Every CVE Search/ Get API key

CVE-2025-40181

x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP

No scoreFix available

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP

When running as an SNP or TDX guest under KVM, force the legacy PCI hole, i.e. memory between Top of Lower Usable DRAM and 4GiB, to be mapped as UC via a forced variable MTRR range.

In most KVM-based setups, legacy devices such as the HPET and TPM are enumerated via ACPI. ACPI enumeration includes a Memory32Fixed entry, and optionally a SystemMemory descriptor for an OperationRegion, e.g. if the device needs to be accessed via a Control Method.

If a SystemMemory entry is present, then the kernel's ACPI driver will auto-ioremap the region so that it can be accessed at will. However, the ACPI spec doesn't provide a way to enumerate the memory type of SystemMemory regions, i.e. there's no way to tell software that a region must be mapped as UC vs. WB, etc. As a result, Linux's ACPI driver always maps SystemMemory regions using ioremap_cache(), i.e. as WB on x86.

The dedicated device drivers however, e.g. the HPET driver and TPM driver, want to map their associated memory as UC or WC, as accessing PCI devices using WB is unsupported.

On bare metal and non-CoCO, the conflicting requirements "work" as firmware configures the PCI hole (and other device memory) to be UC in the MTRRs. So even though the ACPI mappings request WB, they are forced to UC- in the kernel's tracking due to the kernel properly handling the MTRR overrides, and thus are compatible with the drivers' requested WC/UC-.

With force WB MTRRs on SNP and TDX guests, the ACPI mappings get their requested WB if the ACPI mappings are established before the dedicated driver code attempts to initialize the device. E.g. if acpi_init() runs before the corresponding device driver is probed, ACPI's WB mapping will "win", and result in the driver's ioremap() failing because the existing WB mapping isn't compatible with the requested WC/UC-.

E.g. when a TPM is emulated by the hypervisor (ignoring the security implications of relying on what is allegedly an untrusted entity to store measurements), the TPM driver will request UC and fail:

[ 1.730459] ioremap error for 0xfed40000-0xfed45000, requested 0x2, got 0x0 [ 1.732780] tpm_tis MSFT0101:00: probe with driver tpm_tis failed with error -12

Note, the '0x2' and '0x0' values refer to "enum page_cache_mode", not x86's memtypes (which frustratingly are an almost pure inversion; 2 == WB, 0 == UC). E.g. tracing mapping requests for TPM TIS yields:

Mapping TPM TIS with req_type = 0 WARNING: CPU: 22 PID: 1 at arch/x86/mm/pat/memtype.c:530 memtype_reserve+0x2ab/0x460 Modules linked in: CPU: 22 UID: 0 PID: 1 Comm: swapper/0 Tainted: G W 6.16.0-rc7+ #2 VOLUNTARY Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/29/2025 RIP: 0010:memtype_reserve+0x2ab/0x460 __ioremap_caller+0x16d/0x3d0 ioremap_cache+0x17/0x30 x86_acpi_os_ioremap+0xe/0x20 acpi_os_map_iomem+0x1f3/0x240 acpi_os_map_memory+0xe/0x20 acpi_ex_system_memory_space_handler+0x273/0x440 acpi_ev_address_space_dispatch+0x176/0x4c0 acpi_ex_access_region+0x2ad/0x530 acpi_ex_field_datum_io+0xa2/0x4f0 acpi_ex_extract_from_field+0x296/0x3e0 acpi_ex_read_data_from_field+0xd1/0x460 acpi_ex_resolve_node_to_value+0x2ee/0x530 acpi_ex_resolve_to_value+0x1f2/0x540 acpi_ds_evaluate_name_path+0x11b/0x190 acpi_ds_exec_end_op+0x456/0x960 acpi_ps_parse_loop+0x27a/0xa50 acpi_ps_parse_aml+0x226/0x600 acpi_ps_execute_method+0x172/0x3e0 acpi_ns_evaluate+0x175/0x5f0 acpi_evaluate_object+0x213/0x490 acpi_evaluate_integer+0x6d/0x140 acpi_bus_get_status+0x93/0x150 acpi_add_single_object+0x43a/0x7c0 acpi_bus_check_add+0x149/0x3a0 acpi_bus_check_add_1+0x16/0x30 acpi_ns_walk_namespace+0x22c/0x360 acpi_walk_namespace+0x15c/0x170 acpi_bus_scan+0x1dd/0x200 acpi_scan_init+0xe5/0x2b0 acpi_init+0x264/0x5b0 do_one_i ---truncated---

Exploit likelihood

0.21%Up 0.2 points since Nov 13, 2025
90%50%10%1%

What each source reports

CVE List No score

x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP

When running as an SNP or TDX guest under KVM, force the legacy PCI hole, i.e. memory between Top of Lower Usable DRAM and 4GiB, to be mapped as UC via a forced variable MTRR range.

In most KVM-based setups, legacy devices such as the HPET and TPM are enumerated via ACPI. ACPI enumeration includes a Memory32Fixed entry, and optionally a SystemMemory descriptor for an OperationRegion, e.g. if the device needs to be accessed via a Control Method.

If a SystemMemory entry is present, then the kernel's ACPI driver will auto-ioremap the region so that it can be accessed at will. However, the ACPI spec doesn't provide a way to enumerate the memory type of SystemMemory regions, i.e. there's no way to tell software that a region must be mapped as UC vs. WB, etc. As a result, Linux's ACPI driver always maps SystemMemory regions using ioremap_cache(), i.e. as WB on x86.

The dedicated device drivers however, e.g. the HPET driver and TPM driver, want to map their associated memory as UC or WC, as accessing PCI devices using WB is unsupported.

On bare metal and non-CoCO, the conflicting requirements "work" as firmware configures the PCI hole (and other device memory) to be UC in the MTRRs. So even though the ACPI mappings request WB, they are forced to UC- in the kernel's tracking due to the kernel properly handling the MTRR overrides, and thus are compatible with the drivers' requested WC/UC-.

