Every CVE Search/ Get API key

CVE-2025-39965

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

7.8 HighPublic exploitFix available

In the Linux kernel, the following vulnerability has been resolved:

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value.

__xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.20%Up 0.2 points since Oct 14, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.8

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

In the Linux kernel, the following vulnerability has been resolved:

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value.

__xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list.

Record
CVE-2025-39965
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2025-34067 7.8

In the Linux kernel, the following vulnerability has been resolved:

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value.

__xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list.

Record
EUVD-2025-34067
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-jc8g-4mch-vjcv 7.8

In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn...

In the Linux kernel, the following vulnerability has been resolved:

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value.

__xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list.

Record
GHSA-jc8g-4mch-vjcv
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value.

__xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list.

Record
CVE-2025-39965
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2025-39965 5.5
Record
BELL-CVE-2025-39965
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-04
OSV 7.8

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

In the Linux kernel, the following vulnerability has been resolved:

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value.

__xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list.

Record
CVE-2025-39965
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 41 moreShow less
OSVDEBIAN-CVE-2025-39965 5.5

In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value. __xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list.

Record
DEBIAN-CVE-2025-39965
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-39965 5.5

In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value. __xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list.

Record
UBUNTU-CVE-2025-39965
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-68457 No score

CVE-2025-39965 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved:

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value.

__xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list.

Record
AZL-68457
Updated
2026-11-02
OSVCLSA-2025-1766599987 No score

kernel: Fix of 64 CVEs

  • xfrm: Duplicate SPI Handling {CVE-2025-39965}
  • xfrm: state: use atomic_inc_not_zero to increment refcount
  • padata: Fix pd UAF once and for all {CVE-2025-38584}
  • padata: Remove broken queue flushing {CVE-2023-52854}
  • padata: ensure padata_do_serial() runs on the correct CPU
  • Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305}
  • wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408}
  • sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718}
  • ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365}
  • Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386}
  • Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put {CVE-2022-3640}
  • ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917}
  • ipvs: fix WARNING in __ip_vs_cleanup_batch() {CVE-2022-49918}
  • ipvs: use explicitly signed chars
  • vt: Clear selection before changing the font {CVE-2022-49948}
  • fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117}
  • xen/netfront: react properly to failing gnttab_end_foreign_access_ref() {CVE-2022-48900}
  • netlink: prevent potential spectre v1 gadgets {CVE-2023-53000}
  • igb: Do not free q_vector unless new one was allocated {CVE-2022-50252}
  • scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546}
  • net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907}
  • dm raid: fix address sanitizer warning in raid_status {CVE-2022-50084}
  • dm raid: fix address sanitizer warning in raid_resume {CVE-2022-50085}
  • capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870}
  • wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258}
  • usb: xhci: Fix isochronous Ring Underrun/Overrun event handling {CVE-2025-37882}
  • Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}
  • ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751}
  • jbd2: remove wrong sb->s_sequence check {CVE-2025-37839}
  • net_sched: hfsc: Fix a UAF vulnerability in class handling
  • crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373}
Record
CLSA-2025-1766599987
Updated
2026-11-02
OSVCLSA-2025-1766600619 No score

kernel: Fix of 32 CVEs

  • xfrm: Duplicate SPI Handling {CVE-2025-39965}
  • xfrm: state: use atomic_inc_not_zero to increment refcount
  • padata: Fix pd UAF once and for all {CVE-2025-38584}
  • padata: Remove broken queue flushing {CVE-2023-52854}
  • padata: ensure padata_do_serial() runs on the correct CPU
  • Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305}
  • wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408}
  • sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718}
  • ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365}
  • Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386}
  • Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put {CVE-2022-3640}
  • ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917}
  • ipvs: fix WARNING in __ip_vs_cleanup_batch() {CVE-2022-49918}
  • ipvs: use explicitly signed chars
  • vt: Clear selection before changing the font {CVE-2022-49948}
  • fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117}
  • xen/netfront: react properly to failing gnttab_end_foreign_access_ref() {CVE-2022-48900}
  • netlink: prevent potential spectre v1 gadgets {CVE-2023-53000}
  • igb: Do not free q_vector unless new one was allocated {CVE-2022-50252}
  • scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546}
  • net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907}
  • dm raid: fix address sanitizer warning in raid_status {CVE-2022-50084}
  • dm raid: fix address sanitizer warning in raid_resume {CVE-2022-50085}
  • capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870}
  • wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258}
  • usb: xhci: Fix isochronous Ring Underrun/Overrun event handling {CVE-2025-37882}
  • Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}
  • ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751}
  • jbd2: remove wrong sb->s_sequence check {CVE-2025-37839}
  • net_sched: hfsc: Fix a UAF vulnerability in class handling
  • crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373}
Record
CLSA-2025-1766600619
Updated
2026-11-02
OSVCLSA-2025-1766617167 No score

