_mbuf() breaks. Such descriptors get skipped and don't get added as fragments in ice_add_xdp_frag. Since the buffer isn't counted as a fragment, we do not iterate over it in ice_put_rx_mbuf(), and thus we don't call ice_put_rx_buf().

Because we don't call ice_put_rx_buf(), we don't attempt to re-use the page or free it. This leaves a stale page in the ring, as we don't increment next_to_alloc.

The ice_reuse_rx_page() assumes that the next_to_alloc has been incremented properly, and that it always points to a buffer with a NULL page. Since this function doesn't check, it will happily recycle a page over the top of the next_to_alloc buffer, losing track of the old page.

Note that this leak only occurs for multi-buffer frames. The ice_put_rx_mbuf() function always handles at least one buffer, so a single-buffer frame will always get handled correctly. It is not clear precisely why the hardware hands us descriptors with a size of 0 sometimes, but it happens somewhat regularly with "jumbo frames" used by 9K MTU.

To fix ice_put_rx_mbuf(), we need to make sure to call ice_put_rx_buf() on all buffers between first_desc and next_to_clean. Borrow the logic of a similar function in i40e used for this same purpose. Use the same logic also in ice_get_pgcnts().

Instead of iterating over just the number of fragments, use a loop which iterates until the current index reaches to the next_to_clean element just past the current frame. Unlike i40e, the ice_put_rx_mbuf() function does call ice_put_rx_buf() on the last buffer of the frame indicating the end of packet.

For non-linear (multi-buffer) frames, we need to take care when adjusting the pagecnt_bias. An XDP program might release fragments from the tail of the frame, in which case that fragment page is already released. Only update the pagecnt_bias for the first descriptor and fragments still remaining post-XDP program. Take care to only access the shared info for fragmented buffers, as this avoids a significant cache miss.

The xdp_xmit value only needs to be updated if an XDP program is run, and only once per packet. Drop the xdp_xmit pointer argument from ice_put_rx_mbuf(). Instead, set xdp_xmit in the ice_clean_rx_irq() function directly. This avoids needing to pass the argument and avoids an extra bit-wise OR for each buffer in the frame.

Move the increment of the ntc local variable to ensure its updated before all calls to ice_get_pgcnts() or ice_put_rx_mbuf(), as the loop logic requires the index of the element just after the current frame.

Now that we use an index pointer in the ring to identify the packet, we no longer need to track or cache the number of fragments in the rx_ring.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.40%Up 0.4 points since Oct 4, 2025
90%50%10%1%

What each source reports

CVE List Score used 9.8

ice: fix Rx page leak on multi-buffer frames

In the Linux kernel, the following vulnerability has been resolved:

ice: fix Rx page leak on multi-buffer frames

The ice_put_rx_mbuf() function handles calling ice_put_rx_buf() for each buffer in the current frame. This function was introduced as part of handling multi-buffer XDP support in the ice driver.

It works by iterating over the buffers from first_desc up to 1 plus the total number of fragments in the frame, cached from before the XDP program was executed.

If the hardware posts a descriptor with a size of 0, the logic used in ice_put_rx_mbuf() breaks. Such descriptors get skipped and don't get added as fragments in ice_add_xdp_frag. Since the buffer isn't counted as a fragment, we do not iterate over it in ice_put_rx_mbuf(), and thus we don't call ice_put_rx_buf().

Because we don't call ice_put_rx_buf(), we don't attempt to re-use the page or free it. This leaves a stale page in the ring, as we don't increment next_to_alloc.

The ice_reuse_rx_page() assumes that the next_to_alloc has been incremented properly, and that it always points to a buffer with a NULL page. Since this function doesn't check, it will happily recycle a page over the top of the next_to_alloc buffer, losing track of the old page.

Note that this leak only occurs for multi-buffer frames. The ice_put_rx_mbuf() function always handles at least one buffer, so a single-buffer frame will always get handled correctly. It is not clear precisely why the hardware hands us descriptors with a size of 0 sometimes, but it happens somewhat regularly with "jumbo frames" used by 9K MTU.

To fix ice_put_rx_mbuf(), we need to make sure to call ice_put_rx_buf() on all buffers between first_desc and next_to_clean. Borrow the logic of a similar function in i40e used for this same purpose. Use the same logic also in ice_get_pgcnts().

Instead of iterating over just the number of fragments, use a loop which iterates until the current index reaches to the next_to_clean element just past the current frame. Unlike i40e, the ice_put_rx_mbuf() function does call ice_put_rx_buf() on the last buffer of the frame indicating the end of packet.

For non-linear (multi-buffer) frames, we need to take care when adjusting the pagecnt_bias. An XDP program might release fragments from the tail of the frame, in which case that fragment page is already released. Only update the pagecnt_bias for the first descriptor and fragments still remaining post-XDP program. Take care to only access the shared info for fragmented buffers, as this avoids a significant cache miss.

The xdp_xmit value only needs to be updated if an XDP program is run, and only once per packet. Drop the xdp_xmit pointer argument from ice_put_rx_mbuf(). Instead, set xdp_xmit in the ice_clean_rx_irq() function directly. This avoids needing to pass the argument and avoids an extra bit-wise OR for each buffer in the frame.

Move the increment of the ntc local variable to ensure its updated before all calls to ice_get_pgcnts() or ice_put_rx_mbuf(), as the loop logic requires the index of the element just after the current frame.

Now that we use an index pointer in the ring to identify the packet, we no longer need to track or cache the number of fragments in the rx_ring.

Record
CVE-2025-39948
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2025-32395 9.8

In the Linux kernel, the following vulnerability has been resolved:

ice: fix Rx page leak on multi-buffer frames

The ice_put_rx_mbuf() function handles calling ice_put_rx_buf() for each buffer in the current frame. This function was introduced as part of handling multi-buffer XDP support in the ice driver.

It works by iterating over the buffers from first_desc up to 1 plus the total number of fragments in the frame, cached from before the XDP program was executed.

If the hardware posts a descriptor with a size of 0, the logic used in ice_put_rx_mbuf() breaks. Such descriptors get skipped and don't get added as fragments in ice_add_xdp_frag. Since the buffer isn't counted as a fragment, we do not iterate over it in ice_put_rx_mbuf(), and thus we don't call ice_put_rx_buf().

Because we don't call ice_put_rx_buf(), we don't attempt to re-use the page or free it. This leaves a stale page in the ring, as we don't increment next_to_alloc.

The ice_reuse_rx_page() assumes that the next_to_alloc has been incremented properly, and that it always points to a buffer with a NULL page. Since this function doesn't check, it will happily recycle a page over the top of the next_to_alloc buffer, losing track of the old page.

Note that this leak only occurs for multi-buffer frames. The ice_put_rx_mbuf() function always handles at least one buffer, so a single-buffer frame will always get handled correctly. It is not clear precisely why the hardware hands us descriptors with a size of 0 sometimes, but it happens somewhat regularly with "jumbo frames" used by 9K MTU.

To fix ice_put_rx_mbuf(), we need to make sure to call ice_put_rx_buf() on all buffers between first_desc and next_to_clean. Borrow the logic of a similar function in i40e used for this same purpose. Use the same logic also in ice_get_pgcnts().

Instead of iterating over just the number of fragments, use a loop which iterates until the current index reaches to the next_to_clean element just past the current frame. Unlike i40e, the ice_put_rx_mbuf() function does call ice_put_rx_buf() on the last buffer of the frame indicating the end of packet.

For non-linear (multi-buffer) frames, we need to take care when adjusting the pagecnt_bias. An XDP program might release fragments from the tail of the frame, in which case that fragment page is already released. Only update the pagecnt_bias for the first descriptor and fragments still remaining post-XDP program. Take care to only access the shared info for fragmented buffers, as this avoids a significant cache miss.

The xdp_xmit value only needs to be updated if an XDP program is run, and only once per packet. Drop the xdp_xmit pointer argument from ice_put_rx_mbuf(). Instead, set xdp_xmit in the ice_clean_rx_irq() function directly. This avoids needing to pass the argument and avoids an extra bit-wise OR for each buffer in the frame.

Move the increment of the ntc local variable to ensure its updated before all calls to ice_get_pgcnts() or ice_put_rx_mbuf(), as the loop logic requires the index of the element just after the current frame.

Now that we use an index pointer in the ring to identify the packet, we no longer need to track or cache the number of fragments in the rx_ring.

Record
EUVD-2025-32395
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-7v58-mp27-j7rx 5.5

In the Linux kernel, the following vulnerability has been resolved: ice: fix Rx page leak on...

In the Linux kernel, the following vulnerability has been resolved:

ice: fix Rx page leak on multi-buffer frames

The ice_put_rx_mbuf() function handles calling ice_put_rx_buf() for each buffer in the current frame. This function was introduced as part of handling multi-buffer XDP support in the ice driver.

It works by iterating over the buffers from first_desc up to 1 plus the total number of fragments in the frame, cached from before the XDP program was executed.

If the hardware posts a descriptor with a size of 0, the logic used in ice_put_rx_mbuf() breaks. Such descriptors get skipped and don't get added as fragments in ice_add_xdp_frag. Since the buffer isn't counted as a fragment, we do not iterate over it in ice_put_rx_mbuf(), and thus we don't call ice_put_rx_buf().

Because we don't call ice_put_rx_buf(), we don't attempt to re-use the page or free it. This leaves a stale page in the ring, as we don't increment next_to_alloc.

The ice_reuse_rx_page() assumes that the next_to_alloc has been incremented properly, and that it always points to a buffer with a NULL page. Since this function doesn't check, it will happily recycle a page over the top of the next_to_alloc buffer, losing track of the old page.

Note that this leak only occurs for multi-buffer frames. The ice_put_rx_mbuf() function always handles at least one buffer, so a single-buffer frame will always get handled correctly. It is not clear precisely why the hardware hands us descriptors with a size of 0 sometimes, but it happens somewhat regularly with "jumbo frames" used by 9K MTU.

To fix ice_put_rx_mbuf(), we need to make sure to call ice_put_rx_buf() on all buffers between first_desc and next_to_clean. Borrow the logic of a similar function in i40e used for this same purpose. Use the same logic also in ice_get_pgcnts().

Instead of iterating over just the number of fragments, use a loop which iterates until the current index reaches to the next_to_clean element just past the current frame. Unlike i40e, the ice_put_rx_mbuf() function does call ice_put_rx_buf() on the last buffer of the frame indicating the end of packet.

For non-linear (multi-buffer) frames, we need to take care when adjusting the pagecnt_bias. An XDP program might release fragments from the tail of the frame, in which case that fragment page is already released. Only update the pagecnt_bias for the first descriptor and fragments still remaining post-XDP program. Take care to only access the shared info for fragmented buffers, as this avoids a significant cache miss.

The xdp_xmit value only needs to be updated if an XDP program is run, and only once per packet. Drop the xdp_xmit pointer argument from ice_put_rx_mbuf(). Instead, set xdp_xmit in the ice_clean_rx_irq() function directly. This avoids needing to pass the argument and avoids an extra bit-wise OR for each buffer in the frame.

Move the increment of the ntc local variable to ensure its updated before all calls to ice_get_pgcnts() or ice_put_rx_mbuf(), as the loop logic requires the index of the element just after the current frame.

Now that we use an index pointer in the ring to identify the packet, we no longer need to track or cache the number of fragments in the rx_ring.

Record
GHSA-7v58-mp27-j7rx
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-401
Updated
2026-11-02
NVD 9.8

In the Linux kernel, the following vulnerability has been resolved:

ice: fix Rx page leak on multi-buffer frames

The ice_put_rx_mbuf() function handles calling ice_put_rx_buf() for each buffer in the current frame. This function was introduced as part of handling multi-buffer XDP support in the ice driver.

It works by iterating over the buffers from first_desc up to 1 plus the total number of fragments in the frame, cached from before the XDP program was executed.