With force WB MTRRs on SNP and TDX guests, the ACPI mappings get their requested WB if the ACPI mappings are established before the dedicated driver code attempts to initialize the device. E.g. if acpi_init() runs before the corresponding device driver is probed, ACPI's WB mapping will "win", and result in the driver's ioremap() failing because the existing WB mapping isn't compatible with the requested WC/UC-.

E.g. when a TPM is emulated by the hypervisor (ignoring the security implications of relying on what is allegedly an untrusted entity to store measurements), the TPM driver will request UC and fail:

[ 1.730459] ioremap error for 0xfed40000-0xfed45000, requested 0x2, got 0x0 [ 1.732780] tpm_tis MSFT0101:00: probe with driver tpm_tis failed with error -12

Note, the '0x2' and '0x0' values refer to "enum page_cache_mode", not x86's memtypes (which frustratingly are an almost pure inversion; 2 == WB, 0 == UC). E.g. tracing mapping requests for TPM TIS yields:

Mapping TPM TIS with req_type = 0 WARNING: CPU: 22 PID: 1 at arch/x86/mm/pat/memtype.c:530 memtype_reserve+0x2ab/0x460 Modules linked in: CPU: 22 UID: 0 PID: 1 Comm: swapper/0 Tainted: G W 6.16.0-rc7+ #2 VOLUNTARY Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/29/2025 RIP: 0010:memtype_reserve+0x2ab/0x460 __ioremap_caller+0x16d/0x3d0 ioremap_cache+0x17/0x30 x86_acpi_os_ioremap+0xe/0x20 acpi_os_map_iomem+0x1f3/0x240 acpi_os_map_memory+0xe/0x20 acpi_ex_system_memory_space_handler+0x273/0x440 acpi_ev_address_space_dispatch+0x176/0x4c0 acpi_ex_access_region+0x2ad/0x530 acpi_ex_field_datum_io+0xa2/0x4f0 acpi_ex_extract_from_field+0x296/0x3e0 acpi_ex_read_data_from_field+0xd1/0x460 acpi_ex_resolve_node_to_value+0x2ee/0x530 acpi_ex_resolve_to_value+0x1f2/0x540 acpi_ds_evaluate_name_path+0x11b/0x190 acpi_ds_exec_end_op+0x456/0x960 acpi_ps_parse_loop+0x27a/0xa50 acpi_ps_parse_aml+0x226/0x600 acpi_ps_execute_method+0x172/0x3e0 acpi_ns_evaluate+0x175/0x5f0 acpi_evaluate_object+0x213/0x490 acpi_evaluate_integer+0x6d/0x140 acpi_bus_get_status+0x93/0x150 acpi_add_single_object+0x43a/0x7c0 acpi_bus_check_add+0x149/0x3a0 acpi_bus_check_add_1+0x16/0x30 acpi_ns_walk_namespace+0x22c/0x360 acpi_walk_namespace+0x15c/0x170 acpi_bus_scan+0x1dd/0x200 acpi_scan_init+0xe5/0x2b0 acpi_init+0x264/0x5b0 do_one_i ---truncated---

Record
CVE-2025-40181
Updated
2026-11-02
EUVDEUVD-2025-150393 No score

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP

When running as an SNP or TDX guest under KVM, force the legacy PCI hole, i.e. memory between Top of Lower Usable DRAM and 4GiB, to be mapped as UC via a forced variable MTRR range.

In most KVM-based setups, legacy devices such as the HPET and TPM are enumerated via ACPI. ACPI enumeration includes a Memory32Fixed entry, and optionally a SystemMemory descriptor for an OperationRegion, e.g. if the device needs to be accessed via a Control Method.

If a SystemMemory entry is present, then the kernel's ACPI driver will auto-ioremap the region so that it can be accessed at will. However, the ACPI spec doesn't provide a way to enumerate the memory type of SystemMemory regions, i.e. there's no way to tell software that a region must be mapped as UC vs. WB, etc. As a result, Linux's ACPI driver always maps SystemMemory regions using ioremap_cache(), i.e. as WB on x86.

The dedicated device drivers however, e.g. the HPET driver and TPM driver, want to map their associated memory as UC or WC, as accessing PCI devices using WB is unsupported.

On bare metal and non-CoCO, the conflicting requirements "work" as firmware configures the PCI hole (and other device memory) to be UC in the MTRRs. So even though the ACPI mappings request WB, they are forced to UC- in the kernel's tracking due to the kernel properly handling the MTRR overrides, and thus are compatible with the drivers' requested WC/UC-.

With force WB MTRRs on SNP and TDX guests, the ACPI mappings get their requested WB if the ACPI mappings are established before the dedicated driver code attempts to initialize the device. E.g. if acpi_init() runs before the corresponding device driver is probed, ACPI's WB mapping will "win", and result in the driver's ioremap() failing because the existing WB mapping isn't compatible with the requested WC/UC-.

E.g. when a TPM is emulated by the hypervisor (ignoring the security implications of relying on what is allegedly an untrusted entity to store measurements), the TPM driver will request UC and fail:

[ 1.730459] ioremap error for 0xfed40000-0xfed45000, requested 0x2, got 0x0 [ 1.732780] tpm_tis MSFT0101:00: probe with driver tpm_tis failed with error -12

Note, the '0x2' and '0x0' values refer to "enum page_cache_mode", not x86's memtypes (which frustratingly are an almost pure inversion; 2 == WB, 0 == UC). E.g. tracing mapping requests for TPM TIS yields:

Mapping TPM TIS with req_type = 0 WARNING: CPU: 22 PID: 1 at arch/x86/mm/pat/memtype.c:530 memtype_reserve+0x2ab/0x460 Modules linked in: CPU: 22 UID: 0 PID: 1 Comm: swapper/0 Tainted: G W 6.16.0-rc7+ #2 VOLUNTARY Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/29/2025 RIP: 0010:memtype_reserve+0x2ab/0x460 __ioremap_caller+0x16d/0x3d0 ioremap_cache+0x17/0x30 x86_acpi_os_ioremap+0xe/0x20 acpi_os_map_iomem+0x1f3/0x240 acpi_os_map_memory+0xe/0x20 acpi_ex_system_memory_space_handler+0x273/0x440 acpi_ev_address_space_dispatch+0x176/0x4c0 acpi_ex_access_region+0x2ad/0x530 acpi_ex_field_datum_io+0xa2/0x4f0 acpi_ex_extract_from_field+0x296/0x3e0 acpi_ex_read_data_from_field+0xd1/0x460 acpi_ex_resolve_node_to_value+0x2ee/0x530 acpi_ex_resolve_to_value+0x1f2/0x540 acpi_ds_evaluate_name_path+0x11b/0x190 acpi_ds_exec_end_op+0x456/0x960 acpi_ps_parse_loop+0x27a/0xa50 acpi_ps_parse_aml+0x226/0x600 acpi_ps_execute_method+0x172/0x3e0 acpi_ns_evaluate+0x175/0x5f0 acpi_evaluate_object+0x213/0x490 acpi_evaluate_integer+0x6d/0x140 acpi_bus_get_status+0x93/0x150 acpi_add_single_object+0x43a/0x7c0 acpi_bus_check_add+0x149/0x3a0 acpi_bus_check_add_1+0x16/0x30 acpi_ns_walk_namespace+0x22c/0x360 acpi_walk_namespace+0x15c/0x170 acpi_bus_scan+0x1dd/0x200 acpi_scan_init+0xe5/0x2b0 acpi_init+0x264/0x5b0 do_one_i ---truncated---

Record
EUVD-2025-150393
Updated
2026-11-02
GitHub AdvisoriesGHSA-x7gh-c69c-j2v8 No score

In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Force legacy PCI...

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP

When running as an SNP or TDX guest under KVM, force the legacy PCI hole, i.e. memory between Top of Lower Usable DRAM and 4GiB, to be mapped as UC via a forced variable MTRR range.

In most KVM-based setups, legacy devices such as the HPET and TPM are enumerated via ACPI. ACPI enumeration includes a Memory32Fixed entry, and optionally a SystemMemory descriptor for an OperationRegion, e.g. if the device needs to be accessed via a Control Method.

If a SystemMemory entry is present, then the kernel's ACPI driver will auto-ioremap the region so that it can be accessed at will. However, the ACPI spec doesn't provide a way to enumerate the memory type of SystemMemory regions, i.e. there's no way to tell software that a region must be mapped as UC vs. WB, etc. As a result, Linux's ACPI driver always maps SystemMemory regions using ioremap_cache(), i.e. as WB on x86.

The dedicated device drivers however, e.g. the HPET driver and TPM driver, want to map their associated memory as UC or WC, as accessing PCI devices using WB is unsupported.

On bare metal and non-CoCO, the conflicting requirements "work" as firmware configures the PCI hole (and other device memory) to be UC in the MTRRs. So even though the ACPI mappings request WB, they are forced to UC- in the kernel's tracking due to the kernel properly handling the MTRR overrides, and thus are compatible with the drivers' requested WC/UC-.

With force WB MTRRs on SNP and TDX guests, the ACPI mappings get their requested WB if the ACPI mappings are established before the dedicated driver code attempts to initialize the device. E.g. if acpi_init() runs before the corresponding device driver is probed, ACPI's WB mapping will "win", and result in the driver's ioremap() failing because the existing WB mapping isn't compatible with the requested WC/UC-.

E.g. when a TPM is emulated by the hypervisor (ignoring the security implications of relying on what is allegedly an untrusted entity to store measurements), the TPM driver will request UC and fail:

[ 1.730459] ioremap error for 0xfed40000-0xfed45000, requested 0x2, got 0x0 [ 1.732780] tpm_tis MSFT0101:00: probe with driver tpm_tis failed with error -12

Note, the '0x2' and '0x0' values refer to "enum page_cache_mode", not x86's memtypes (which frustratingly are an almost pure inversion; 2 == WB, 0 == UC). E.g. tracing mapping requests for TPM TIS yields:

Mapping TPM TIS with req_type = 0 WARNING: CPU: 22 PID: 1 at arch/x86/mm/pat/memtype.c:530 memtype_reserve+0x2ab/0x460 Modules linked in: CPU: 22 UID: 0 PID: 1 Comm: swapper/0 Tainted: G W 6.16.0-rc7+ #2 VOLUNTARY Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/29/2025 RIP: 0010:memtype_reserve+0x2ab/0x460 __ioremap_caller+0x16d/0x3d0 ioremap_cache+0x17/0x30 x86_acpi_os_ioremap+0xe/0x20 acpi_os_map_iomem+0x1f3/0x240 acpi_os_map_memory+0xe/0x20 acpi_ex_system_memory_space_handler+0x273/0x440 acpi_ev_address_space_dispatch+0x176/0x4c0 acpi_ex_access_region+0x2ad/0x530 acpi_ex_field_datum_io+0xa2/0x4f0 acpi_ex_extract_from_field+0x296/0x3e0 acpi_ex_read_data_from_field+0xd1/0x460 acpi_ex_resolve_node_to_value+0x2ee/0x530 acpi_ex_resolve_to_value+0x1f2/0x540 acpi_ds_evaluate_name_path+0x11b/0x190 acpi_ds_exec_end_op+0x456/0x960 acpi_ps_parse_loop+0x27a/0xa50 acpi_ps_parse_aml+0x226/0x600 acpi_ps_execute_method+0x172/0x3e0 acpi_ns_evaluate+0x175/0x5f0 acpi_evaluate_object+0x213/0x490 acpi_evaluate_integer+0x6d/0x140 acpi_bus_get_status+0x93/0x150 acpi_add_single_object+0x43a/0x7c0 acpi_bus_check_add+0x149/0x3a0 acpi_bus_check_add_1+0x16/0x30 acpi_ns_walk_namespace+0x22c/0x360 acpi_walk_namespace+0x15c/0x170 acpi_bus_scan+0x1dd/0x200 acpi_scan_init+0xe5/0x2b0 acpi_init+0x264/0x5b0 do_one_i ---truncated---

Record
GHSA-x7gh-c69c-j2v8
Updated
2026-11-02
NVD No score

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP

When running as an SNP or TDX guest under KVM, force the legacy PCI hole, i.e. memory between Top of Lower Usable DRAM and 4GiB, to be mapped as UC via a forced variable MTRR range.