kernel: Fix of 33 CVEs

  • xfrm: Duplicate SPI Handling {CVE-2025-39965}
  • xfrm: state: use atomic_inc_not_zero to increment refcount
  • padata: Fix pd UAF once and for all {CVE-2025-38584}
  • padata: Remove broken queue flushing {CVE-2023-52854}
  • padata: ensure padata_do_serial() runs on the correct CPU
  • Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305}
  • wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408}
  • sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718}
  • ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365}
  • Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386}
  • Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put {CVE-2022-3640}
  • ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917}
  • ipvs: fix WARNING in __ip_vs_cleanup_batch() {CVE-2022-49918}
  • ipvs: use explicitly signed chars
  • vt: Clear selection before changing the font {CVE-2022-49948}
  • fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117}
  • xen/netfront: react properly to failing gnttab_end_foreign_access_ref() {CVE-2022-48900}
  • netlink: prevent potential spectre v1 gadgets {CVE-2023-53000}
  • igb: Do not free q_vector unless new one was allocated {CVE-2022-50252}
  • scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546}
  • net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907}
  • dm raid: fix address sanitizer warning in raid_status {CVE-2022-50084}
  • dm raid: fix address sanitizer warning in raid_resume {CVE-2022-50085}
  • capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870}
  • wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258}
  • usb: xhci: Fix isochronous Ring Underrun/Overrun event handling {CVE-2025-37882}
  • Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}
  • ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751}
  • jbd2: remove wrong sb->s_sequence check {CVE-2025-37839}
  • net_sched: hfsc: Fix a UAF vulnerability in class handling
  • crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373}
Record
CLSA-2025-1766617167
Updated
2026-11-02
OSVCLSA-2026-1767864313 No score

kernel: Fix of 46 CVEs

  • mm: hugetlb: fix UAF in hugetlb_handle_userfault {CVE-2022-50630}
  • drm/amdkfd: fix potential kgd_mem UAFs {CVE-2023-53816}
  • net/mlx5e: Fix deadlock in tc route query code {CVE-2023-53591}
  • PCI: Fix pci_device_is_present() for VFs by checking PF {CVE-2022-50636}
  • wifi: ath11k: fix monitor mode bringup crash {CVE-2022-50627}
  • wifi: mac80211_hwsim: drop short frames {CVE-2023-53321}
  • scsi: target: iscsi: Fix timeout on deleted connection {CVE-2025-38075}
  • amdgpu: validate offset_in_bo of drm_amdgpu_gem_va {CVE-2023-53819}
  • dmaengine: ptdma: check for null desc before calling pt_cmd_callback {CVE-2023-53755}
  • wifi: mt7601u: fix an integer underflow {CVE-2023-53679}
  • Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673}
  • firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails {CVE-2022-50087}
  • tls: wait for pending async decryptions if tls_strp_msg_hold fails {CVE-2025-40176}
  • clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns {CVE-2025-38499}
  • net: openvswitch: reject negative ifindex {CVE-2023-53843}
  • drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833}
  • iommu/amd: Improve page fault error reporting {CVE-2023-53789}
  • media: v4l2-mem2mem: add lock to protect parameter num_rdy {CVE-2023-53519}
  • Bluetooth: Fix potential use-after-free when clear keys {CVE-2023-53386}
  • Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305}
  • ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285}
  • ext4: fix use-after-free in ext4_orphan_cleanup {CVE-2022-50673}
  • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
  • rxrpc: Make it so that a waiting process can be aborted {CVE-2023-53218}
  • ip6_vti: fix slab-use-after-free in decode_session6 {CVE-2023-53821}
  • vxlan: Fix nexthop hash size {CVE-2023-53192}
  • wifi: mac80211: check S1G action frame size {CVE-2023-53257}
  • wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() {CVE-2022-50279}
  • dm flakey: fix a crash with invalid table line {CVE-2023-53786}
  • md/raid10: fix null-ptr-deref in raid10_sync_request {CVE-2023-53832}
  • md: don't dereference mddev after export_rdev() {CVE-2023-53665}
  • md: fix 'delete_mutex' deadlock
  • md: fix duplicate filename for rdev {CVE-2023-53665}
  • kernfs: Fix UAF in polling when open file is released {CVE-2025-39881}
  • mptcp: pm: avoid possible UaF when selecting endp {CVE-2024-44974}
  • mptcp: fix UaF in listener shutdown {CVE-2023-53088}
  • Bluetooth: MGMT: Fix possible UAFs {CVE-2025-39981}
  • Bluetooth: hci_sync: fix set_local_name race condition
  • Bluetooth: MGMT: Fix possible deadlocks {CVE-2024-53207}
  • tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186}
  • e1000e: fix heap overflow in e1000_set_eeprom {CVE-2025-39898}
  • wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864}
  • nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724}
  • usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022}
  • xfrm: xfrm_alloc_spi shouldn't use 0 as SPI {CVE-2025-39965}
  • xfrm: Duplicate SPI Handling {CVE-2025-39797}
  • nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216}
  • NFS: Fix a race when updating an existing write {CVE-2025-39697}
  • nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
  • drm/amd/display: Check dce_hwseq before dereferencing it {CVE-2025-38361}
Record
CLSA-2026-1767864313
Updated
2026-11-02
OSVCLSA-2026-1772815097 No score