If the hardware posts a descriptor with a size of 0, the logic used in ice_put_rx_mbuf() breaks. Such descriptors get skipped and don't get added as fragments in ice_add_xdp_frag. Since the buffer isn't counted as a fragment, we do not iterate over it in ice_put_rx_mbuf(), and thus we don't call ice_put_rx_buf().

Because we don't call ice_put_rx_buf(), we don't attempt to re-use the page or free it. This leaves a stale page in the ring, as we don't increment next_to_alloc.

The ice_reuse_rx_page() assumes that the next_to_alloc has been incremented properly, and that it always points to a buffer with a NULL page. Since this function doesn't check, it will happily recycle a page over the top of the next_to_alloc buffer, losing track of the old page.

Note that this leak only occurs for multi-buffer frames. The ice_put_rx_mbuf() function always handles at least one buffer, so a single-buffer frame will always get handled correctly. It is not clear precisely why the hardware hands us descriptors with a size of 0 sometimes, but it happens somewhat regularly with "jumbo frames" used by 9K MTU.

To fix ice_put_rx_mbuf(), we need to make sure to call ice_put_rx_buf() on all buffers between first_desc and next_to_clean. Borrow the logic of a similar function in i40e used for this same purpose. Use the same logic also in ice_get_pgcnts().

Instead of iterating over just the number of fragments, use a loop which iterates until the current index reaches to the next_to_clean element just past the current frame. Unlike i40e, the ice_put_rx_mbuf() function does call ice_put_rx_buf() on the last buffer of the frame indicating the end of packet.

For non-linear (multi-buffer) frames, we need to take care when adjusting the pagecnt_bias. An XDP program might release fragments from the tail of the frame, in which case that fragment page is already released. Only update the pagecnt_bias for the first descriptor and fragments still remaining post-XDP program. Take care to only access the shared info for fragmented buffers, as this avoids a significant cache miss.

The xdp_xmit value only needs to be updated if an XDP program is run, and only once per packet. Drop the xdp_xmit pointer argument from ice_put_rx_mbuf(). Instead, set xdp_xmit in the ice_clean_rx_irq() function directly. This avoids needing to pass the argument and avoids an extra bit-wise OR for each buffer in the frame.

Move the increment of the ntc local variable to ensure its updated before all calls to ice_get_pgcnts() or ice_put_rx_mbuf(), as the loop logic requires the index of the element just after the current frame.

Now that we use an index pointer in the ring to identify the packet, we no longer need to track or cache the number of fragments in the rx_ring.

Record
CVE-2025-39948
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-401
Updated
2026-11-02
OSVBELL-CVE-2025-39948 5.5
Record
BELL-CVE-2025-39948
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 9.8

ice: fix Rx page leak on multi-buffer frames

In the Linux kernel, the following vulnerability has been resolved:

ice: fix Rx page leak on multi-buffer frames

The ice_put_rx_mbuf() function handles calling ice_put_rx_buf() for each buffer in the current frame. This function was introduced as part of handling multi-buffer XDP support in the ice driver.

It works by iterating over the buffers from first_desc up to 1 plus the total number of fragments in the frame, cached from before the XDP program was executed.

If the hardware posts a descriptor with a size of 0, the logic used in ice_put_rx_mbuf() breaks. Such descriptors get skipped and don't get added as fragments in ice_add_xdp_frag. Since the buffer isn't counted as a fragment, we do not iterate over it in ice_put_rx_mbuf(), and thus we don't call ice_put_rx_buf().

Because we don't call ice_put_rx_buf(), we don't attempt to re-use the page or free it. This leaves a stale page in the ring, as we don't increment next_to_alloc.

The ice_reuse_rx_page() assumes that the next_to_alloc has been incremented properly, and that it always points to a buffer with a NULL page. Since this function doesn't check, it will happily recycle a page over the top of the next_to_alloc buffer, losing track of the old page.

Note that this leak only occurs for multi-buffer frames. The ice_put_rx_mbuf() function always handles at least one buffer, so a single-buffer frame will always get handled correctly. It is not clear precisely why the hardware hands us descriptors with a size of 0 sometimes, but it happens somewhat regularly with "jumbo frames" used by 9K MTU.

To fix ice_put_rx_mbuf(), we need to make sure to call ice_put_rx_buf() on all buffers between first_desc and next_to_clean. Borrow the logic of a similar function in i40e used for this same purpose. Use the same logic also in ice_get_pgcnts().

Instead of iterating over just the number of fragments, use a loop which iterates until the current index reaches to the next_to_clean element just past the current frame. Unlike i40e, the ice_put_rx_mbuf() function does call ice_put_rx_buf() on the last buffer of the frame indicating the end of packet.

For non-linear (multi-buffer) frames, we need to take care when adjusting the pagecnt_bias. An XDP program might release fragments from the tail of the frame, in which case that fragment page is already released. Only update the pagecnt_bias for the first descriptor and fragments still remaining post-XDP program. Take care to only access the shared info for fragmented buffers, as this avoids a significant cache miss.

The xdp_xmit value only needs to be updated if an XDP program is run, and only once per packet. Drop the xdp_xmit pointer argument from ice_put_rx_mbuf(). Instead, set xdp_xmit in the ice_clean_rx_irq() function directly. This avoids needing to pass the argument and avoids an extra bit-wise OR for each buffer in the frame.

Move the increment of the ntc local variable to ensure its updated before all calls to ice_get_pgcnts() or ice_put_rx_mbuf(), as the loop logic requires the index of the element just after the current frame.

Now that we use an index pointer in the ring to identify the packet, we no longer need to track or cache the number of fragments in the rx_ring.

Record
CVE-2025-39948
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 32 moreShow less
OSVDEBIAN-CVE-2025-39948 5.5

In the Linux kernel, the following vulnerability has been resolved: ice: fix Rx page leak on multi-buffer frames The ice_put_rx_mbuf() function handles calling ice_put_rx_buf() for each buffer in the current frame. This function was introduced as part of handling multi-buffer XDP support in the ice driver. It works by iterating over the buffers from first_desc up to 1 plus the total number of fragments in the frame, cached from before the XDP program was executed. If the hardware posts a descriptor with a size of 0, the logic used in ice_put_rx_mbuf() breaks. Such descriptors get skipped and don't get added as fragments in ice_add_xdp_frag. Since the buffer isn't counted as a fragment, we do not iterate over it in ice_put_rx_mbuf(), and thus we don't call ice_put_rx_buf(). Because we don't call ice_put_rx_buf(), we don't attempt to re-use the page or free it. This leaves a stale page in the ring, as we don't increment next_to_alloc. The ice_reuse_rx_page() assumes that the next_to_alloc has been incremented properly, and that it always points to a buffer with a NULL page. Since this function doesn't check, it will happily recycle a page over the top of the next_to_alloc buffer, losing track of the old page. Note that this leak only occurs for multi-buffer frames. The ice_put_rx_mbuf() function always handles at least one buffer, so a single-buffer frame will always get handled correctly. It is not clear precisely why the hardware hands us descriptors with a size of 0 sometimes, but it happens somewhat regularly with "jumbo frames" used by 9K MTU. To fix ice_put_rx_mbuf(), we need to make sure to call ice_put_rx_buf() on all buffers between first_desc and next_to_clean. Borrow the logic of a similar function in i40e used for this same purpose. Use the same logic also in ice_get_pgcnts(). Instead of iterating over just the number of fragments, use a loop which iterates until the current index reaches to the next_to_clean element just past the current frame. Unlike i40e, the ice_put_rx_mbuf() function does call ice_put_rx_buf() on the last buffer of the frame indicating the end of packet. For non-linear (multi-buffer) frames, we need to take care when adjusting the pagecnt_bias. An XDP program might release fragments from the tail of the frame, in which case that fragment page is already released. Only update the pagecnt_bias for the first descriptor and fragments still remaining post-XDP program. Take care to only access the shared info for fragmented buffers, as this avoids a significant cache miss. The xdp_xmit value only needs to be updated if an XDP program is run, and only once per packet. Drop the xdp_xmit pointer argument from ice_put_rx_mbuf(). Instead, set xdp_xmit in the ice_clean_rx_irq() function directly. This avoids needing to pass the argument and avoids an extra bit-wise OR for each buffer in the frame. Move the increment of the ntc local variable to ensure its updated before all calls to ice_get_pgcnts() or ice_put_rx_mbuf(), as the loop logic requires the index of the element just after the current frame. Now that we use an index pointer in the ring to identify the packet, we no longer need to track or cache the number of fragments in the rx_ring.

Record
DEBIAN-CVE-2025-39948
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1566 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

udp: Deal with race between UDP socket address change and rehash

If a UDP socket changes its local address while it's receiving datagrams, as a result of connect(), there is a period during which a lookup operation might fail to find it, after the address is changed but before the secondary hash (port and address) and the four-tuple hash (local and remote ports and addresses) are updated.

Secondary hash chains were introduced by commit 30fff9231fad ("udp: bind() optimisation") and, as a result, a rehash operation became needed to make a bound socket reachable again after a connect().

This operation was introduced by commit 719f835853a9 ("udp: add rehash on connect()") which isn't however a complete fix: the socket will be found once the rehashing completes, but not while it's pending.

This is noticeable with a socat(1) server in UDP4-LISTEN mode, and a client sending datagrams to it. After the server receives the first datagram (cf. _xioopen_ipdgram_listen()), it issues a connect() to the address of the sender, in order to set up a directed flow.

Now, if the client, running on a different CPU thread, happens to send a (subsequent) datagram while the server's socket changes its address, but is not rehashed yet, this will result in a failed lookup and a port unreachable error delivered to the client, as apparent from the following reproducer:

LEN=$(($(cat /proc/sys/net/core/wmem_default) / 4)) dd if=/dev/urandom bs=1 count=${LEN} of=tmp.in

while :; do taskset -c 1 socat UDP4-LISTEN:1337,null-eof OPEN:tmp.out,create,trunc & sleep 0.1 || sleep 1 taskset -c 2 socat OPEN:tmp.in UDP4:localhost:1337,shut-null wait done

where the client will eventually get ECONNREFUSED on a write() (typically the second or third one of a given iteration):

2024/11/13 21:28:23 socat[46901] E write(6, 0x556db2e3c000, 8192): Connection refused

This issue was first observed as a seldom failure in Podman's tests checking UDP functionality while using pasta(1) to connect the container's network namespace, which leads us to a reproducer with the lookup error resulting in an ICMP packet on a tap device:

LOCAL_ADDR="$(ip -j -4 addr show|jq -rM '.[] | .addr_info[0] | select(.scope == "global").local')"

while :; do ./pasta --config-net -p pasta.pcap -u 1337 socat UDP4-LISTEN:1337,null-eof OPEN:tmp.out,create,trunc & sleep 0.2 || sleep 1 socat OPEN:tmp.in UDP4:${LOCAL_ADDR}:1337,shut-null wait cmp tmp.in tmp.out done

Once this fails:

tmp.in tmp.out differ: char 8193, line 29

we can finally have a look at what's going on:

$ tshark -r pasta.pcap 1 0.000000 :: ? ff02::16 ICMPv6 110 Multicast Listener Report Message v2 2 0.168690 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 3 0.168767 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 4 0.168806 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 5 0.168827 c6:47:05:8d:dc:04 ? Broadcast ARP 42 Who has 88.198.0.161? Tell 88.198.0.164 6 0.168851 9a:55:9a:55:9a:55 ? c6:47:05:8d:dc:04 ARP 42 88.198.0.161 is at 9a:55:9a:55:9a:55 7 0.168875 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 8 0.168896 88.198.0.164 ? 88.198.0.161 ICMP 590 Destination unreachable (Port unreachable) 9 0.168926 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 10 0.168959 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 11 0.168989 88.198.0.161 ? 88.198.0.164 UDP 4138 60260 ? 1337 Len=4096 12 0.169010 88.198.0.161 ? 88.198.0.164 UDP 42 60260 ? 1337 Len=0

On the third datagram received, the network namespace of the container initiates an ARP lookup to deliver the ICMP message.