In most KVM-based setups, legacy devices such as the HPET and TPM are enumerated via ACPI. ACPI enumeration includes a Memory32Fixed entry, and optionally a SystemMemory descriptor for an OperationRegion, e.g. if the device needs to be accessed via a Control Method.

If a SystemMemory entry is present, then the kernel's ACPI driver will auto-ioremap the region so that it can be accessed at will. However, the ACPI spec doesn't provide a way to enumerate the memory type of SystemMemory regions, i.e. there's no way to tell software that a region must be mapped as UC vs. WB, etc. As a result, Linux's ACPI driver always maps SystemMemory regions using ioremap_cache(), i.e. as WB on x86.

The dedicated device drivers however, e.g. the HPET driver and TPM driver, want to map their associated memory as UC or WC, as accessing PCI devices using WB is unsupported.

On bare metal and non-CoCO, the conflicting requirements "work" as firmware configures the PCI hole (and other device memory) to be UC in the MTRRs. So even though the ACPI mappings request WB, they are forced to UC- in the kernel's tracking due to the kernel properly handling the MTRR overrides, and thus are compatible with the drivers' requested WC/UC-.

With force WB MTRRs on SNP and TDX guests, the ACPI mappings get their requested WB if the ACPI mappings are established before the dedicated driver code attempts to initialize the device. E.g. if acpi_init() runs before the corresponding device driver is probed, ACPI's WB mapping will "win", and result in the driver's ioremap() failing because the existing WB mapping isn't compatible with the requested WC/UC-.

E.g. when a TPM is emulated by the hypervisor (ignoring the security implications of relying on what is allegedly an untrusted entity to store measurements), the TPM driver will request UC and fail:

[ 1.730459] ioremap error for 0xfed40000-0xfed45000, requested 0x2, got 0x0 [ 1.732780] tpm_tis MSFT0101:00: probe with driver tpm_tis failed with error -12

Note, the '0x2' and '0x0' values refer to "enum page_cache_mode", not x86's memtypes (which frustratingly are an almost pure inversion; 2 == WB, 0 == UC). E.g. tracing mapping requests for TPM TIS yields:

Mapping TPM TIS with req_type = 0 WARNING: CPU: 22 PID: 1 at arch/x86/mm/pat/memtype.c:530 memtype_reserve+0x2ab/0x460 Modules linked in: CPU: 22 UID: 0 PID: 1 Comm: swapper/0 Tainted: G W 6.16.0-rc7+ #2 VOLUNTARY Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/29/2025 RIP: 0010:memtype_reserve+0x2ab/0x460 __ioremap_caller+0x16d/0x3d0 ioremap_cache+0x17/0x30 x86_acpi_os_ioremap+0xe/0x20 acpi_os_map_iomem+0x1f3/0x240 acpi_os_map_memory+0xe/0x20 acpi_ex_system_memory_space_handler+0x273/0x440 acpi_ev_address_space_dispatch+0x176/0x4c0 acpi_ex_access_region+0x2ad/0x530 acpi_ex_field_datum_io+0xa2/0x4f0 acpi_ex_extract_from_field+0x296/0x3e0 acpi_ex_read_data_from_field+0xd1/0x460 acpi_ex_resolve_node_to_value+0x2ee/0x530 acpi_ex_resolve_to_value+0x1f2/0x540 acpi_ds_evaluate_name_path+0x11b/0x190 acpi_ds_exec_end_op+0x456/0x960 acpi_ps_parse_loop+0x27a/0xa50 acpi_ps_parse_aml+0x226/0x600 acpi_ps_execute_method+0x172/0x3e0 acpi_ns_evaluate+0x175/0x5f0 acpi_evaluate_object+0x213/0x490 acpi_evaluate_integer+0x6d/0x140 acpi_bus_get_status+0x93/0x150 acpi_add_single_object+0x43a/0x7c0 acpi_bus_check_add+0x149/0x3a0 acpi_bus_check_add_1+0x16/0x30 acpi_ns_walk_namespace+0x22c/0x360 acpi_walk_namespace+0x15c/0x170 acpi_bus_scan+0x1dd/0x200 acpi_scan_init+0xe5/0x2b0 acpi_init+0x264/0x5b0 do_one_i ---truncated---

Record
CVE-2025-40181
Updated
2026-11-02
OSV No score

x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP

When running as an SNP or TDX guest under KVM, force the legacy PCI hole, i.e. memory between Top of Lower Usable DRAM and 4GiB, to be mapped as UC via a forced variable MTRR range.

In most KVM-based setups, legacy devices such as the HPET and TPM are enumerated via ACPI. ACPI enumeration includes a Memory32Fixed entry, and optionally a SystemMemory descriptor for an OperationRegion, e.g. if the device needs to be accessed via a Control Method.

If a SystemMemory entry is present, then the kernel's ACPI driver will auto-ioremap the region so that it can be accessed at will. However, the ACPI spec doesn't provide a way to enumerate the memory type of SystemMemory regions, i.e. there's no way to tell software that a region must be mapped as UC vs. WB, etc. As a result, Linux's ACPI driver always maps SystemMemory regions using ioremap_cache(), i.e. as WB on x86.

The dedicated device drivers however, e.g. the HPET driver and TPM driver, want to map their associated memory as UC or WC, as accessing PCI devices using WB is unsupported.

On bare metal and non-CoCO, the conflicting requirements "work" as firmware configures the PCI hole (and other device memory) to be UC in the MTRRs. So even though the ACPI mappings request WB, they are forced to UC- in the kernel's tracking due to the kernel properly handling the MTRR overrides, and thus are compatible with the drivers' requested WC/UC-.