Fix of 104 CVEs

  • CVE-2025-38699
    • scsi: bfa: Double-free fix {CVE-2025-38699}
  • CVE-2025-38697
    • jfs: upper bound check of tree index in dbAllocAG {CVE-2025-38697}
  • CVE-2025-39823
    • KVM: x86: use array_index_nospec with indices that come from guest {CVE-2025-39823}
  • CVE-2025-39689
    • ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689}
  • CVE-2025-39749
    • rcu: Protect ->defer_qs_iw_pending from data race {CVE-2025-39749}
  • CVE-2025-38728
    • smb3: fix for slab out of bounds on mount to ksmbd {CVE-2025-38728}
  • CVE-2025-38676
    • iommu/amd: Avoid stack buffer overflow from kernel cmdline {CVE-2025-38676}
  • CVE-2025-38574
    • pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574}
  • CVE-2025-38572
    • ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572}
  • CVE-2025-38685
    • fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685}
  • CVE-2025-38563
    • vm_ops: rename .split() callback to .may_split() {CVE-2025-38563}
    • perf/core: Prevent VMA split of buffer mappings {CVE-2025-38563}
  • CVE-2025-38702
    • fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702}
  • CVE-2025-39911
    • i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911}
  • CVE-2025-39971
    • i40e: fix idx validation in config queues msg {CVE-2025-39971}
  • CVE-2025-40154
    • ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping {CVE-2025-40154}
  • CVE-2025-39973
    • i40e: increase max descriptors for XL710 {CVE-2025-39973}
    • i40e: add validation for ring_len param {CVE-2025-39973}
  • CVE-2022-49026
    • e100: Fix possible use after free in e100_xmit_prepare {CVE-2022-49026}
  • CVE-2025-38724
    • nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724}
  • CVE-2025-39853
    • i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853}
  • CVE-2025-39860
    • Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() {CVE-2025-39860}
  • CVE-2025-39891
    • wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891}
  • CVE-2025-38530
    • comedi: pcl812: Fix bit shift out of bounds {CVE-2025-38530}
  • CVE-2025-38529
    • comedi: aio_iiro_16: Fix bit shift out of bounds {CVE-2025-38529}
  • CVE-2025-38497
    • usb: gadget: configfs: Fix OOB read on empty string write {CVE-2025-38497}
  • CVE-2025-38483
    • comedi: das16m1: Fix bit shift out of bounds {CVE-2025-38483}
  • CVE-2025-38482
    • comedi: das6402: Fix bit shift out of bounds {CVE-2025-38482}
  • CVE-2025-39702
    • ipv6: sr: Fix MAC comparison to be constant-time {CVE-2025-39702}
  • CVE-2025-39730
    • NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() {CVE-2025-39730}
  • CVE-2025-39841
    • scsi: lpfc: Fix buffer free/clear order in deferred receive path {CVE-2025-39841}
  • CVE-2025-39817
    • efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817}
  • CVE-2025-38494
    • HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38494}
    • HID: core: ensure __hid_request reserves the report ID as the first byte {CVE-2025-38494}
    • HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494}
  • CVE-2025-39757
    • ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757}
  • CVE-2025-38527
    • smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527}
  • CVE-2023-52854
    • padata: Fix refcnt handling in padata_free_shell() {CVE-2023-52854}
  • CVE-2024-35867
    • smb: client: fix potential UAF in cifs_stats_proc_show() {CVE-2024-35867}
  • CVE-2024-50061
    • i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition {CVE-2024-50061}
  • CVE-2025-39965 -…
Record
CLSA-2026-1772815097
Updated
2026-11-02
OSVCLSA-2026-1773832495 No score

Fix of 132 CVEs

  • CVE-2023-53515
    • virtio-mmio: don't break lifecycle of vm_dev {CVE-2023-53515}
  • CVE-2025-39967
    • fbcon: fix integer overflow in fbcon_do_set_font {CVE-2025-39967}
    • fbcon: Fix OOB access in font allocation {CVE-2025-39967}
  • CVE-2025-38702
    • fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702}
  • CVE-2025-38563
    • perf/core: Prevent VMA split of buffer mappings {CVE-2025-38563}
  • CVE-2025-39869
    • dmaengine: ti: edma: Fix memory allocation size for queue_priority_map {CVE-2025-39869}
  • CVE-2023-53577
    • bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577}
  • CVE-2023-53608
    • nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() {CVE-2023-53608}
  • CVE-2023-53604
    • dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path {CVE-2023-53604}
  • CVE-2023-53619
    • netfilter: Replace printk() with pr_*() and define pr_fmt() {CVE-2023-53619}
    • netfilter: use kvmalloc_array to allocate memory for hashtable {CVE-2023-53619}
    • netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619}
  • CVE-2025-38680
    • media: uvcvideo: Fix 1-byte out-of-bounds read in {CVE-2025-38680}
  • CVE-2023-53454
    • HID: multitouch: Correct devm device reference for hidinput {CVE-2023-53454}
  • CVE-2025-38699
    • scsi: bfa: Double-free fix {CVE-2025-38699}
    • ubi: ensure that VID header offset + VID header size <= alloc, size {CVE-2023-53265}
    • scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676}
    • fs: jfs: Fix UBSAN: array-index-out-of-bounds in {CVE-2025-38699}
  • CVE-2023-53596
    • drivers: base: Free devm resources when unregistering a {CVE-2023-53596}
  • CVE-2023-53622
    • gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622}
    • HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition {CVE-2023-53622}
  • CVE-2023-53090
    • drm/amdkfd: Fix an illegal memory access {CVE-2023-53090}
  • CVE-2023-53116
    • nvmet: avoid potential UAF in nvmet_req_complete() {CVE-2023-53116}
  • CVE-2023-53138
    • net: caif: Fix use-after-free in cfusbl_device_notify() {CVE-2023-53138}
  • CVE-2023-53035
    • nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() {CVE-2023-53035}
  • CVE-2023-53668
    • ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668}
  • CVE-2023-53616
    • jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount {CVE-2023-53616}
  • CVE-2023-53554
    • staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() {CVE-2023-53554}
  • CVE-2023-53587
    • ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587}
  • CVE-2023-53541
    • mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write {CVE-2023-53541}
  • CVE-2023-53559
    • ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559}
  • CVE-2023-53484
    • lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484}
    • lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() {CVE-2023-53484}
  • CVE-2025-39824
    • HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824}
  • CVE-2025-38715
    • hfs: fix slab-out-of-bounds in hfs_bnode_read() {CVE-2025-38715}
  • CVE-2023-53153
    • wifi: cfg80211: Fix use after free for wext {CVE-2023-53153}
  • CVE-2025-38555
    • usb: gadget : fix use-after-free in composite_dev_cleanup() {CVE-2025-38555}
  • CVE-2025-39743
    • jfs: truncate good inode pages when hard link is 0 {CVE-2025-39743}
  • CVE-2025-39945
    • cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945}
  • CVE-2023-53506
    • udf: Do not bother merging very…
Record
CLSA-2026-1773832495
Updated
2026-11-02
OSVCLSA-2026-1773872435 No score