In another…

Record
OESA-2026-1566
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1567 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

udp: Deal with race between UDP socket address change and rehash

If a UDP socket changes its local address while it's receiving datagrams, as a result of connect(), there is a period during which a lookup operation might fail to find it, after the address is changed but before the secondary hash (port and address) and the four-tuple hash (local and remote ports and addresses) are updated.

Secondary hash chains were introduced by commit 30fff9231fad ("udp: bind() optimisation") and, as a result, a rehash operation became needed to make a bound socket reachable again after a connect().

This operation was introduced by commit 719f835853a9 ("udp: add rehash on connect()") which isn't however a complete fix: the socket will be found once the rehashing completes, but not while it's pending.

This is noticeable with a socat(1) server in UDP4-LISTEN mode, and a client sending datagrams to it. After the server receives the first datagram (cf. _xioopen_ipdgram_listen()), it issues a connect() to the address of the sender, in order to set up a directed flow.

Now, if the client, running on a different CPU thread, happens to send a (subsequent) datagram while the server's socket changes its address, but is not rehashed yet, this will result in a failed lookup and a port unreachable error delivered to the client, as apparent from the following reproducer:

LEN=$(($(cat /proc/sys/net/core/wmem_default) / 4)) dd if=/dev/urandom bs=1 count=${LEN} of=tmp.in

while :; do taskset -c 1 socat UDP4-LISTEN:1337,null-eof OPEN:tmp.out,create,trunc & sleep 0.1 || sleep 1 taskset -c 2 socat OPEN:tmp.in UDP4:localhost:1337,shut-null wait done

where the client will eventually get ECONNREFUSED on a write() (typically the second or third one of a given iteration):

2024/11/13 21:28:23 socat[46901] E write(6, 0x556db2e3c000, 8192): Connection refused

This issue was first observed as a seldom failure in Podman's tests checking UDP functionality while using pasta(1) to connect the container's network namespace, which leads us to a reproducer with the lookup error resulting in an ICMP packet on a tap device:

LOCAL_ADDR="$(ip -j -4 addr show|jq -rM '.[] | .addr_info[0] | select(.scope == "global").local')"

while :; do ./pasta --config-net -p pasta.pcap -u 1337 socat UDP4-LISTEN:1337,null-eof OPEN:tmp.out,create,trunc & sleep 0.2 || sleep 1 socat OPEN:tmp.in UDP4:${LOCAL_ADDR}:1337,shut-null wait cmp tmp.in tmp.out done

Once this fails:

tmp.in tmp.out differ: char 8193, line 29

we can finally have a look at what's going on:

$ tshark -r pasta.pcap 1 0.000000 :: ? ff02::16 ICMPv6 110 Multicast Listener Report Message v2 2 0.168690 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 3 0.168767 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 4 0.168806 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 5 0.168827 c6:47:05:8d:dc:04 ? Broadcast ARP 42 Who has 88.198.0.161? Tell 88.198.0.164 6 0.168851 9a:55:9a:55:9a:55 ? c6:47:05:8d:dc:04 ARP 42 88.198.0.161 is at 9a:55:9a:55:9a:55 7 0.168875 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 8 0.168896 88.198.0.164 ? 88.198.0.161 ICMP 590 Destination unreachable (Port unreachable) 9 0.168926 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 10 0.168959 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 11 0.168989 88.198.0.161 ? 88.198.0.164 UDP 4138 60260 ? 1337 Len=4096 12 0.169010 88.198.0.161 ? 88.198.0.164 UDP 42 60260 ? 1337 Len=0

On the third datagram received, the network namespace of the container initiates an ARP lookup to deliver the ICMP message.

In another…

Record
OESA-2026-1567
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1570 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

udp: Deal with race between UDP socket address change and rehash

If a UDP socket changes its local address while it's receiving datagrams, as a result of connect(), there is a period during which a lookup operation might fail to find it, after the address is changed but before the secondary hash (port and address) and the four-tuple hash (local and remote ports and addresses) are updated.

Secondary hash chains were introduced by commit 30fff9231fad ("udp: bind() optimisation") and, as a result, a rehash operation became needed to make a bound socket reachable again after a connect().

This operation was introduced by commit 719f835853a9 ("udp: add rehash on connect()") which isn't however a complete fix: the socket will be found once the rehashing completes, but not while it's pending.

This is noticeable with a socat(1) server in UDP4-LISTEN mode, and a client sending datagrams to it. After the server receives the first datagram (cf. _xioopen_ipdgram_listen()), it issues a connect() to the address of the sender, in order to set up a directed flow.

Now, if the client, running on a different CPU thread, happens to send a (subsequent) datagram while the server's socket changes its address, but is not rehashed yet, this will result in a failed lookup and a port unreachable error delivered to the client, as apparent from the following reproducer:

LEN=$(($(cat /proc/sys/net/core/wmem_default) / 4)) dd if=/dev/urandom bs=1 count=${LEN} of=tmp.in

while :; do taskset -c 1 socat UDP4-LISTEN:1337,null-eof OPEN:tmp.out,create,trunc & sleep 0.1 || sleep 1 taskset -c 2 socat OPEN:tmp.in UDP4:localhost:1337,shut-null wait done

where the client will eventually get ECONNREFUSED on a write() (typically the second or third one of a given iteration):

2024/11/13 21:28:23 socat[46901] E write(6, 0x556db2e3c000, 8192): Connection refused

This issue was first observed as a seldom failure in Podman's tests checking UDP functionality while using pasta(1) to connect the container's network namespace, which leads us to a reproducer with the lookup error resulting in an ICMP packet on a tap device:

LOCAL_ADDR="$(ip -j -4 addr show|jq -rM '.[] | .addr_info[0] | select(.scope == "global").local')"

while :; do ./pasta --config-net -p pasta.pcap -u 1337 socat UDP4-LISTEN:1337,null-eof OPEN:tmp.out,create,trunc & sleep 0.2 || sleep 1 socat OPEN:tmp.in UDP4:${LOCAL_ADDR}:1337,shut-null wait cmp tmp.in tmp.out done

Once this fails:

tmp.in tmp.out differ: char 8193, line 29

we can finally have a look at what's going on:

$ tshark -r pasta.pcap 1 0.000000 :: ? ff02::16 ICMPv6 110 Multicast Listener Report Message v2 2 0.168690 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 3 0.168767 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 4 0.168806 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 5 0.168827 c6:47:05:8d:dc:04 ? Broadcast ARP 42 Who has 88.198.0.161? Tell 88.198.0.164 6 0.168851 9a:55:9a:55:9a:55 ? c6:47:05:8d:dc:04 ARP 42 88.198.0.161 is at 9a:55:9a:55:9a:55 7 0.168875 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 8 0.168896 88.198.0.164 ? 88.198.0.161 ICMP 590 Destination unreachable (Port unreachable) 9 0.168926 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 10 0.168959 88.198.0.161 ? 88.198.0.164 UDP 8234 60260 ? 1337 Len=8192 11 0.168989 88.198.0.161 ? 88.198.0.164 UDP 4138 60260 ? 1337 Len=4096 12 0.169010 88.198.0.161 ? 88.198.0.164 UDP 42 60260 ? 1337 Len=0

On the third datagram received, the network namespace of the container initiates an ARP lookup to deliver the ICMP message.

In another…

Record
OESA-2026-1570
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2404-CVE-2025-39948 5.5

CVE-2025-39948 in linux - Patched by Root

Root has patched CVE-2025-39948 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2025-39948
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2025-39948 8.2

In the Linux kernel, the following vulnerability has been resolved: ice: fix Rx page leak on multi-buffer frames The ice_put_rx_mbuf() function handles calling ice_put_rx_buf() for each buffer in the current frame. This function was introduced as part of handling multi-buffer XDP support in the ice driver. It works by iterating over the buffers from first_desc up to 1 plus the total number of fragments in the frame, cached from before the XDP program was executed. If the hardware posts a descriptor with a size of 0, the logic used in ice_put_rx_mbuf() breaks. Such descriptors get skipped and don't get added as fragments in ice_add_xdp_frag. Since the buffer isn't counted as a fragment, we do not iterate over it in ice_put_rx_mbuf(), and thus we don't call ice_put_rx_buf(). Because we don't call ice_put_rx_buf(), we don't attempt to re-use the page or free it. This leaves a stale page in the ring, as we don't increment next_to_alloc. The ice_reuse_rx_page() assumes that the next_to_alloc has been incremented properly, and that it always points to a buffer with a NULL page. Since this function doesn't check, it will happily recycle a page over the top of the next_to_alloc buffer, losing track of the old page. Note that this leak only occurs for multi-buffer frames. The ice_put_rx_mbuf() function always handles at least one buffer, so a single-buffer frame will always get handled correctly. It is not clear precisely why the hardware hands us descriptors with a size of 0 sometimes, but it happens somewhat regularly with "jumbo frames" used by 9K MTU. To fix ice_put_rx_mbuf(), we need to make sure to call ice_put_rx_buf() on all buffers between first_desc and next_to_clean. Borrow the logic of a similar function in i40e used for this same purpose. Use the same logic also in ice_get_pgcnts(). Instead of iterating over just the number of fragments, use a loop which iterates until the current index reaches to the next_to_clean element just past the current frame. Unlike i40e, the ice_put_rx_mbuf() function does call ice_put_rx_buf() on the last buffer of the frame indicating the end of packet. For non-linear (multi-buffer) frames, we need to take care when adjusting the pagecnt_bias. An XDP program might release fragments from the tail of the frame, in which case that fragment page is already released. Only update the pagecnt_bias for the first descriptor and fragments still remaining post-XDP program. Take care to only access the shared info for fragmented buffers, as this avoids a significant cache miss. The xdp_xmit value only needs to be updated if an XDP program is run, and only once per packet. Drop the xdp_xmit pointer argument from ice_put_rx_mbuf(). Instead, set xdp_xmit in the ice_clean_rx_irq() function directly. This avoids needing to pass the argument and avoids an extra bit-wise OR for each buffer in the frame. Move the increment of the ntc local variable to ensure its updated before all calls to ice_get_pgcnts() or ice_put_rx_mbuf(), as the loop logic requires the index of the element just after the current frame. Now that we use an index pointer in the ring to identify the packet, we no longer need to track or cache the number of fragments in the rx_ring.

Record
UBUNTU-CVE-2025-39948
CVSS 4.0
8.2 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-11
OSVAZL-75296 No score

CVE-2025-39948 affecting package kernel 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved:

ice: fix Rx page leak on multi-buffer frames

The ice_put_rx_mbuf() function handles calling ice_put_rx_buf() for each buffer in the current frame. This function was introduced as part of handling multi-buffer XDP support in the ice driver.

It works by iterating over the buffers from first_desc up to 1 plus the total number of fragments in the frame, cached from before the XDP program was executed.

If the hardware posts a descriptor with a size of 0, the logic used in ice_put_rx_mbuf() breaks. Such descriptors get skipped and don't get added as fragments in ice_add_xdp_frag. Since the buffer isn't counted as a fragment, we do not iterate over it in ice_put_rx_mbuf(), and thus we don't call ice_put_rx_buf().

Because we don't call ice_put_rx_buf(), we don't attempt to re-use the page or free it. This leaves a stale page in the ring, as we don't increment next_to_alloc.

The ice_reuse_rx_page() assumes that the next_to_alloc has been incremented properly, and that it always points to a buffer with a NULL page. Since this function doesn't check, it will happily recycle a page over the top of the next_to_alloc buffer, losing track of the old page.