With force WB MTRRs on SNP and TDX guests, the ACPI mappings get their requested WB if the ACPI mappings are established before the dedicated driver code attempts to initialize the device. E.g. if acpi_init() runs before the corresponding device driver is probed, ACPI's WB mapping will "win", and result in the driver's ioremap() failing because the existing WB mapping isn't compatible with the requested WC/UC-.

E.g. when a TPM is emulated by the hypervisor (ignoring the security implications of relying on what is allegedly an untrusted entity to store measurements), the TPM driver will request UC and fail:

[ 1.730459] ioremap error for 0xfed40000-0xfed45000, requested 0x2, got 0x0 [ 1.732780] tpm_tis MSFT0101:00: probe with driver tpm_tis failed with error -12

Note, the '0x2' and '0x0' values refer to "enum page_cache_mode", not x86's memtypes (which frustratingly are an almost pure inversion; 2 == WB, 0 == UC). E.g. tracing mapping requests for TPM TIS yields:

Mapping TPM TIS with req_type = 0 WARNING: CPU: 22 PID: 1 at arch/x86/mm/pat/memtype.c:530 memtype_reserve+0x2ab/0x460 Modules linked in: CPU: 22 UID: 0 PID: 1 Comm: swapper/0 Tainted: G W 6.16.0-rc7+ #2 VOLUNTARY Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/29/2025 RIP: 0010:memtype_reserve+0x2ab/0x460 __ioremap_caller+0x16d/0x3d0 ioremap_cache+0x17/0x30 x86_acpi_os_ioremap+0xe/0x20 acpi_os_map_iomem+0x1f3/0x240 acpi_os_map_memory+0xe/0x20 acpi_ex_system_memory_space_handler+0x273/0x440 acpi_ev_address_space_dispatch+0x176/0x4c0 acpi_ex_access_region+0x2ad/0x530 acpi_ex_field_datum_io+0xa2/0x4f0 acpi_ex_extract_from_field+0x296/0x3e0 acpi_ex_read_data_from_field+0xd1/0x460 acpi_ex_resolve_node_to_value+0x2ee/0x530 acpi_ex_resolve_to_value+0x1f2/0x540 acpi_ds_evaluate_name_path+0x11b/0x190 acpi_ds_exec_end_op+0x456/0x960 acpi_ps_parse_loop+0x27a/0xa50 acpi_ps_parse_aml+0x226/0x600 acpi_ps_execute_method+0x172/0x3e0 acpi_ns_evaluate+0x175/0x5f0 acpi_evaluate_object+0x213/0x490 acpi_evaluate_integer+0x6d/0x140 acpi_bus_get_status+0x93/0x150 acpi_add_single_object+0x43a/0x7c0 acpi_bus_check_add+0x149/0x3a0 acpi_bus_check_add_1+0x16/0x30 acpi_ns_walk_namespace+0x22c/0x360 acpi_walk_namespace+0x15c/0x170 acpi_bus_scan+0x1dd/0x200 acpi_scan_init+0xe5/0x2b0 acpi_init+0x264/0x5b0 do_one_i ---truncated---

Record
CVE-2025-40181
Updated
2026-11-02
OSVDEBIAN-CVE-2025-40181 No score

In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP When running as an SNP or TDX guest under KVM, force the legacy PCI hole, i.e. memory between Top of Lower Usable DRAM and 4GiB, to be mapped as UC via a forced variable MTRR range. In most KVM-based setups, legacy devices such as the HPET and TPM are enumerated via ACPI. ACPI enumeration includes a Memory32Fixed entry, and optionally a SystemMemory descriptor for an OperationRegion, e.g. if the device needs to be accessed via a Control Method. If a SystemMemory entry is present, then the kernel's ACPI driver will auto-ioremap the region so that it can be accessed at will. However, the ACPI spec doesn't provide a way to enumerate the memory type of SystemMemory regions, i.e. there's no way to tell software that a region must be mapped as UC vs. WB, etc. As a result, Linux's ACPI driver always maps SystemMemory regions using ioremap_cache(), i.e. as WB on x86. The dedicated device drivers however, e.g. the HPET driver and TPM driver, want to map their associated memory as UC or WC, as accessing PCI devices using WB is unsupported. On bare metal and non-CoCO, the conflicting requirements "work" as firmware configures the PCI hole (and other device memory) to be UC in the MTRRs. So even though the ACPI mappings request WB, they are forced to UC- in the kernel's tracking due to the kernel properly handling the MTRR overrides, and thus are compatible with the drivers' requested WC/UC-. With force WB MTRRs on SNP and TDX guests, the ACPI mappings get their requested WB if the ACPI mappings are established before the dedicated driver code attempts to initialize the device. E.g. if acpi_init() runs before the corresponding device driver is probed, ACPI's WB mapping will "win", and result in the driver's ioremap() failing because the existing WB mapping isn't compatible with the requested WC/UC-. E.g. when a TPM is emulated by the hypervisor (ignoring the security implications of relying on what is allegedly an untrusted entity to store measurements), the TPM driver will request UC and fail: [ 1.730459] ioremap error for 0xfed40000-0xfed45000, requested 0x2, got 0x0 [ 1.732780] tpm_tis MSFT0101:00: probe with driver tpm_tis failed with error -12 Note, the '0x2' and '0x0' values refer to "enum page_cache_mode", not x86's memtypes (which frustratingly are an almost pure inversion; 2 == WB, 0 == UC). E.g. tracing mapping requests for TPM TIS yields: Mapping TPM TIS with req_type = 0 WARNING: CPU: 22 PID: 1 at arch/x86/mm/pat/memtype.c:530 memtype_reserve+0x2ab/0x460 Modules linked in: CPU: 22 UID: 0 PID: 1 Comm: swapper/0 Tainted: G W 6.16.0-rc7+ #2 VOLUNTARY Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/29/2025 RIP: 0010:memtype_reserve+0x2ab/0x460 __ioremap_caller+0x16d/0x3d0 ioremap_cache+0x17/0x30 x86_acpi_os_ioremap+0xe/0x20 acpi_os_map_iomem+0x1f3/0x240 acpi_os_map_memory+0xe/0x20 acpi_ex_system_memory_space_handler+0x273/0x440 acpi_ev_address_space_dispatch+0x176/0x4c0 acpi_ex_access_region+0x2ad/0x530 acpi_ex_field_datum_io+0xa2/0x4f0 acpi_ex_extract_from_field+0x296/0x3e0 acpi_ex_read_data_from_field+0xd1/0x460 acpi_ex_resolve_node_to_value+0x2ee/0x530 acpi_ex_resolve_to_value+0x1f2/0x540 acpi_ds_evaluate_name_path+0x11b/0x190 acpi_ds_exec_end_op+0x456/0x960 acpi_ps_parse_loop+0x27a/0xa50 acpi_ps_parse_aml+0x226/0x600 acpi_ps_execute_method+0x172/0x3e0 acpi_ns_evaluate+0x175/0x5f0 acpi_evaluate_object+0x213/0x490 acpi_evaluate_integer+0x6d/0x140 acpi_bus_get_status+0x93/0x150 acpi_add_single_object+0x43a/0x7c0 acpi_bus_check_add+0x149/0x3a0 acpi_bus_check_add_1+0x16/0x30 acpi_ns_walk_namespace+0x22c/0x360 acpi_walk_namespace+0x15c/0x170 acpi_bus_scan+0x1dd/0x200 acpi_scan_init+0xe5/0x2b0 acpi_init+0x264/0x5b0 do_one_i ---truncated---