Fix of 137 CVEs

  • Miscellaneous Ubuntu changes
    • update-from-bionic-master repo has been updated
  • Miscellaneous upstream changes
    • debian: add control and changeg files [ Ubuntu: 4.15.0-254.265 ]
  • CVE-2023-53515
    • virtio-mmio: don't break lifecycle of vm_dev {CVE-2023-53515}
  • CVE-2025-39967
    • fbcon: fix integer overflow in fbcon_do_set_font {CVE-2025-39967}
    • fbcon: Fix OOB access in font allocation {CVE-2025-39967}
  • CVE-2025-38702
    • fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702}
  • CVE-2025-38563
    • perf/core: Prevent VMA split of buffer mappings {CVE-2025-38563}
  • CVE-2025-39869
    • dmaengine: ti: edma: Fix memory allocation size for queue_priority_map {CVE-2025-39869}
  • CVE-2023-53577
    • bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577}
  • CVE-2023-53608
    • nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() {CVE-2023-53608}
  • CVE-2023-53604
    • dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path {CVE-2023-53604}
  • CVE-2023-53619
    • netfilter: Replace printk() with pr_*() and define pr_fmt() {CVE-2023-53619}
    • netfilter: use kvmalloc_array to allocate memory for hashtable {CVE-2023-53619}
    • netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619}
  • CVE-2025-38680
    • media: uvcvideo: Fix 1-byte out-of-bounds read in {CVE-2025-38680}
  • CVE-2023-53454
    • HID: multitouch: Correct devm device reference for hidinput {CVE-2023-53454}
  • CVE-2025-38699
    • scsi: bfa: Double-free fix {CVE-2025-38699}
    • ubi: ensure that VID header offset + VID header size <= alloc, size {CVE-2023-53265}
    • scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676}
    • fs: jfs: Fix UBSAN: array-index-out-of-bounds in {CVE-2025-38699}
  • CVE-2023-53596
    • drivers: base: Free devm resources when unregistering a {CVE-2023-53596}
  • CVE-2023-53622
    • gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622}
    • HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition {CVE-2023-53622}
  • CVE-2023-53090
    • drm/amdkfd: Fix an illegal memory access {CVE-2023-53090}
  • CVE-2023-53116
    • nvmet: avoid potential UAF in nvmet_req_complete() {CVE-2023-53116}
  • CVE-2023-53138
    • net: caif: Fix use-after-free in cfusbl_device_notify() {CVE-2023-53138}
  • CVE-2023-53035
    • nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() {CVE-2023-53035}
  • CVE-2023-53668
    • ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668}
  • CVE-2023-53616
    • jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount {CVE-2023-53616}
  • CVE-2023-53554
    • staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() {CVE-2023-53554}
  • CVE-2023-53587
    • ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587}
  • CVE-2023-53541
    • mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write {CVE-2023-53541}
  • CVE-2023-53559
    • ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559}
  • CVE-2023-53484
    • lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484}
    • lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() {CVE-2023-53484}
  • CVE-2025-39824
    • HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824}
  • CVE-2025-38715
    • hfs: fix slab-out-of-bounds in hfs_bnode_read() {CVE-2025-38715}
  • CVE-2023-53153
    • wifi: cfg80211: Fix use after free for wext {CVE-2023-53153}
  • CVE-2025-38555
    • usb: gadget : fix use-after-free in composite_dev_cleanup() {CVE-2025-38555}
  • CVE-2025-39743
    • jfs: truncate good inode…
Record
CLSA-2026-1773872435
Updated
2026-11-02
OSVMGASA-2025-0309 No score

Updated kernel, kmod-xtables-addons & kmod-virtualbox packages fix security vulnerabilities

Upstream kernel version 6.6.116 fixes bugs and vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel.