Note that this leak only occurs for multi-buffer frames. The ice_put_rx_mbuf() function always handles at least one buffer, so a single-buffer frame will always get handled correctly. It is not clear precisely why the hardware hands us descriptors with a size of 0 sometimes, but it happens somewhat regularly with "jumbo frames" used by 9K MTU.

To fix ice_put_rx_mbuf(), we need to make sure to call ice_put_rx_buf() on all buffers between first_desc and next_to_clean. Borrow the logic of a similar function in i40e used for this same purpose. Use the same logic also in ice_get_pgcnts().

Instead of iterating over just the number of fragments, use a loop which iterates until the current index reaches to the next_to_clean element just past the current frame. Unlike i40e, the ice_put_rx_mbuf() function does call ice_put_rx_buf() on the last buffer of the frame indicating the end of packet.

For non-linear (multi-buffer) frames, we need to take care when adjusting the pagecnt_bias. An XDP program might release fragments from the tail of the frame, in which case that fragment page is already released. Only update the pagecnt_bias for the first descriptor and fragments still remaining post-XDP program. Take care to only access the shared info for fragmented buffers, as this avoids a significant cache miss.

The xdp_xmit value only needs to be updated if an XDP program is run, and only once per packet. Drop the xdp_xmit pointer argument from ice_put_rx_mbuf(). Instead, set xdp_xmit in the ice_clean_rx_irq() function directly. This avoids needing to pass the argument and avoids an extra bit-wise OR for each buffer in the frame.

Move the increment of the ntc local variable to ensure its updated before all calls to ice_get_pgcnts() or ice_put_rx_mbuf(), as the loop logic requires the index of the element just after the current frame.

Now that we use an index pointer in the ring to identify the packet, we no longer need to track or cache the number of fragments in the rx_ring.

Record
AZL-75296
Updated
2026-11-05
OSVopenSUSE-SU-2025:20091-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
  • CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
  • CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
  • CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
  • CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
  • CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
  • CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

  • add bug reference to existing hv_netvsc change (bsc#1252265) -…
Record
openSUSE-SU-2025:20091-1
Updated
2026-11-02
OSVSUSE-SU-2025:21040-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…
Record
SUSE-SU-2025:21040-1
Updated
2026-11-02
OSVSUSE-SU-2025:21052-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…
Record
SUSE-SU-2025:21052-1
Updated
2026-11-02
OSVSUSE-SU-2025:21056-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…
Record
SUSE-SU-2025:21056-1
Updated
2026-11-02
OSVSUSE-SU-2025:21064-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…
Record
SUSE-SU-2025:21064-1
Updated
2026-11-02
OSVSUSE-SU-2025:21080-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
  • CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
  • CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
  • CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
  • CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
  • CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
  • CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

  • add bug reference to existing hv_netvsc change (bsc#1252265) -…
Record
SUSE-SU-2025:21080-1
Updated
2026-11-02
OSVSUSE-SU-2025:21147-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
  • CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
  • CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
  • CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
  • CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
  • CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
  • CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

  • add bug reference to existing hv_netvsc change (bsc#1252265) -…
Record
SUSE-SU-2025:21147-1
Updated
2026-11-02
OSVSUSE-SU-2025:21180-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
  • CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
  • CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
  • CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
  • CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
  • CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
  • CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

  • add bug reference to existing hv_netvsc change (bsc#1252265) -…
Record
SUSE-SU-2025:21180-1
Updated
2026-11-02
OSVSUSE-SU-2025:4057-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
  • CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
  • CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
  • CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
  • CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
  • CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051). -…
Record
SUSE-SU-2025:4057-1
Updated
2026-11-02
OSVSUSE-SU-2025:4128-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
  • CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr…
Record
SUSE-SU-2025:4128-1
Updated
2026-11-02
OSVSUSE-SU-2025:4132-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
  • CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
  • CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
  • CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
  • CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…
Record
SUSE-SU-2025:4132-1
Updated
2026-11-02
OSVSUSE-SU-2025:4140-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures…
Record
SUSE-SU-2025:4140-1
Updated
2026-11-02
OSVSUSE-SU-2025:4141-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
  • CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
  • CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
  • CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
  • CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…
Record
SUSE-SU-2025:4141-1
Updated
2026-11-02
OSVSUSE-SU-2025:4301-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319 bsc#1252236).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation…
Record
SUSE-SU-2025:4301-1
Updated
2026-11-02
OSVSUSE-SU-2026:20561-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
  • CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
  • CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
  • CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
  • CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
  • CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
  • CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

  • add bug reference to existing hv_netvsc change (bsc#1252265) -…
Record
SUSE-SU-2026:20561-1
Updated
2026-11-02
OSVUSN-8095-1 No score

linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-1
Updated
2026-11-03
OSVUSN-8095-2 No score

linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-2
Updated
2026-11-03
OSVUSN-8095-3 No score

linux-realtime, linux-realtime-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-3
Updated
2026-11-03
OSVUSN-8095-4 No score

linux-aws-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-4
Updated
2026-11-03
OSVUSN-8095-5 No score

linux-raspi, linux-raspi-realtime vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-5
Updated
2026-11-03
OSVUSN-8100-1 No score

linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation; …
Record
USN-8100-1
Updated
2026-11-04
OSVUSN-8125-1 No score

linux-azure vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8125-1
Updated
2026-11-03
OSVUSN-8126-1 No score

linux-azure-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Block device driver;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Amlogic Meson DDR PMU;
  • Performance monitor drivers;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • Texas Instruments SoC drivers;
  • SPI subsystem; -…
Record
USN-8126-1
Updated
2026-11-03
OSVUSN-8165-1 No score

linux-azure-fips vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853, CVE-2026-23268, CVE-2026-23269, CVE-2026-23403, CVE-2026-23404, CVE-2026-23405, CVE-2026-23406, CVE-2026-23407, CVE-2026-23408, CVE-2026-23409, CVE-2026-23410, CVE-2026-23411)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem; -…
Record
USN-8165-1
Updated
2026-11-04
OSVUSN-8261-1 No score

linux-xilinx vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcode causing loss of integrity and confidentiality. (CVE-2024-36347)