Record
DEBIAN-CVE-2025-40181
Updated
2026-11-02
Show 13 moreShow less
OSVopenSUSE-SU-2026:20826-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
  • CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
  • CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
  • CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
  • CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
  • CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…
Record
openSUSE-SU-2026:20826-1
Updated
2026-11-02
OSVSUSE-SU-2026:0447-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
  • CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
  • CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
  • CVE-2025-40350: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (bsc#1255260).
  • CVE-2025-40355: sysfs: check visibility before changing group attribute ownership (bsc#1255261).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68171: x86/fpu: Ensure XFD state on signal delivery (bsc#1255255).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68215: ice: fix PTP cleanup on driver removal in error path (bsc#1255226).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
  • CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68301: net: atlantic: fix fragment overflow handling in RX path (bsc#1255120).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68327: usb: renesas_usbhs: Fix synchronous external abort on unbind (bsc#1255488).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68363: bpf: Check skb->transport_header is set in bpf_skb_check_mtu (bsc#1255552).
  • CVE-2025-68365: fs/ntfs3: Initialize allocated memory before use (bsc#1255548).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68727: ntfs3: Fix uninit buffer allocated by __getname() (bsc#1255568).
  • CVE-2025-68728: ntfs3: fix uninit memory after failed mi_read in mi_format_new (bsc#1255539).
  • CVE-2025-68733: smack: fix bug: unprivileged task can create labels (bsc#1255615).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet:…
Record
SUSE-SU-2026:0447-1
Updated
2026-11-02
OSVSUSE-SU-2026:0472-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
  • CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
  • CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
  • CVE-2025-40350: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (bsc#1255260).
  • CVE-2025-40355: sysfs: check visibility before changing group attribute ownership (bsc#1255261).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68171: x86/fpu: Ensure XFD state on signal delivery (bsc#1255255).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68215: ice: fix PTP cleanup on driver removal in error path (bsc#1255226).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
  • CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68301: net: atlantic: fix fragment overflow handling in RX path (bsc#1255120).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68327: usb: renesas_usbhs: Fix synchronous external abort on unbind (bsc#1255488).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68363: bpf: Check skb->transport_header is set in bpf_skb_check_mtu (bsc#1255552).
  • CVE-2025-68365: fs/ntfs3: Initialize allocated memory before use (bsc#1255548).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68727: ntfs3: Fix uninit buffer allocated by __getname() (bsc#1255568).
  • CVE-2025-68728: ntfs3: fix uninit memory after failed mi_read in mi_format_new (bsc#1255539).
  • CVE-2025-68733: smack: fix bug: unprivileged task can create labels (bsc#1255615).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet:…
Record
SUSE-SU-2026:0472-1
Updated
2026-11-02
OSVSUSE-SU-2026:0587-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
  • CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
  • CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
  • CVE-2025-40350: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (bsc#1255260).
  • CVE-2025-40355: sysfs: check visibility before changing group attribute ownership (bsc#1255261).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68171: x86/fpu: Ensure XFD state on signal delivery (bsc#1255255).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68215: ice: fix PTP cleanup on driver removal in error path (bsc#1255226).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
  • CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68301: net: atlantic: fix fragment overflow handling in RX path (bsc#1255120).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68327: usb: renesas_usbhs: Fix synchronous external abort on unbind (bsc#1255488).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68363: bpf: Check skb->transport_header is set in bpf_skb_check_mtu (bsc#1255552).
  • CVE-2025-68365: fs/ntfs3: Initialize allocated memory before use (bsc#1255548).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68727: ntfs3: Fix uninit buffer allocated by __getname() (bsc#1255568).
  • CVE-2025-68728: ntfs3: fix uninit memory after failed mi_read in mi_format_new (bsc#1255539).
  • CVE-2025-68733: smack: fix bug: unprivileged task can create labels (bsc#1255615).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet:…
Record
SUSE-SU-2026:0587-1
Updated
2026-11-02
OSVSUSE-SU-2026:21834-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
  • CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
  • CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
  • CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
  • CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
  • CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…
Record
SUSE-SU-2026:21834-1
Updated
2026-11-02
OSVSUSE-SU-2026:21841-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
  • CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
  • CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
  • CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
  • CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
  • CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…
Record
SUSE-SU-2026:21841-1
Updated
2026-11-02
OSVSUSE-SU-2026:21845-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
  • CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
  • CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
  • CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
  • CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
  • CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…
Record
SUSE-SU-2026:21845-1
Updated
2026-11-02
OSVSUSE-SU-2026:21860-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603).
  • CVE-2024-14027: xattr: switch to CLASS(fd) (bsc#1259420).
  • CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP (bsc#1253471).
  • CVE-2025-68265: nvme: fix admin request_queue lifetime (bsc#1255360).
  • CVE-2025-68310: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (bsc#1255160).
  • CVE-2025-71302: drm/panthor: fix for dma-fence safe access rules (bsc#1264837).
  • CVE-2026-23168: flex_proportions: make fprop_new_period() hardirq safe (bsc#1258826).
  • CVE-2026-23245: net/sched: act_gate: snapshot parameters with RCU on replace (bsc#1259799).
  • CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018).
  • CVE-2026-23276: net: add xmit recursion limit to tunnel xmit functions (bsc#1260012).
  • CVE-2026-23300: net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop (bsc#1260538).
  • CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).
  • CVE-2026-23316: net: ipv4: fix ARM64 alignment fault in multipath hash seed (bsc#1260573).
  • CVE-2026-23321: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505).
  • CVE-2026-23340: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs (bsc#1260523).
  • CVE-2026-23346: arm64: io: Rename ioremap_prot() to __ioremap_prot() (bsc#1260529).
  • CVE-2026-23351: netfilter: nft_set_pipapo: split gc into unlink and reclaim phase (bsc#1260526).
  • CVE-2026-23354: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).
  • CVE-2026-23368: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).
  • CVE-2026-23374: blktrace: fix __this_cpu_read/write in preemptible context (bsc#1260811).
  • CVE-2026-23375: mm: thp: deny THP for files on anonymous inodes (bsc#1260576).
  • CVE-2026-23378: net/sched: act_ife: Fix metalist update behavior (bsc#1260546).
  • CVE-2026-23391: netfilter: xt_CT: drop pending enqueued packets on template removal (bsc#1260566).
  • CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531).
  • CVE-2026-23397: nfnetlink_osf: validate individual option lengths in fingerprints (bsc#1260728).
  • CVE-2026-23399: nf_tables: nft_dynset: fix possible stateful expression memleak in error path (bsc#1261020).
  • CVE-2026-23417: bpf: Fix constant blinding for PROBE_MEM32 stores (bsc#1261410).
  • CVE-2026-23436: net: add helpers for lookup and walking netdevs under netdev_lock() (bsc#1261617).
  • CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261635).
  • CVE-2026-23440: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).
  • CVE-2026-23441: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).
  • CVE-2026-23442: ipv6: add NULL checks for idev in SRv6 paths (bsc#1261581).
  • CVE-2026-23445: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).
  • CVE-2026-23450: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).
  • CVE-2026-23455: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (bsc#1261687).
  • CVE-2026-23456: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).
  • CVE-2026-23457: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).
  • CVE-2026-23458: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).
  • CVE-2026-23468: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion (bsc#1261692).
  • CVE-2026-23472: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN (bsc#1261636).
  • CVE-2026-23473: io_uring/poll: fix multishot recv missing EOF on…
Record
SUSE-SU-2026:21860-1
Updated
2026-11-02
OSVUBUNTU-CVE-2025-40181 No score