Record
MGASA-2025-0309
Updated
2026-11-02
OSVMGASA-2025-0310 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.116 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2025-0310
Updated
2026-11-02
OSVopenSUSE-SU-2025:20091-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
  • CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
  • CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
  • CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
  • CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
  • CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
  • CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

  • add bug reference to existing hv_netvsc change (bsc#1252265) -…
Record
openSUSE-SU-2025:20091-1
Updated
2026-11-02
OSVSUSE-SU-2025:21040-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…
Record
SUSE-SU-2025:21040-1
Updated
2026-11-02
OSVSUSE-SU-2025:21052-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…
Record
SUSE-SU-2025:21052-1
Updated
2026-11-02
OSVSUSE-SU-2025:21056-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…
Record
SUSE-SU-2025:21056-1
Updated
2026-11-02
OSVSUSE-SU-2025:21064-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…
Record
SUSE-SU-2025:21064-1
Updated
2026-11-02
OSVSUSE-SU-2025:21080-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
  • CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
  • CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
  • CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
  • CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
  • CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
  • CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

  • add bug reference to existing hv_netvsc change (bsc#1252265) -…
Record
SUSE-SU-2025:21080-1
Updated
2026-11-02
OSVSUSE-SU-2025:21147-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
  • CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
  • CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
  • CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
  • CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
  • CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
  • CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

  • add bug reference to existing hv_netvsc change (bsc#1252265) -…
Record
SUSE-SU-2025:21147-1
Updated
2026-11-02
OSVSUSE-SU-2025:21180-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
  • CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
  • CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
  • CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
  • CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
  • CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
  • CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

  • add bug reference to existing hv_netvsc change (bsc#1252265) -…
Record
SUSE-SU-2025:21180-1
Updated
2026-11-02
OSVSUSE-SU-2025:4057-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
  • CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
  • CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
  • CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
  • CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
  • CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051). -…
Record
SUSE-SU-2025:4057-1
Updated
2026-11-02
OSVSUSE-SU-2025:4111-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
  • CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
  • CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
  • CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
  • CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
  • CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
  • CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
  • CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
  • CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
  • CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
  • CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
  • CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).
  • CVE-2025-40088: hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (bsc#1252904).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).

The following non security issues were fixed:

  • fbcon: Fix OOB access in font allocation (bsc#1252033)
  • mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
  • net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).
Record
SUSE-SU-2025:4111-1
Updated
2026-11-02
OSVSUSE-SU-2025:4128-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
  • CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr…
Record
SUSE-SU-2025:4128-1
Updated
2026-11-02
OSVSUSE-SU-2025:4132-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
  • CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
  • CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
  • CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
  • CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…
Record
SUSE-SU-2025:4132-1
Updated
2026-11-02
OSVSUSE-SU-2025:4139-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
  • CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
  • CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
  • CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
  • CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
  • CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
  • CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
  • CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
  • CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
  • CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
  • CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
  • CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).
  • CVE-2025-40088: hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (bsc#1252904).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).

The following non security issues were fixed:

  • fbcon: Fix OOB access in font allocation (bsc#1252033)
  • mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
  • net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).
Record
SUSE-SU-2025:4139-1
Updated
2026-11-02
OSVSUSE-SU-2025:4140-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures…
Record
SUSE-SU-2025:4140-1
Updated
2026-11-02
OSVSUSE-SU-2025:4141-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
  • CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
  • CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
  • CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
  • CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…
Record
SUSE-SU-2025:4141-1
Updated
2026-11-02
OSVSUSE-SU-2025:4149-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
  • CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
  • CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
  • CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
  • CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
  • CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
  • CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
  • CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
  • CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
  • CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
  • CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-38084: hugetlb: unshare some PMDs when splitting VMAs (bsc#1245498).
  • CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245499).
  • CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
  • CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
  • CVE-2025-39797: xfrm: Duplicate SPI Handling (bsc#1249608).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-39981: Bluetooth: MGMT: Fix possible UAFs (bsc#1252060).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).

The following non security issues were fixed:

  • NFS: remove revoked delegation from server's delegation list (bsc#1246211).
  • NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
  • fbcon: Fix OOB access in font allocation (bsc#1252033)
  • kabi fix for NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
  • mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
  • net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).
  • net: mana: Switch to page pool for jumbo frames (bsc#1248754).
  • net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency (bsc#1248754).
  • netfilter: nft_objref: validate objref and objrefmap expressions (bsc#1250237). No CVE available yet, please see the bugzilla ticket referenced.
Record
SUSE-SU-2025:4149-1
Updated
2026-11-02
OSVSUSE-SU-2025:4301-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319 bsc#1252236).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation…
Record
SUSE-SU-2025:4301-1
Updated
2026-11-02
OSVSUSE-SU-2025:4320-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
  • CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
  • CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
  • CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
  • CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
  • CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
  • CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
  • CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
  • CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
  • CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
  • CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-38084: hugetlb: unshare some PMDs when splitting VMAs (bsc#1245498).
  • CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245499).
  • CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
  • CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
  • CVE-2025-39797: xfrm: Duplicate SPI Handling (bsc#1249608).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-39981: Bluetooth: MGMT: Fix possible UAFs (bsc#1252060).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).