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853, CVE-2026-23268, CVE-2026-23269, CVE-2026-23403, CVE-2026-23404, CVE-2026-23405, CVE-2026-23406, CVE-2026-23407, CVE-2026-23408, CVE-2026-23409, CVE-2026-23410, CVE-2026-23411)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • Macintosh device drivers;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVME drivers;
  • PA-RISC drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Media Oriented Systems Transport (MOST) driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • BFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file…
Record
USN-8261-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Azure Linux:3
 through 6.6.161.1-1 None known
linux-lts
Alpaquita:25
 6.12.44-r0 up to 6.12.51-r0
6.12.51-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
Kernel
Linux
 before 6.6.160, 6.7.0 up to 6.12.49, 6.13.0 up to 6.16.9
6.6.1606.12.496.16.9
linux
Debian:13
 before 6.12.57-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-1~bpo12+1
6.12.57-1
linux
Debian:14
 before 6.16.9-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
6.16.9-1
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 73 CVEs
 before 6.6.0-142.0.0.136.oe2403sp1
6.6.0-142.0.0.136.oe2403sp1
kernel
openEuler:24.03-LTS-SP2
From an advisory covering 73 CVEs
 before 6.6.0-142.0.0.137.oe2403sp2
6.6.0-142.0.0.137.oe2403sp2
kernel
openEuler:24.03-LTS
From an advisory covering 73 CVEs
 before 6.6.0-142.0.0.124.oe2403
6.6.0-142.0.0.124.oe2403
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
Show 276 moreShow less
Affected packages
PackageAffectedFixed
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 191 CVEs
 before 6.4.0-36.1
6.4.0-36.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 191 CVEs
 before 6.4.0-36.1.21.13
6.4.0-36.1.21.13
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 191 CVEs
 before 6.4.0-36.1
6.4.0-36.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 191 CVEs
 before 6.4.0-36.1
6.4.0-36.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 191 CVEs
 before 6.4.0-38.1
6.4.0-38.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 191 CVEs
 before 6.4.0-38.1
6.4.0-38.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 191 CVEs
 before 6.4.0-36.1
6.4.0-36.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 191 CVEs
 before 6.4.0-36.1.21.13
6.4.0-36.1.21.13
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 191 CVEs
 before 6.4.0-36.1
6.4.0-36.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 191 CVEs
 before 6.4.0-36.1
6.4.0-36.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 191 CVEs
 before 6.4.0-38.1
6.4.0-38.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 191 CVEs
 before 6.4.0-38.1
6.4.0-38.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 83 CVEs
 before 6.12.0-160000.6.1.160000.2.4
6.12.0-160000.6.1.160000.2.4
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.6.1.160000.2.4
6.12.0-160000.6.1.160000.2.4
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.6.1.160000.2.4
6.12.0-160000.6.1.160000.2.4
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1.150700.17.15.1
6.4.0-150700.53.22.1.150700.17.15.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-livepatch-SLE15-SP7_Update_6
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 462 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.8.55.1
6.4.0-150600.8.55.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.8.55.1
6.4.0-150600.8.55.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 189 CVEs
 before 6.4.0-150600.8.55.1
6.4.0-150600.8.55.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.8.55.1
6.4.0-150600.8.55.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.8.55.1
6.4.0-150600.8.55.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.8.55.1
6.4.0-150600.8.55.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.20.18.1
6.4.0-150700.20.18.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.20.18.1
6.4.0-150700.20.18.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.20.18.1
6.4.0-150700.20.18.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1.150600.12.34.2
6.4.0-150600.23.78.1.150600.12.34.2
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-livepatch-SLE15-SP6_Update_17
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 190 CVEs
 before 1-150600.13.5.1
1-150600.13.5.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1.150600.12.34.2
6.4.0-150600.23.78.1.150600.12.34.2
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-livepatch-SLE15-SP7-RT_Update_6
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 461 CVEs
 before 1-150700.1.3.1
1-150700.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 461 CVEs
 before 6.4.0-150700.7.22.1
6.4.0-150700.7.22.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 461 CVEs
 before 6.4.0-150700.7.22.1
6.4.0-150700.7.22.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 461 CVEs
 before 6.4.0-150700.7.22.1
6.4.0-150700.7.22.1
kernel-livepatch-SLE15-SP6-RT_Update_17
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 190 CVEs
 before 1-150600.1.3.1
1-150600.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 190 CVEs
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-aws-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1050.53~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 27 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.1
6.8.0-1050.53~22.04.1
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1051.57~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1
Show 18 moreShow less
6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.1
6.8.0-1051.57~22.04.1
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
 None known
linux-azure-fde-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1058.65~22.04.1, plus listed versions
6.8.0-1041.48~22.04.16.8.0-1042.49~22.04.16.8.0-1044.51~22.04.16.8.0-1046.53~22.04.16.8.0-1053.60~22.04.1
6.8.0-1058.65~22.04.1
linux-gcp-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
 None known
linux-gcp-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
 None known
linux-gcp-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1
Show 8 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1
 None known
linux-gcp-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1052.55~22.04.1, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1
Show 29 moreShow less
6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.1
6.8.0-1052.55~22.04.1
linux-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
 None known
linux-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1
Show 5 moreShow less
6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1
 None known
linux-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1
Show 8 moreShow less
6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1
 None known
linux-hwe-6.8
Ubuntu:22.04:LTS
 before 6.8.0-106.106~22.04.1, plus listed versions
6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1
Show 23 moreShow less
6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.1
6.8.0-106.106~22.04.1
linux-ibm-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1049.49~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1
Show 25 moreShow less
6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.1
6.8.0-1049.49~22.04.1
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-lowlatency-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1
Show 5 moreShow less
5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30
 None known
linux-lowlatency-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1
Show 5 moreShow less
6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-lowlatency-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1
Show 8 moreShow less
6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1
 None known
linux-lowlatency-hwe-6.8
Ubuntu:22.04:LTS
 before 6.8.0-106.106.1~22.04.1, plus listed versions
6.8.0-38.38.1~22.04.26.8.0-40.40.1~22.04.16.8.0-44.44.1~22.04.16.8.0-45.45.1~22.04.16.8.0-47.47.1~22.04.1
Show 28 moreShow less
6.8.0-48.48.3~22.04.16.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-54.56.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.16.8.0-60.63.1~22.04.16.8.0-62.65.1~22.04.16.8.0-63.66.1~22.04.16.8.0-64.67.1~22.04.16.8.0-65.68.1~22.04.16.8.0-78.78.1~22.04.16.8.0-79.79.1~22.04.16.8.0-83.83.1~22.04.16.8.0-84.84.1~22.04.16.8.0-85.85.1~22.04.16.8.0-86.87.1~22.04.16.8.0-87.88.1~22.04.16.8.0-88.89.1~22.04.16.8.0-90.91.1~22.04.16.8.0-94.96.1~22.04.16.8.0-100.100.1~22.04.16.8.0-101.101.1~22.04.1
6.8.0-106.106.1~22.04.1
linux-nvidia-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15
 None known
linux-nvidia-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15
Show 6 moreShow less
6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25
 None known
linux-nvidia-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1049.52~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1
Show 31 moreShow less
6.8.0-1013.14~22.04.16.8.0-1014.15~22.04.16.8.0-1015.16~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1022.25~22.04.26.8.0-1023.26~22.04.16.8.0-1024.27~22.04.16.8.0-1025.28~22.04.16.8.0-1026.29~22.04.16.8.0-1027.30~22.04.16.8.0-1028.31~22.04.16.8.0-1029.32~22.04.16.8.0-1030.33~22.04.16.8.0-1031.34~22.04.16.8.0-1032.35~22.04.16.8.0-1035.38~22.04.16.8.0-1036.39~22.04.16.8.0-1038.41~22.04.16.8.0-1039.42~22.04.16.8.0-1040.43~22.04.16.8.0-1041.44~22.04.26.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.1
6.8.0-1049.52~22.04.1
linux-oem-5.17
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13
Show 21 moreShow less
5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36
 None known
linux-oem-6.0
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10
Show 11 moreShow less
6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21
 None known
linux-oem-6.1
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9
Show 22 moreShow less
6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36
 None known
linux-oem-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8
Show 14 moreShow less
6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28
 None known
linux-oracle-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1
Show 8 moreShow less
6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1
 None known
linux-oracle-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1047.48~22.04.1, plus listed versions
6.8.0-1006.6~22.04.36.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1
Show 29 moreShow less
6.8.0-1013.13~22.04.16.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.17~22.04.16.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.20~22.04.16.8.0-1020.21~22.04.16.8.0-1021.22~22.04.16.8.0-1022.23~22.04.16.8.0-1023.24~22.04.16.8.0-1024.25~22.04.16.8.0-1025.26~22.04.16.8.0-1026.27~22.04.16.8.0-1027.28~22.04.16.8.0-1028.29~22.04.16.8.0-1029.30~22.04.16.8.0-1030.31~22.04.16.8.0-1032.33~22.04.16.8.0-1033.34~22.04.16.8.0-1035.36~22.04.16.8.0-1037.38~22.04.16.8.0-1038.39~22.04.16.8.0-1039.40~22.04.16.8.0-1040.41~22.04.16.8.0-1041.42~22.04.16.8.0-1042.43~22.04.16.8.0-1043.44~22.04.16.8.0-1044.45~22.04.1