In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP When running as an SNP or TDX guest under KVM, force the legacy PCI hole, i.e. memory between Top of Lower Usable DRAM and 4GiB, to be mapped as UC via a forced variable MTRR range. In most KVM-based setups, legacy devices such as the HPET and TPM are enumerated via ACPI. ACPI enumeration includes a Memory32Fixed entry, and optionally a SystemMemory descriptor for an OperationRegion, e.g. if the device needs to be accessed via a Control Method. If a SystemMemory entry is present, then the kernel's ACPI driver will auto-ioremap the region so that it can be accessed at will. However, the ACPI spec doesn't provide a way to enumerate the memory type of SystemMemory regions, i.e. there's no way to tell software that a region must be mapped as UC vs. WB, etc. As a result, Linux's ACPI driver always maps SystemMemory regions using ioremap_cache(), i.e. as WB on x86. The dedicated device drivers however, e.g. the HPET driver and TPM driver, want to map their associated memory as UC or WC, as accessing PCI devices using WB is unsupported. On bare metal and non-CoCO, the conflicting requirements "work" as firmware configures the PCI hole (and other device memory) to be UC in the MTRRs. So even though the ACPI mappings request WB, they are forced to UC- in the kernel's tracking due to the kernel properly handling the MTRR overrides, and thus are compatible with the drivers' requested WC/UC-. With force WB MTRRs on SNP and TDX guests, the ACPI mappings get their requested WB if the ACPI mappings are established before the dedicated driver code attempts to initialize the device. E.g. if acpi_init() runs before the corresponding device driver is probed, ACPI's WB mapping will "win", and result in the driver's ioremap() failing because the existing WB mapping isn't compatible with the requested WC/UC-. E.g. when a TPM is emulated by the hypervisor (ignoring the security implications of relying on what is allegedly an untrusted entity to store measurements), the TPM driver will request UC and fail: [ 1.730459] ioremap error for 0xfed40000-0xfed45000, requested 0x2, got 0x0 [ 1.732780] tpm_tis MSFT0101:00: probe with driver tpm_tis failed with error -12 Note, the '0x2' and '0x0' values refer to "enum page_cache_mode", not x86's memtypes (which frustratingly are an almost pure inversion; 2 == WB, 0 == UC). E.g. tracing mapping requests for TPM TIS yields: Mapping TPM TIS with req_type = 0 WARNING: CPU: 22 PID: 1 at arch/x86/mm/pat/memtype.c:530 memtype_reserve+0x2ab/0x460 Modules linked in: CPU: 22 UID: 0 PID: 1 Comm: swapper/0 Tainted: G W 6.16.0-rc7+ #2 VOLUNTARY Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/29/2025 RIP: 0010:memtype_reserve+0x2ab/0x460 __ioremap_caller+0x16d/0x3d0 ioremap_cache+0x17/0x30 x86_acpi_os_ioremap+0xe/0x20 acpi_os_map_iomem+0x1f3/0x240 acpi_os_map_memory+0xe/0x20 acpi_ex_system_memory_space_handler+0x273/0x440 acpi_ev_address_space_dispatch+0x176/0x4c0 acpi_ex_access_region+0x2ad/0x530 acpi_ex_field_datum_io+0xa2/0x4f0 acpi_ex_extract_from_field+0x296/0x3e0 acpi_ex_read_data_from_field+0xd1/0x460 acpi_ex_resolve_node_to_value+0x2ee/0x530 acpi_ex_resolve_to_value+0x1f2/0x540 acpi_ds_evaluate_name_path+0x11b/0x190 acpi_ds_exec_end_op+0x456/0x960 acpi_ps_parse_loop+0x27a/0xa50 acpi_ps_parse_aml+0x226/0x600 acpi_ps_execute_method+0x172/0x3e0 acpi_ns_evaluate+0x175/0x5f0 acpi_evaluate_object+0x213/0x490 acpi_evaluate_integer+0x6d/0x140 acpi_bus_get_status+0x93/0x150 acpi_add_single_object+0x43a/0x7c0 acpi_bus_check_add+0x149/0x3a0 acpi_bus_check_add_1+0x16/0x30 acpi_ns_walk_namespace+0x22c/0x360 acpi_walk_namespace+0x15c/0x170 acpi_bus_scan+0x1dd/0x200 acpi_scan_init+0xe5/0x2b0 acpi_init+0x264/0x5b0 do_one_i ---truncated---