The following non security issues were fixed:

  • NFS: remove revoked delegation from server's delegation list (bsc#1246211).
  • NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
  • fbcon: Fix OOB access in font allocation (bsc#1252033)
  • kabi fix for NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
  • kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
  • mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
  • net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).
  • net: mana: Switch to page pool for jumbo frames (bsc#1248754).
  • net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency (bsc#1248754).
  • netfilter: nft_objref: validate objref and objrefmap expressions (bsc#1250237).
  • rpm/check-for-config-changes: ignore CONFIG_SCHED_PROXY_EXEC, too (bsc#1250946)
Record
SUSE-SU-2025:4320-1
Updated
2026-11-02
OSVSUSE-SU-2026:20561-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809).
  • CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067).
  • CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081).
  • CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
  • CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789).
  • CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
  • CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918).

The following non security issues were fixed:

  • add bug reference to existing hv_netvsc change (bsc#1252265) -…
Record
SUSE-SU-2026:20561-1
Updated
2026-11-02
OSVUSN-8095-1 No score

linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-1
Updated
2026-11-03
OSVUSN-8095-2 No score

linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-2
Updated
2026-11-03
OSVUSN-8095-3 No score

linux-realtime, linux-realtime-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-3
Updated
2026-11-03
OSVUSN-8095-4 No score

linux-aws-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-4
Updated
2026-11-03
OSVUSN-8095-5 No score

linux-raspi, linux-raspi-realtime vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-5
Updated
2026-11-03
OSVUSN-8100-1 No score

linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation; …
Record
USN-8100-1
Updated
2026-11-04
OSVUSN-8125-1 No score

linux-azure vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8125-1
Updated
2026-11-03
OSVUSN-8126-1 No score

linux-azure-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Block device driver;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Fastrpc Driver;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Amlogic Meson DDR PMU;
  • Performance monitor drivers;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • Texas Instruments SoC drivers;
  • SPI subsystem; -…
Record
USN-8126-1
Updated
2026-11-03
OSVUSN-8165-1 No score

linux-azure-fips vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853, CVE-2026-23268, CVE-2026-23269, CVE-2026-23403, CVE-2026-23404, CVE-2026-23405, CVE-2026-23406, CVE-2026-23407, CVE-2026-23408, CVE-2026-23409, CVE-2026-23410, CVE-2026-23411)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem; -…
Record
USN-8165-1
Updated
2026-11-04
OSVUSN-8261-1 No score

linux-xilinx vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcode causing loss of integrity and confidentiality. (CVE-2024-36347)