6.8.0-1047.48~22.04.1
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-riscv-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1
 None known
linux-riscv-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1
Show 5 moreShow less
6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1
 None known
linux-riscv-6.8
Ubuntu:22.04:LTS
 before 6.8.0-106.106~22.04.1, plus listed versions
6.8.0-38.38.1~22.04.16.8.0-39.39.1~22.04.16.8.0-40.40.1~22.04.16.8.0-41.41.1~22.04.16.8.0-44.44.1~22.04.1
Show 27 moreShow less
6.8.0-47.47.1~22.04.16.8.0-48.48.1~22.04.26.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-53.55.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.16.8.0-62.65~22.04.16.8.0-63.66~22.04.16.8.0-64.67~22.04.16.8.0-71.71~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.16.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.1
6.8.0-106.106~22.04.1
linux-starfive-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1
 None known
linux-starfive-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1
 None known
linux-starfive-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1
Show 6 moreShow less
6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.16.5.0-1017.18~22.04.16.5.0-1018.19~22.04.1
 None known
linux-realtime-6.8
Ubuntu:Pro:Realtime:22.04:LTS
 before 6.8.1-1045.46~22.04.1, plus listed versions
6.8.1-1004.4~22.04.16.8.1-1005.5~22.04.26.8.1-1006.6~22.04.16.8.1-1007.7~22.04.16.8.1-1008.8~22.04.1
Show 29 moreShow less
6.8.1-1009.9~22.04.16.8.1-1010.10~22.04.16.8.1-1011.11~22.04.16.8.1-1012.12~22.04.16.8.1-1013.14~22.04.16.8.1-1014.15~22.04.16.8.1-1015.16~22.04.16.8.1-1016.17~22.04.16.8.1-1017.18~22.04.16.8.1-1018.19~22.04.16.8.1-1019.20~22.04.16.8.1-1020.21~22.04.16.8.1-1021.22~22.04.16.8.1-1022.23~22.04.16.8.1-1023.24~22.04.16.8.1-1024.25~22.04.16.8.1-1025.26~22.04.16.8.1-1026.27~22.04.16.8.1-1030.31~22.04.16.8.1-1031.32~22.04.16.8.1-1034.35~22.04.16.8.1-1035.36~22.04.16.8.1-1036.37~22.04.16.8.1-1037.38~22.04.16.8.1-1038.39~22.04.16.8.1-1039.40~22.04.16.8.1-1040.41~22.04.16.8.1-1041.42~22.04.16.8.1-1042.43~22.04.1
6.8.1-1045.46~22.04.1
linux
Ubuntu:24.04:LTS
 before 6.8.0-106.106, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 40 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.476.8.0-48.486.8.0-49.496.8.0-50.516.8.0-51.526.8.0-52.536.8.0-53.556.8.0-54.566.8.0-55.576.8.0-56.586.8.0-57.596.8.0-58.606.8.0-59.616.8.0-60.636.8.0-62.656.8.0-63.666.8.0-64.676.8.0-71.716.8.0-78.786.8.0-79.796.8.0-83.836.8.0-84.846.8.0-85.856.8.0-86.876.8.0-87.886.8.0-88.896.8.0-90.916.8.0-94.966.8.0-100.1006.8.0-101.101
6.8.0-106.106
linux-aws
Ubuntu:24.04:LTS
 before 6.8.0-1050.53, plus listed versions
6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8
Show 36 moreShow less
6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1023.256.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1035.376.8.0-1036.386.8.0-1038.406.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.446.8.0-1043.456.8.0-1044.466.8.0-1045.476.8.0-1046.496.8.0-1047.50
6.8.0-1050.53
linux-aws-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-1007.7~24.04.16.14.0-1009.9~24.04.16.14.0-1010.10~24.04.16.14.0-1011.11~24.04.16.14.0-1012.12~24.04.1
Show 6 moreShow less
6.14.0-1013.13~24.04.16.14.0-1014.14~24.04.16.14.0-1015.15~24.04.16.14.0-1016.16~24.04.16.14.0-1017.17~24.04.16.14.0-1018.18~24.04.1
 None known
linux-azure
Ubuntu:24.04:LTS
 before 6.8.0-1051.57, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6
Show 27 moreShow less
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.206.8.0-1018.216.8.0-1020.236.8.0-1021.256.8.0-1025.306.8.0-1026.316.8.0-1027.326.8.0-1028.336.8.0-1029.346.8.0-1030.356.8.0-1031.366.8.0-1034.396.8.0-1038.446.8.0-1040.466.8.0-1041.476.8.0-1042.486.8.0-1044.506.8.0-1046.52
6.8.0-1051.57
linux-azure-6.11
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.11.0-1008.8~24.04.16.11.0-1012.12~24.04.16.11.0-1013.13~24.04.16.11.0-1014.14~24.04.16.11.0-1015.15~24.04.16.11.0-1017.17~24.04.16.11.0-1018.18~24.04.1
 None known
linux-azure-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-1010.10~24.04.16.14.0-1012.12~24.04.16.14.0-1013.13~24.04.16.14.0-1014.14~24.04.16.14.0-1017.17~24.04.1
 None known
linux-azure-fde
Ubuntu:24.04:LTS
 before 6.8.0-1058.65, plus listed versions
6.8.0-1041.486.8.0-1044.516.8.0-1046.536.8.0-1053.60
6.8.0-1058.65
linux-azure-fde-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-1012.12~24.04.16.14.0-1013.13~24.04.16.14.0-1014.14~24.04.16.14.0-1015.15~24.04.16.14.0-1017.17~24.04.1
 None known
linux-azure-nvidia
Ubuntu:24.04:LTS
 before 6.8.0-1039.42, plus listed versions
6.8.0-1013.146.8.0-1014.156.8.0-1016.176.8.0-1018.196.8.0-1019.20
Show 4 moreShow less
6.8.0-1022.236.8.0-1025.276.8.0-1027.306.8.0-1029.32
6.8.0-1039.42
linux-azure-nvidia-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-1003.36.14.0-1006.66.14.0-1007.7
 None known
linux-gcp
Ubuntu:24.04:LTS
 before 6.8.0-1052.55, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6
Show 38 moreShow less
6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1034.366.8.0-1036.386.8.0-1037.396.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.456.8.0-1043.466.8.0-1044.476.8.0-1045.486.8.0-1046.496.8.0-1047.506.8.0-1048.51
6.8.0-1052.55
linux-gcp-6.11
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.11.0-1006.6~24.04.26.11.0-1011.11~24.04.16.11.0-1013.13~24.04.16.11.0-1014.14~24.04.16.11.0-1015.15~24.04.16.11.0-1016.16~24.04.16.11.0-1017.17~24.04.1
 None known
linux-gcp-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-1007.7~24.04.16.14.0-1011.11~24.04.16.14.0-1012.12~24.04.16.14.0-1014.15~24.04.16.14.0-1015.16~24.04.1
Show 6 moreShow less
6.14.0-1016.17~24.04.16.14.0-1017.18~24.04.16.14.0-1018.19~24.04.16.14.0-1019.20~24.04.16.14.0-1020.21~24.04.16.14.0-1021.22~24.04.1
 None known
linux-gke
Ubuntu:24.04:LTS
 before 6.8.0-1048.53, plus listed versions
6.8.0-1003.56.8.0-1004.76.8.0-1005.86.8.0-1006.96.8.0-1007.10
Show 33 moreShow less
6.8.0-1008.116.8.0-1009.126.8.0-1010.136.8.0-1011.146.8.0-1012.156.8.0-1013.176.8.0-1014.186.8.0-1015.196.8.0-1016.206.8.0-1017.216.8.0-1019.236.8.0-1020.246.8.0-1021.256.8.0-1022.266.8.0-1023.276.8.0-1024.286.8.0-1025.296.8.0-1026.306.8.0-1027.316.8.0-1028.326.8.0-1029.336.8.0-1032.366.8.0-1033.376.8.0-1035.396.8.0-1036.406.8.0-1037.416.8.0-1038.436.8.0-1039.446.8.0-1040.456.8.0-1041.466.8.0-1042.476.8.0-1043.486.8.0-1044.49
6.8.0-1048.53
linux-gkeop
Ubuntu:24.04:LTS
 before 6.8.0-1035.38, plus listed versions
6.8.0-1001.36.8.0-1002.46.8.0-1003.56.8.0-1004.66.8.0-1006.8
Show 22 moreShow less
6.8.0-1007.96.8.0-1008.106.8.0-1009.116.8.0-1010.126.8.0-1011.136.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1019.216.8.0-1020.226.8.0-1022.246.8.0-1023.256.8.0-1024.266.8.0-1025.286.8.0-1026.296.8.0-1027.306.8.0-1028.316.8.0-1029.326.8.0-1030.336.8.0-1031.34
6.8.0-1035.38
linux-hwe-6.11
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.11.0-17.17~24.04.26.11.0-19.19~24.04.16.11.0-21.21~24.04.16.11.0-24.24~24.04.16.11.0-25.25~24.04.16.11.0-26.26~24.04.16.11.0-28.28~24.04.16.11.0-29.29~24.04.1
 None known
linux-hwe-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-24.24~24.04.36.14.0-27.27~24.04.16.14.0-28.28~24.04.16.14.0-29.29~24.04.16.14.0-32.32~24.04.1
Show 5 moreShow less
6.14.0-33.33~24.04.16.14.0-34.34~24.04.16.14.0-35.35~24.04.16.14.0-36.36~24.04.16.14.0-37.37~24.04.1
 None known
linux-ibm
Ubuntu:24.04:LTS
 before 6.8.0-1049.49, plus listed versions
6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5
Show 34 moreShow less
6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.156.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1022.226.8.0-1023.236.8.0-1024.246.8.0-1025.256.8.0-1026.266.8.0-1027.276.8.0-1028.286.8.0-1029.296.8.0-1030.306.8.0-1033.336.8.0-1036.366.8.0-1037.376.8.0-1038.386.8.0-1039.396.8.0-1040.406.8.0-1041.416.8.0-1042.426.8.0-1043.436.8.0-1044.446.8.0-1045.45
6.8.0-1049.49
linux-intel
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-1005.126.8.0-1006.136.8.0-1007.14
 None known
linux-lowlatency
Ubuntu:24.04:LTS
 before 6.8.0-106.106.1, plus listed versions
6.5.0-9.9.16.6.0-14.14.16.8.0-7.7.16.8.0-25.25.36.8.0-28.28.1
Show 39 moreShow less
6.8.0-31.31.16.8.0-35.35.16.8.0-36.36.16.8.0-38.38.16.8.0-39.39.16.8.0-40.40.16.8.0-41.41.16.8.0-44.44.16.8.0-45.45.16.8.0-47.47.16.8.0-48.48.36.8.0-49.49.16.8.0-50.51.16.8.0-51.52.16.8.0-52.53.16.8.0-53.55.26.8.0-54.56.16.8.0-55.57.16.8.0-56.58.16.8.0-57.59.16.8.0-58.60.16.8.0-59.61.16.8.0-60.63.16.8.0-62.65.16.8.0-63.66.16.8.0-64.67.16.8.0-65.68.16.8.0-78.78.16.8.0-79.79.16.8.0-83.83.16.8.0-84.84.16.8.0-85.85.16.8.0-86.87.16.8.0-87.88.16.8.0-88.89.16.8.0-90.91.16.8.0-94.96.16.8.0-100.100.16.8.0-101.101.1
6.8.0-106.106.1
linux-lowlatency-hwe-6.11
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.11.0-1009.10~24.04.16.11.0-1011.12~24.04.16.11.0-1012.13~24.04.16.11.0-1013.14~24.04.16.11.0-1014.15~24.04.16.11.0-1015.16~24.04.26.11.0-1016.17~24.04.1
 None known
linux-nvidia
Ubuntu:24.04:LTS
 before 6.8.0-1049.52, plus listed versions
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.11
Show 32 moreShow less
6.8.0-1012.126.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1022.256.8.0-1023.266.8.0-1024.276.8.0-1025.286.8.0-1026.296.8.0-1027.306.8.0-1028.316.8.0-1029.326.8.0-1030.336.8.0-1031.346.8.0-1032.356.8.0-1035.386.8.0-1036.396.8.0-1038.416.8.0-1039.426.8.0-1040.436.8.0-1041.446.8.0-1042.456.8.0-1043.466.8.0-1044.476.8.0-1045.486.8.0-1046.496.8.0-1047.50
6.8.0-1049.52
linux-nvidia-6.11
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.11.0-1002.26.11.0-1003.36.11.0-1007.76.11.0-1010.106.11.0-1011.116.11.0-1012.126.11.0-1013.136.11.0-1016.16
 None known
linux-nvidia-lowlatency
Ubuntu:24.04:LTS
 before 6.8.0-1049.52.1, plus listed versions
6.8.0-1009.9.16.8.0-1011.11.16.8.0-1012.12.16.8.0-1013.14.16.8.0-1014.15.1
Show 29 moreShow less
6.8.0-1015.16.16.8.0-1017.19.16.8.0-1018.20.16.8.0-1019.21.16.8.0-1020.22.16.8.0-1021.23.16.8.0-1022.25.26.8.0-1023.26.16.8.0-1024.27.16.8.0-1025.28.16.8.0-1026.29.16.8.0-1027.30.16.8.0-1028.31.16.8.0-1029.32.16.8.0-1030.33.16.8.0-1031.34.16.8.0-1032.35.16.8.0-1035.38.16.8.0-1036.39.16.8.0-1038.41.16.8.0-1039.42.16.8.0-1040.43.16.8.0-1041.44.16.8.0-1042.45.16.8.0-1043.46.16.8.0-1044.47.16.8.0-1045.48.16.8.0-1046.49.16.8.0-1047.50.1
6.8.0-1049.52.1
linux-nvidia-tegra
Ubuntu:24.04:LTS
 before 6.8.0-1020.20, plus listed versions
6.8.0-1003.36.8.0-1004.46.8.0-1008.86.8.0-1009.96.8.0-1010.10
Show 4 moreShow less
6.8.0-1012.126.8.0-1013.136.8.0-1016.166.8.0-1019.19
6.8.0-1020.20
linux-oem-6.11
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.11.0-1007.76.11.0-1008.86.11.0-1009.96.11.0-1010.106.11.0-1011.11
Show 13 moreShow less
6.11.0-1012.126.11.0-1013.136.11.0-1015.156.11.0-1016.166.11.0-1017.176.11.0-1018.186.11.0-1020.206.11.0-1021.216.11.0-1022.226.11.0-1023.236.11.0-1024.246.11.0-1025.256.11.0-1027.27
 None known
linux-oem-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-1004.46.14.0-1005.56.14.0-1006.66.14.0-1007.76.14.0-1008.8
Show 11 moreShow less
6.14.0-1010.106.14.0-1011.116.14.0-1012.126.14.0-1013.136.14.0-1014.146.14.0-1015.156.14.0-1016.166.14.0-1017.176.14.0-1018.186.14.0-1019.196.14.0-1020.20
 None known
linux-oem-6.8
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-1003.36.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.7
Show 21 moreShow less
6.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1020.206.8.0-1024.246.8.0-1025.256.8.0-1026.266.8.0-1027.276.8.0-1028.286.8.0-1029.296.8.0-1030.306.8.0-1031.316.8.0-1032.32
 None known
linux-oracle
Ubuntu:24.04:LTS
 before 6.8.0-1047.48, plus listed versions
6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.5
Show 34 moreShow less
6.8.0-1006.66.8.0-1008.86.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.196.8.0-1019.206.8.0-1020.216.8.0-1021.226.8.0-1022.236.8.0-1023.246.8.0-1024.256.8.0-1025.266.8.0-1026.276.8.0-1027.286.8.0-1028.296.8.0-1029.306.8.0-1030.316.8.0-1032.336.8.0-1033.346.8.0-1035.366.8.0-1037.386.8.0-1038.396.8.0-1039.406.8.0-1040.416.8.0-1041.426.8.0-1042.436.8.0-1043.446.8.0-1044.45
6.8.0-1047.48
linux-oracle-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-1007.7~24.04.16.14.0-1009.9~24.04.16.14.0-1010.10~24.04.16.14.0-1011.11~24.04.16.14.0-1012.12~24.04.1
Show 6 moreShow less
6.14.0-1013.13~24.04.16.14.0-1014.14~24.04.16.14.0-1015.15~24.04.16.14.0-1016.16~24.04.16.14.0-1017.17~24.04.16.14.0-1018.18~24.04.1
 None known
linux-raspi
Ubuntu:24.04:LTS
 before 6.8.0-1050.54, plus listed versions
6.5.0-1005.76.7.0-1001.16.8.0-1001.16.8.0-1002.26.8.0-1003.3
Show 35 moreShow less
6.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.236.8.0-1020.246.8.0-1024.286.8.0-1028.326.8.0-1029.336.8.0-1030.346.8.0-1031.356.8.0-1032.366.8.0-1035.396.8.0-1036.406.8.0-1038.426.8.0-1039.436.8.0-1040.446.8.0-1041.456.8.0-1042.466.8.0-1043.476.8.0-1044.486.8.0-1045.496.8.0-1047.516.8.0-1048.52
6.8.0-1050.54
linux-raspi-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-2019.20
 None known
linux-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.1-1015.16
 None known
linux-riscv
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.5.0-9.9.16.8.0-20.20.16.8.0-28.28.16.8.0-31.31.16.8.0-35.35.1
Show 19 moreShow less
6.8.0-36.36.16.8.0-38.38.16.8.0-39.39.16.8.0-40.40.16.8.0-41.41.16.8.0-44.44.16.8.0-47.47.16.8.0-48.48.16.8.0-49.49.16.8.0-50.51.16.8.0-51.52.16.8.0-52.53.16.8.0-53.55.16.8.0-55.57.16.8.0-56.58.16.8.0-57.59.16.8.0-58.60.16.8.0-59.61.16.8.0-60.63.1
 None known
linux-riscv-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-22.22.1~24.04.16.14.0-23.23.1~24.04.16.14.0-24.24.1~24.04.16.14.0-27.27.1~24.04.16.14.0-28.28.1~24.04.1
Show 7 moreShow less
6.14.0-29.29.1~24.04.16.14.0-32.32.1~24.04.16.14.0-33.33.1~24.04.16.14.0-34.34.1~24.04.16.14.0-35.35.1~24.04.16.14.0-36.36.1~24.04.16.14.0-37.37.1~24.04.1
 None known
linux-xilinx
Ubuntu:24.04:LTS
 before 6.8.0-1028.29, plus listed versions
6.8.0-1008.96.8.0-1009.106.8.0-1011.126.8.0-1012.136.8.0-1013.14
Show 10 moreShow less
6.8.0-1014.156.8.0-1015.166.8.0-1017.186.8.0-1018.196.8.0-1019.206.8.0-1020.216.8.0-1021.226.8.0-1022.236.8.0-1023.246.8.0-1024.25
6.8.0-1028.29
linux-bluefield
Ubuntu:Nvidia-BlueField:24.04:LTS
 before 6.8.0-1017.21, plus listed versions
6.8.0-1011.156.8.0-1012.166.8.0-1013.176.8.0-1014.186.8.0-1016.20
6.8.0-1017.21
linux-raspi-realtime
Ubuntu:Pro:Realtime:24.04:LTS
 before 6.8.0-2040.41, plus listed versions
6.7.0-2001.16.8.0-2001.16.8.0-2002.26.8.0-2004.46.8.0-2005.5
Show 30 moreShow less
6.8.0-2006.66.8.0-2007.76.8.0-2008.86.8.0-2009.96.8.0-2010.106.8.0-2011.116.8.0-2012.126.8.0-2013.146.8.0-2014.156.8.0-2015.166.8.0-2016.176.8.0-2017.186.8.0-2018.196.8.0-2019.206.8.0-2022.236.8.0-2023.246.8.0-2024.256.8.0-2025.266.8.0-2026.276.8.0-2028.296.8.0-2029.306.8.0-2030.316.8.0-2031.326.8.0-2032.336.8.0-2033.346.8.0-2034.356.8.0-2035.366.8.0-2036.376.8.0-2037.386.8.0-2038.39
6.8.0-2040.41
linux-realtime
Ubuntu:Pro:Realtime:24.04:LTS
 before 6.8.1-1045.46, plus listed versions
6.8.0-1008.196.8.1-1001.16.8.1-1002.26.8.1-1003.36.8.1-1004.4
Show 34 moreShow less
6.8.1-1005.56.8.1-1006.66.8.1-1007.76.8.1-1008.86.8.1-1009.96.8.1-1010.106.8.1-1011.116.8.1-1012.126.8.1-1013.146.8.1-1014.156.8.1-1015.166.8.1-1016.176.8.1-1017.186.8.1-1018.196.8.1-1019.206.8.1-1020.216.8.1-1021.226.8.1-1022.236.8.1-1023.246.8.1-1024.256.8.1-1025.266.8.1-1026.276.8.1-1030.316.8.1-1031.326.8.1-1033.346.8.1-1034.356.8.1-1035.366.8.1-1036.376.8.1-1037.386.8.1-1038.396.8.1-1039.406.8.1-1040.416.8.1-1041.426.8.1-1042.43
6.8.1-1045.46
linux-realtime-6.14
Ubuntu:Pro:Realtime:24.04:LTS
 All versions, plus listed versions
6.14.0-1003.3~24.04.36.14.0-1010.10~24.04.16.14.0-1011.11~24.04.16.14.0-1012.12~24.04.16.14.0-1013.13~24.04.1
Show 4 moreShow less
6.14.0-1014.14~24.04.16.14.0-1015.15~24.04.16.14.0-1016.16~24.04.16.14.0-1017.17~24.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:24.04:LTS
 before 6.8.0-1050.53+fips1, plus listed versions
6.8.0-1035.37+fips16.8.0-1036.38+fips16.8.0-1038.40+fips16.8.0-1039.41+fips16.8.0-1040.42+fips1
Show 7 moreShow less
6.8.0-1041.43+fips16.8.0-1042.44+fips16.8.0-1043.45+fips16.8.0-1044.46+fips16.8.0-1045.47+fips16.8.0-1046.49+fips16.8.0-1047.50+fips1
6.8.0-1050.53+fips1
linux-azure-fips
Ubuntu:Pro:FIPS-updates:24.04:LTS
 before 6.8.0-1052.58+fips1, plus listed versions
6.8.0-1034.39+fips16.8.0-1040.46+fips16.8.0-1044.50+fips16.8.0-1046.52+fips16.8.0-1047.53+fips1
6.8.0-1052.58+fips1
linux-fips
Ubuntu:Pro:FIPS-updates:24.04:LTS
 before 6.8.0-106.106+fips1, plus listed versions
6.8.0-38.38+fips46.8.0-78.78+fips16.8.0-79.79+fips16.8.0-83.83+fips16.8.0-84.84+fips1
Show 8 moreShow less
6.8.0-85.85+fips16.8.0-86.87+fips16.8.0-87.88+fips16.8.0-88.89+fips16.8.0-90.91+fips16.8.0-94.96+fips16.8.0-100.100+fips16.8.0-101.101+fips1
6.8.0-106.106+fips1
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:24.04:LTS
 before 6.8.0-1052.55+fips1, plus listed versions
6.8.0-1036.38+fips16.8.0-1037.39+fips16.8.0-1039.41+fips16.8.0-1040.42+fips16.8.0-1041.43+fips1
Show 7 moreShow less
6.8.0-1042.45+fips16.8.0-1043.46+fips16.8.0-1044.47+fips16.8.0-1045.48+fips16.8.0-1046.49+fips16.8.0-1047.50+fips16.8.0-1048.51+fips1
6.8.0-1052.55+fips1
linux-azure-fde
Ubuntu:25.10
 All versions, plus listed versions
6.17.0-1003.36.17.0-1004.46.17.0-1005.56.17.0-1007.76.17.0-1008.8
Show 5 moreShow less
6.17.0-1010.106.17.0-1012.126.17.0-1014.146.17.0-1015.156.17.0-1017.17
 None known
linux-vmware
Ubuntu:26.04:LTS
 All versions, plus listed versions
7.0.0-1006.6
 None known
linux-gcp-6.8
Ubuntu:22.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-1052.55~22.04.1, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1
Show 29 moreShow less
6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.1
6.8.0-1052.55~22.04.1
linux-hwe-6.8
Ubuntu:22.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-106.106~22.04.1, plus listed versions
6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1
Show 23 moreShow less
6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.1
6.8.0-106.106~22.04.1
linux-ibm-6.8
Ubuntu:22.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-1049.49~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1
Show 25 moreShow less
6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.1
6.8.0-1049.49~22.04.1
linux-lowlatency-hwe-6.8
Ubuntu:22.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-106.106.1~22.04.1, plus listed versions
6.8.0-38.38.1~22.04.26.8.0-40.40.1~22.04.16.8.0-44.44.1~22.04.16.8.0-45.45.1~22.04.16.8.0-47.47.1~22.04.1
Show 28 moreShow less
6.8.0-48.48.3~22.04.16.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-54.56.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.16.8.0-60.63.1~22.04.16.8.0-62.65.1~22.04.16.8.0-63.66.1~22.04.16.8.0-64.67.1~22.04.16.8.0-65.68.1~22.04.16.8.0-78.78.1~22.04.16.8.0-79.79.1~22.04.16.8.0-83.83.1~22.04.16.8.0-84.84.1~22.04.16.8.0-85.85.1~22.04.16.8.0-86.87.1~22.04.16.8.0-87.88.1~22.04.16.8.0-88.89.1~22.04.16.8.0-90.91.1~22.04.16.8.0-94.96.1~22.04.16.8.0-100.100.1~22.04.16.8.0-101.101.1~22.04.1
6.8.0-106.106.1~22.04.1
linux-oracle-6.8
Ubuntu:22.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-1047.48~22.04.1, plus listed versions
6.8.0-1006.6~22.04.36.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1
Show 29 moreShow less
6.8.0-1013.13~22.04.16.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.17~22.04.16.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.20~22.04.16.8.0-1020.21~22.04.16.8.0-1021.22~22.04.16.8.0-1022.23~22.04.16.8.0-1023.24~22.04.16.8.0-1024.25~22.04.16.8.0-1025.26~22.04.16.8.0-1026.27~22.04.16.8.0-1027.28~22.04.16.8.0-1028.29~22.04.16.8.0-1029.30~22.04.16.8.0-1030.31~22.04.16.8.0-1032.33~22.04.16.8.0-1033.34~22.04.16.8.0-1035.36~22.04.16.8.0-1037.38~22.04.16.8.0-1038.39~22.04.16.8.0-1039.40~22.04.16.8.0-1040.41~22.04.16.8.0-1041.42~22.04.16.8.0-1042.43~22.04.16.8.0-1043.44~22.04.16.8.0-1044.45~22.04.1
6.8.0-1047.48~22.04.1
linux
Ubuntu:24.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-106.106, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 40 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.476.8.0-48.486.8.0-49.496.8.0-50.516.8.0-51.526.8.0-52.536.8.0-53.556.8.0-54.566.8.0-55.576.8.0-56.586.8.0-57.596.8.0-58.606.8.0-59.616.8.0-60.636.8.0-62.656.8.0-63.666.8.0-64.676.8.0-71.716.8.0-78.786.8.0-79.796.8.0-83.836.8.0-84.846.8.0-85.856.8.0-86.876.8.0-87.886.8.0-88.896.8.0-90.916.8.0-94.966.8.0-100.1006.8.0-101.101
6.8.0-106.106
linux-aws
Ubuntu:24.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-1050.53, plus listed versions
6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8
Show 36 moreShow less
6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1023.256.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1035.376.8.0-1036.386.8.0-1038.406.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.446.8.0-1043.456.8.0-1044.466.8.0-1045.476.8.0-1046.496.8.0-1047.50
6.8.0-1050.53
linux-gcp
Ubuntu:24.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-1052.55, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6
Show 38 moreShow less
6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1034.366.8.0-1036.386.8.0-1037.396.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.456.8.0-1043.466.8.0-1044.476.8.0-1045.486.8.0-1046.496.8.0-1047.506.8.0-1048.51
6.8.0-1052.55
linux-gke
Ubuntu:24.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-1048.53, plus listed versions