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853, CVE-2026-23268, CVE-2026-23269, CVE-2026-23403, CVE-2026-23404, CVE-2026-23405, CVE-2026-23406, CVE-2026-23407, CVE-2026-23408, CVE-2026-23409, CVE-2026-23410, CVE-2026-23411)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Hardware random number generator core;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • ISDN/mISDN subsystem;
  • Macintosh device drivers;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVME drivers;
  • PA-RISC drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Media Oriented Systems Transport (MOST) driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • Watchdog drivers;
  • Xen hypervisor drivers;
  • AFS file system;
  • BFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file…
Record
USN-8261-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Azure Linux:3
 before 6.6.112.1-1
6.6.112.1-1
linux-lts
Alpaquita:23
 6.1.191-r0 and later None known
linux-lts
Alpaquita:25
 6.12.44-r0 up to 6.12.51-r0
6.12.51-r0
bpftool
TuxCare:OracleLinux:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel
TuxCare:OracleLinux:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-debug
TuxCare:OracleLinux:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-devel
TuxCare:OracleLinux:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-headers
TuxCare:OracleLinux:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-tools
TuxCare:OracleLinux:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-tools-libs
TuxCare:OracleLinux:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-tools-libs-devel
TuxCare:OracleLinux:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
perf
TuxCare:OracleLinux:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
python-perf
TuxCare:OracleLinux:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
bpftool
TuxCare:RHEL:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel
TuxCare:RHEL:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-debug
TuxCare:RHEL:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-debug-devel
TuxCare:RHEL:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-devel
TuxCare:RHEL:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-headers
TuxCare:RHEL:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-tools
TuxCare:RHEL:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-tools-libs
TuxCare:RHEL:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-tools-libs-devel
TuxCare:RHEL:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
perf
TuxCare:RHEL:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
python-perf
TuxCare:RHEL:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
bpftool
TuxCare:CentOS:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel
TuxCare:CentOS:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-debug
TuxCare:CentOS:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-debug-devel
TuxCare:CentOS:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-devel
TuxCare:CentOS:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-headers
TuxCare:CentOS:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-tools
TuxCare:CentOS:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-tools-libs
TuxCare:CentOS:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
kernel-tools-libs-devel
TuxCare:CentOS:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
perf
TuxCare:CentOS:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
python-perf
TuxCare:CentOS:7
From an advisory covering 27 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els3
3.10.0-1160.139.1.el7.tuxcare.els3
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.7.els26
7.0.0-284.1101.el9_2.tuxcare.7.els26
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.7.els26
2:1.0.0-2.el9_2.tuxcare.7.els26
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.7.els26
2:1.0.0-2.el9_2.tuxcare.7.els26
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.7.els26
2:1.0.0-2.el9_2.tuxcare.7.els26
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
linux-buildinfo-5.4.0-225-tuxcare.els7-generic
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-buildinfo-5.4.0-225-tuxcare.els7-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-cloud-tools-5.4.0-225-tuxcare.els7
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-cloud-tools-5.4.0-225-tuxcare.els7-generic
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-cloud-tools-5.4.0-225-tuxcare.els7-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-cloud-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-doc
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-headers-5.4.0-225-tuxcare.els7
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-headers-5.4.0-225-tuxcare.els7-generic
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-headers-5.4.0-225-tuxcare.els7-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-image-unsigned-5.4.0-225-tuxcare.els7-generic
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-image-unsigned-5.4.0-225-tuxcare.els7-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-libc-dev
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-modules-5.4.0-225-tuxcare.els7-generic
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-modules-5.4.0-225-tuxcare.els7-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-modules-extra-5.4.0-225-tuxcare.els7-generic
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-source-5.4.0
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
linux-tools-5.4.0-225-tuxcare.els7
TuxCare:Ubuntu:20.04
From an advisory covering 72 CVEs
 before 5.4.0-225.245
5.4.0-225.245
Kernel
Linux
 6.6.103 up to 6.6.109, 6.12.43 up to 6.12.50, 6.16.2 up to 6.16.10
6.6.1096.12.506.16.10
linux
Debian:13
 before 6.12.57-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-1~bpo12+1
6.12.57-1
linux
Debian:14
 before 6.16.10-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
6.16.10-1
kernel
Mageia:9
From an advisory covering 119 CVEs
 before 6.6.116-1.mga9
6.6.116-1.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 119 CVEs
 before 3.24-87.mga9
3.24-87.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 119 CVEs
 before 7.1.14-13.mga9
7.1.14-13.mga9
kernel-linus
Mageia:9
From an advisory covering 119 CVEs
 before 6.6.116-1.mga9
6.6.116-1.mga9
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 191 CVEs
 before 6.4.0-36.1
6.4.0-36.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 191 CVEs
 before 6.4.0-36.1.21.13
6.4.0-36.1.21.13
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 191 CVEs
 before 6.4.0-36.1
6.4.0-36.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 191 CVEs
 before 6.4.0-36.1
6.4.0-36.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 191 CVEs
 before 6.4.0-38.1
6.4.0-38.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 191 CVEs
 before 6.4.0-38.1
6.4.0-38.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 191 CVEs
 before 6.4.0-36.1
6.4.0-36.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 191 CVEs
 before 6.4.0-36.1.21.13
6.4.0-36.1.21.13
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 191 CVEs
 before 6.4.0-36.1
6.4.0-36.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 191 CVEs
 before 6.4.0-36.1
6.4.0-36.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 191 CVEs
 before 6.4.0-38.1
6.4.0-38.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 191 CVEs
 before 6.4.0-38.1
6.4.0-38.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 83 CVEs
 before 6.12.0-160000.6.1.160000.2.4
6.12.0-160000.6.1.160000.2.4
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.6.1.160000.2.4
6.12.0-160000.6.1.160000.2.4
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.6.1.160000.2.4
6.12.0-160000.6.1.160000.2.4
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1.150700.17.15.1
6.4.0-150700.53.22.1.150700.17.15.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-livepatch-SLE15-SP7_Update_6
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 462 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 462 CVEs
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1.150400.24.94.2
5.14.21-150400.24.184.1.150400.24.94.2
kernel-default
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1.150400.24.94.2
5.14.21-150400.24.184.1.150400.24.94.2
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-livepatch-SLE15-SP4_Update_46
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 173 CVEs
 before 1-150400.9.5.1
1-150400.9.5.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1.150400.24.94.2