6.8.0-1003.56.8.0-1004.76.8.0-1005.86.8.0-1006.96.8.0-1007.10
Show 33 moreShow less
6.8.0-1008.116.8.0-1009.126.8.0-1010.136.8.0-1011.146.8.0-1012.156.8.0-1013.176.8.0-1014.186.8.0-1015.196.8.0-1016.206.8.0-1017.216.8.0-1019.236.8.0-1020.246.8.0-1021.256.8.0-1022.266.8.0-1023.276.8.0-1024.286.8.0-1025.296.8.0-1026.306.8.0-1027.316.8.0-1028.326.8.0-1029.336.8.0-1032.366.8.0-1033.376.8.0-1035.396.8.0-1036.406.8.0-1037.416.8.0-1038.436.8.0-1039.446.8.0-1040.456.8.0-1041.466.8.0-1042.476.8.0-1043.486.8.0-1044.49
6.8.0-1048.53
linux-gkeop
Ubuntu:24.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-1035.38, plus listed versions
6.8.0-1001.36.8.0-1002.46.8.0-1003.56.8.0-1004.66.8.0-1006.8
Show 22 moreShow less
6.8.0-1007.96.8.0-1008.106.8.0-1009.116.8.0-1010.126.8.0-1011.136.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1019.216.8.0-1020.226.8.0-1022.246.8.0-1023.256.8.0-1024.266.8.0-1025.286.8.0-1026.296.8.0-1027.306.8.0-1028.316.8.0-1029.326.8.0-1030.336.8.0-1031.34
6.8.0-1035.38
linux-ibm
Ubuntu:24.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-1049.49, plus listed versions
6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5
Show 34 moreShow less
6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.156.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1022.226.8.0-1023.236.8.0-1024.246.8.0-1025.256.8.0-1026.266.8.0-1027.276.8.0-1028.286.8.0-1029.296.8.0-1030.306.8.0-1033.336.8.0-1036.366.8.0-1037.376.8.0-1038.386.8.0-1039.396.8.0-1040.406.8.0-1041.416.8.0-1042.426.8.0-1043.436.8.0-1044.446.8.0-1045.45
6.8.0-1049.49
linux-lowlatency
Ubuntu:24.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-106.106.1, plus listed versions
6.5.0-9.9.16.6.0-14.14.16.8.0-7.7.16.8.0-25.25.36.8.0-28.28.1
Show 39 moreShow less
6.8.0-31.31.16.8.0-35.35.16.8.0-36.36.16.8.0-38.38.16.8.0-39.39.16.8.0-40.40.16.8.0-41.41.16.8.0-44.44.16.8.0-45.45.16.8.0-47.47.16.8.0-48.48.36.8.0-49.49.16.8.0-50.51.16.8.0-51.52.16.8.0-52.53.16.8.0-53.55.26.8.0-54.56.16.8.0-55.57.16.8.0-56.58.16.8.0-57.59.16.8.0-58.60.16.8.0-59.61.16.8.0-60.63.16.8.0-62.65.16.8.0-63.66.16.8.0-64.67.16.8.0-65.68.16.8.0-78.78.16.8.0-79.79.16.8.0-83.83.16.8.0-84.84.16.8.0-85.85.16.8.0-86.87.16.8.0-87.88.16.8.0-88.89.16.8.0-90.91.16.8.0-94.96.16.8.0-100.100.16.8.0-101.101.1
6.8.0-106.106.1
linux-oracle
Ubuntu:24.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-1047.48, plus listed versions
6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.5
Show 34 moreShow less
6.8.0-1006.66.8.0-1008.86.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.196.8.0-1019.206.8.0-1020.216.8.0-1021.226.8.0-1022.236.8.0-1023.246.8.0-1024.256.8.0-1025.266.8.0-1026.276.8.0-1027.286.8.0-1028.296.8.0-1029.306.8.0-1030.316.8.0-1032.336.8.0-1033.346.8.0-1035.366.8.0-1037.386.8.0-1038.396.8.0-1039.406.8.0-1040.416.8.0-1041.426.8.0-1042.436.8.0-1043.446.8.0-1044.45
6.8.0-1047.48
linux-aws-fips
Ubuntu:Pro:FIPS-updates:24.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-1050.53+fips1, plus listed versions
6.8.0-1035.37+fips16.8.0-1036.38+fips16.8.0-1038.40+fips16.8.0-1039.41+fips16.8.0-1040.42+fips1
Show 7 moreShow less
6.8.0-1041.43+fips16.8.0-1042.44+fips16.8.0-1043.45+fips16.8.0-1044.46+fips16.8.0-1045.47+fips16.8.0-1046.49+fips16.8.0-1047.50+fips1
6.8.0-1050.53+fips1
linux-fips
Ubuntu:Pro:FIPS-updates:24.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-106.106+fips1, plus listed versions
6.8.0-38.38+fips46.8.0-78.78+fips16.8.0-79.79+fips16.8.0-83.83+fips16.8.0-84.84+fips1
Show 8 moreShow less
6.8.0-85.85+fips16.8.0-86.87+fips16.8.0-87.88+fips16.8.0-88.89+fips16.8.0-90.91+fips16.8.0-94.96+fips16.8.0-100.100+fips16.8.0-101.101+fips1
6.8.0-106.106+fips1
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:24.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-1052.55+fips1, plus listed versions
6.8.0-1036.38+fips16.8.0-1037.39+fips16.8.0-1039.41+fips16.8.0-1040.42+fips16.8.0-1041.43+fips1
Show 7 moreShow less
6.8.0-1042.45+fips16.8.0-1043.46+fips16.8.0-1044.47+fips16.8.0-1045.48+fips16.8.0-1046.49+fips16.8.0-1047.50+fips16.8.0-1048.51+fips1
6.8.0-1052.55+fips1
linux-realtime-6.8
Ubuntu:Pro:Realtime:22.04:LTS
From an advisory covering 423 CVEs
 before 6.8.1-1045.46~22.04.1, plus listed versions
6.8.1-1004.4~22.04.16.8.1-1005.5~22.04.26.8.1-1006.6~22.04.16.8.1-1007.7~22.04.16.8.1-1008.8~22.04.1
Show 29 moreShow less
6.8.1-1009.9~22.04.16.8.1-1010.10~22.04.16.8.1-1011.11~22.04.16.8.1-1012.12~22.04.16.8.1-1013.14~22.04.16.8.1-1014.15~22.04.16.8.1-1015.16~22.04.16.8.1-1016.17~22.04.16.8.1-1017.18~22.04.16.8.1-1018.19~22.04.16.8.1-1019.20~22.04.16.8.1-1020.21~22.04.16.8.1-1021.22~22.04.16.8.1-1022.23~22.04.16.8.1-1023.24~22.04.16.8.1-1024.25~22.04.16.8.1-1025.26~22.04.16.8.1-1026.27~22.04.16.8.1-1030.31~22.04.16.8.1-1031.32~22.04.16.8.1-1034.35~22.04.16.8.1-1035.36~22.04.16.8.1-1036.37~22.04.16.8.1-1037.38~22.04.16.8.1-1038.39~22.04.16.8.1-1039.40~22.04.16.8.1-1040.41~22.04.16.8.1-1041.42~22.04.16.8.1-1042.43~22.04.1
6.8.1-1045.46~22.04.1
linux-realtime
Ubuntu:Pro:Realtime:24.04:LTS
From an advisory covering 423 CVEs
 before 6.8.1-1045.46, plus listed versions
6.8.0-1008.196.8.1-1001.16.8.1-1002.26.8.1-1003.36.8.1-1004.4
Show 34 moreShow less
6.8.1-1005.56.8.1-1006.66.8.1-1007.76.8.1-1008.86.8.1-1009.96.8.1-1010.106.8.1-1011.116.8.1-1012.126.8.1-1013.146.8.1-1014.156.8.1-1015.166.8.1-1016.176.8.1-1017.186.8.1-1018.196.8.1-1019.206.8.1-1020.216.8.1-1021.226.8.1-1022.236.8.1-1023.246.8.1-1024.256.8.1-1025.266.8.1-1026.276.8.1-1030.316.8.1-1031.326.8.1-1033.346.8.1-1034.356.8.1-1035.366.8.1-1036.376.8.1-1037.386.8.1-1038.396.8.1-1039.406.8.1-1040.416.8.1-1041.426.8.1-1042.43
6.8.1-1045.46
linux-aws-6.8
Ubuntu:22.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-1050.53~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 27 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.1
6.8.0-1050.53~22.04.1
linux-raspi
Ubuntu:24.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-1050.54, plus listed versions
6.5.0-1005.76.7.0-1001.16.8.0-1001.16.8.0-1002.26.8.0-1003.3
Show 35 moreShow less
6.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.236.8.0-1020.246.8.0-1024.286.8.0-1028.326.8.0-1029.336.8.0-1030.346.8.0-1031.356.8.0-1032.366.8.0-1035.396.8.0-1036.406.8.0-1038.426.8.0-1039.436.8.0-1040.446.8.0-1041.456.8.0-1042.466.8.0-1043.476.8.0-1044.486.8.0-1045.496.8.0-1047.516.8.0-1048.52
6.8.0-1050.54
linux-raspi-realtime
Ubuntu:Pro:Realtime:24.04:LTS
From an advisory covering 423 CVEs
 before 6.8.0-2040.41, plus listed versions
6.7.0-2001.16.8.0-2001.16.8.0-2002.26.8.0-2004.46.8.0-2005.5
Show 30 moreShow less
6.8.0-2006.66.8.0-2007.76.8.0-2008.86.8.0-2009.96.8.0-2010.106.8.0-2011.116.8.0-2012.126.8.0-2013.146.8.0-2014.156.8.0-2015.166.8.0-2016.176.8.0-2017.186.8.0-2018.196.8.0-2019.206.8.0-2022.236.8.0-2023.246.8.0-2024.256.8.0-2025.266.8.0-2026.276.8.0-2028.296.8.0-2029.306.8.0-2030.316.8.0-2031.326.8.0-2032.336.8.0-2033.346.8.0-2034.356.8.0-2035.366.8.0-2036.376.8.0-2037.386.8.0-2038.39
6.8.0-2040.41
linux-nvidia-6.8
Ubuntu:22.04:LTS
From an advisory covering 425 CVEs
 before 6.8.0-1049.52~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1
Show 31 moreShow less
6.8.0-1013.14~22.04.16.8.0-1014.15~22.04.16.8.0-1015.16~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1022.25~22.04.26.8.0-1023.26~22.04.16.8.0-1024.27~22.04.16.8.0-1025.28~22.04.16.8.0-1026.29~22.04.16.8.0-1027.30~22.04.16.8.0-1028.31~22.04.16.8.0-1029.32~22.04.16.8.0-1030.33~22.04.16.8.0-1031.34~22.04.16.8.0-1032.35~22.04.16.8.0-1035.38~22.04.16.8.0-1036.39~22.04.16.8.0-1038.41~22.04.16.8.0-1039.42~22.04.16.8.0-1040.43~22.04.16.8.0-1041.44~22.04.26.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.1
6.8.0-1049.52~22.04.1
linux-nvidia
Ubuntu:24.04:LTS
From an advisory covering 425 CVEs
 before 6.8.0-1049.52, plus listed versions
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.11
Show 32 moreShow less
6.8.0-1012.126.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1022.256.8.0-1023.266.8.0-1024.276.8.0-1025.286.8.0-1026.296.8.0-1027.306.8.0-1028.316.8.0-1029.326.8.0-1030.336.8.0-1031.346.8.0-1032.356.8.0-1035.386.8.0-1036.396.8.0-1038.416.8.0-1039.426.8.0-1040.436.8.0-1041.446.8.0-1042.456.8.0-1043.466.8.0-1044.476.8.0-1045.486.8.0-1046.496.8.0-1047.50
6.8.0-1049.52
linux-nvidia-lowlatency
Ubuntu:24.04:LTS
From an advisory covering 425 CVEs
 before 6.8.0-1049.52.1, plus listed versions
6.8.0-1009.9.16.8.0-1011.11.16.8.0-1012.12.16.8.0-1013.14.16.8.0-1014.15.1
Show 29 moreShow less
6.8.0-1015.16.16.8.0-1017.19.16.8.0-1018.20.16.8.0-1019.21.16.8.0-1020.22.16.8.0-1021.23.16.8.0-1022.25.26.8.0-1023.26.16.8.0-1024.27.16.8.0-1025.28.16.8.0-1026.29.16.8.0-1027.30.16.8.0-1028.31.16.8.0-1029.32.16.8.0-1030.33.16.8.0-1031.34.16.8.0-1032.35.16.8.0-1035.38.16.8.0-1036.39.16.8.0-1038.41.16.8.0-1039.42.16.8.0-1040.43.16.8.0-1041.44.16.8.0-1042.45.16.8.0-1043.46.16.8.0-1044.47.16.8.0-1045.48.16.8.0-1046.49.16.8.0-1047.50.1
6.8.0-1049.52.1
linux-azure
Ubuntu:24.04:LTS
From an advisory covering 426 CVEs
 before 6.8.0-1051.57, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6
Show 27 moreShow less
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.206.8.0-1018.216.8.0-1020.236.8.0-1021.256.8.0-1025.306.8.0-1026.316.8.0-1027.326.8.0-1028.336.8.0-1029.346.8.0-1030.356.8.0-1031.366.8.0-1034.396.8.0-1038.446.8.0-1040.466.8.0-1041.476.8.0-1042.486.8.0-1044.506.8.0-1046.52
6.8.0-1051.57
linux-azure-6.8
Ubuntu:22.04:LTS
From an advisory covering 1179 CVEs
 before 6.8.0-1051.57~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1
Show 18 moreShow less
6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.1
6.8.0-1051.57~22.04.1
linux-azure-fips
Ubuntu:Pro:FIPS-updates:24.04:LTS
From an advisory covering 438 CVEs
 before 6.8.0-1052.58+fips1, plus listed versions
6.8.0-1034.39+fips16.8.0-1040.46+fips16.8.0-1044.50+fips16.8.0-1046.52+fips16.8.0-1047.53+fips1
6.8.0-1052.58+fips1
linux-xilinx
Ubuntu:24.04:LTS
From an advisory covering 609 CVEs
 before 6.8.0-1029.30, plus listed versions
6.8.0-1008.96.8.0-1009.106.8.0-1011.126.8.0-1012.136.8.0-1013.14
Show 11 moreShow less
6.8.0-1014.156.8.0-1015.166.8.0-1017.186.8.0-1018.196.8.0-1019.206.8.0-1020.216.8.0-1021.226.8.0-1022.236.8.0-1023.246.8.0-1024.256.8.0-1028.29
6.8.0-1029.30
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.6.1.160000.2.4
6.12.0-160000.6.1.160000.2.4
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1

History

History
RecordedChangedSources
affectedOSV
affected, aliases
affectedOSV
affected
affectedOSV
factsOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-39948 is a critical vulnerability (CVSS 9.8) in Linux, published October 4, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in linux-lts 6.12.51-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 48 versions, 2,284 references and the rest of 28 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open