5.14.21-150400.24.184.1.150400.24.94.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1.150400.24.94.2
5.14.21-150400.24.184.1.150400.24.94.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1.150400.24.94.2
5.14.21-150400.24.184.1.150400.24.94.2
kernel-docs
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1.150400.24.94.2
5.14.21-150400.24.184.1.150400.24.94.2
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default
SUSE:Manager Proxy LTS 4.3
From an advisory covering 173 CVEs
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.8.55.1
6.4.0-150600.8.55.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.8.55.1
6.4.0-150600.8.55.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 189 CVEs
 before 6.4.0-150600.8.55.1
6.4.0-150600.8.55.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1.150600.12.34.2
6.4.0-150600.23.78.1.150600.12.34.2
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 190 CVEs
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-aws-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1050.53~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 27 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.1
6.8.0-1050.53~22.04.1
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
 None known
linux-gcp-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
 None known
linux-gcp-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
 None known
linux-gcp-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1
Show 8 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1
 None known
linux-gcp-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1052.55~22.04.1, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1
Show 29 moreShow less
6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.1
6.8.0-1052.55~22.04.1
linux-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
 None known
linux-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1
Show 5 moreShow less
6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1
 None known
linux-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1
Show 8 moreShow less
6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1
 None known
linux-hwe-6.8
Ubuntu:22.04:LTS
 before 6.8.0-106.106~22.04.1, plus listed versions
6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1
Show 23 moreShow less
6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.1
6.8.0-106.106~22.04.1
linux-ibm-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1049.49~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1
Show 25 moreShow less
6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.1
6.8.0-1049.49~22.04.1
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-lowlatency-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1
Show 5 moreShow less
5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30
 None known
linux-lowlatency-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1
Show 5 moreShow less
6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-lowlatency-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1
Show 8 moreShow less
6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1
 None known
linux-lowlatency-hwe-6.8
Ubuntu:22.04:LTS
 before 6.8.0-106.106.1~22.04.1, plus listed versions
6.8.0-38.38.1~22.04.26.8.0-40.40.1~22.04.16.8.0-44.44.1~22.04.16.8.0-45.45.1~22.04.16.8.0-47.47.1~22.04.1
Show 28 moreShow less
6.8.0-48.48.3~22.04.16.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-54.56.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.16.8.0-60.63.1~22.04.16.8.0-62.65.1~22.04.16.8.0-63.66.1~22.04.16.8.0-64.67.1~22.04.16.8.0-65.68.1~22.04.16.8.0-78.78.1~22.04.16.8.0-79.79.1~22.04.16.8.0-83.83.1~22.04.16.8.0-84.84.1~22.04.16.8.0-85.85.1~22.04.16.8.0-86.87.1~22.04.16.8.0-87.88.1~22.04.16.8.0-88.89.1~22.04.16.8.0-90.91.1~22.04.16.8.0-94.96.1~22.04.16.8.0-100.100.1~22.04.16.8.0-101.101.1~22.04.1
6.8.0-106.106.1~22.04.1
linux-nvidia-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15
 None known
linux-nvidia-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15
Show 6 moreShow less
6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25
 None known
linux-nvidia-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1049.52~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1
Show 31 moreShow less
6.8.0-1013.14~22.04.16.8.0-1014.15~22.04.16.8.0-1015.16~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1022.25~22.04.26.8.0-1023.26~22.04.16.8.0-1024.27~22.04.16.8.0-1025.28~22.04.16.8.0-1026.29~22.04.16.8.0-1027.30~22.04.16.8.0-1028.31~22.04.16.8.0-1029.32~22.04.16.8.0-1030.33~22.04.16.8.0-1031.34~22.04.16.8.0-1032.35~22.04.16.8.0-1035.38~22.04.16.8.0-1036.39~22.04.16.8.0-1038.41~22.04.16.8.0-1039.42~22.04.16.8.0-1040.43~22.04.16.8.0-1041.44~22.04.26.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.1
6.8.0-1049.52~22.04.1
linux-oem-5.17
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13
Show 21 moreShow less
5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36
 None known
linux-oem-6.0
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10
Show 11 moreShow less
6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21
 None known
linux-oem-6.1
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9
Show 22 moreShow less
6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36
 None known
linux-oem-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8
Show 14 moreShow less
6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28
 None known
linux-oracle-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1
Show 8 moreShow less
6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1
 None known
linux-oracle-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1047.48~22.04.1, plus listed versions
6.8.0-1006.6~22.04.36.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1
Show 29 moreShow less
6.8.0-1013.13~22.04.16.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.17~22.04.16.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.20~22.04.16.8.0-1020.21~22.04.16.8.0-1021.22~22.04.16.8.0-1022.23~22.04.16.8.0-1023.24~22.04.16.8.0-1024.25~22.04.16.8.0-1025.26~22.04.16.8.0-1026.27~22.04.16.8.0-1027.28~22.04.16.8.0-1028.29~22.04.16.8.0-1029.30~22.04.16.8.0-1030.31~22.04.16.8.0-1032.33~22.04.16.8.0-1033.34~22.04.16.8.0-1035.36~22.04.16.8.0-1037.38~22.04.16.8.0-1038.39~22.04.16.8.0-1039.40~22.04.16.8.0-1040.41~22.04.16.8.0-1041.42~22.04.16.8.0-1042.43~22.04.16.8.0-1043.44~22.04.16.8.0-1044.45~22.04.1
6.8.0-1047.48~22.04.1
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-riscv-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1
 None known
linux-riscv-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1
Show 5 moreShow less
6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1
 None known
linux-riscv-6.8
Ubuntu:22.04:LTS
 before 6.8.0-106.106~22.04.1, plus listed versions
6.8.0-38.38.1~22.04.16.8.0-39.39.1~22.04.16.8.0-40.40.1~22.04.16.8.0-41.41.1~22.04.16.8.0-44.44.1~22.04.1
Show 27 moreShow less
6.8.0-47.47.1~22.04.16.8.0-48.48.1~22.04.26.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-53.55.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.16.8.0-62.65~22.04.16.8.0-63.66~22.04.16.8.0-64.67~22.04.16.8.0-71.71~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.16.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.1
6.8.0-106.106~22.04.1
linux-starfive-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1
 None known
linux-starfive-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1
 None known
linux-starfive-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1
Show 6 moreShow less
6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.16.5.0-1017.18~22.04.16.5.0-1018.19~22.04.1
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.6.1.160000.2.4
6.12.0-160000.6.1.160000.2.4
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 83 CVEs
 before 6.12.0-160000.7.1
6.12.0-160000.7.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubShreyas-Penkar/CVE-2025-399652025-10-17

History

History
RecordedChangedSources
affected, aliases
affectedOSV
affectedOSV
factsOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-39965 is a high vulnerability (CVSS 7.8) in Linux, published October 13, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 9th percentile. Fixed in kernel 6.6.112.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 188 package rows, 49 versions, 2,765 references and the rest of 28 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open