Record
UBUNTU-CVE-2025-40181
Updated
2026-11-02
OSVUSN-8029-1 No score

linux, linux-raspi, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Device frequency scaling framework;
  • ARM SCMI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • Hardware monitoring drivers;
  • HW tracing;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • PCI Endpoint Test driver;
  • VMware Balloon Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • Mellanox platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • SPI subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • BPF subsystem;
  • Mellanox drivers;
  • Memory management;
  • Virtio network driver;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • io_uring subsystem;
  • Kernel crash support code;
  • Perf events;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer subsystem;
  • Tracing infrastructure;
  • 9P file system network protocol;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • ALSA framework;
  • HD-audio driver;
  • AMD SoC Alsa drivers;
  • WCD audio codecs;
  • Intel ASoC drivers;
  • USB sound devices;
  • KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056, CVE-2025-40057,…
Record
USN-8029-1
Updated
2026-11-03
OSVUSN-8029-2 No score

linux-aws, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Device frequency scaling framework;
  • ARM SCMI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • Hardware monitoring drivers;
  • HW tracing;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • PCI Endpoint Test driver;
  • VMware Balloon Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • Mellanox platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • SPI subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • BPF subsystem;
  • Mellanox drivers;
  • Memory management;
  • Virtio network driver;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • io_uring subsystem;
  • Kernel crash support code;
  • Perf events;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer subsystem;
  • Tracing infrastructure;
  • 9P file system network protocol;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • ALSA framework;
  • HD-audio driver;
  • AMD SoC Alsa drivers;
  • WCD audio codecs;
  • Intel ASoC drivers;
  • USB sound devices;
  • KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056, CVE-2025-40057,…
Record
USN-8029-2
Updated
2026-11-03
OSVUSN-8029-3 No score

linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Device frequency scaling framework;
  • ARM SCMI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • Hardware monitoring drivers;
  • HW tracing;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • PCI Endpoint Test driver;
  • VMware Balloon Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • Mellanox platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • SPI subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • BPF subsystem;
  • Mellanox drivers;
  • Memory management;
  • Virtio network driver;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • io_uring subsystem;
  • Kernel crash support code;
  • Perf events;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer subsystem;
  • Tracing infrastructure;
  • 9P file system network protocol;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • ALSA framework;
  • HD-audio driver;
  • AMD SoC Alsa drivers;
  • WCD audio codecs;
  • Intel ASoC drivers;
  • USB sound devices;
  • KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056, CVE-2025-40057,…
Record
USN-8029-3
Updated
2026-11-03
OSVUSN-8048-1 No score

linux-oem-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Device frequency scaling framework;
  • ARM SCMI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • Hardware monitoring drivers;
  • HW tracing;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • PCI Endpoint Test driver;
  • VMware Balloon Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • Mellanox platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • SPI subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • BPF subsystem;
  • Mellanox drivers;
  • Memory management;
  • Virtio network driver;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • io_uring subsystem;
  • Kernel crash support code;
  • Perf events;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer subsystem;
  • Tracing infrastructure;
  • 9P file system network protocol;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • ALSA framework;
  • HD-audio driver;
  • AMD SoC Alsa drivers;
  • WCD audio codecs;
  • Intel ASoC drivers;
  • USB sound devices;
  • KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40041, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056,…
Record
USN-8048-1
Updated
2026-11-03

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-lts
Alpaquita:25
 6.12.53-r0 up to 6.12.57-r0
6.12.57-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
Kernel
Linux
 6.12.0 up to 6.12.54, 6.13.0 up to 6.17.4
6.12.546.17.4
linux
Debian:13
 before 6.12.57-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-1~bpo12+1
6.12.57-1
linux
Debian:14
 before 6.17.6-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
6.17.6-1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1.150700.17.21.1
6.4.0-150700.53.31.1.150700.17.21.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
Show 135 moreShow less
Affected packages
PackageAffectedFixed
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-livepatch-SLE15-SP7_Update_9
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 171 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 172 CVEs
 before 6.4.0-150700.20.27.1
6.4.0-150700.20.27.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 172 CVEs
 before 6.4.0-150700.20.27.1
6.4.0-150700.20.27.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 172 CVEs
 before 6.4.0-150700.20.27.1
6.4.0-150700.20.27.1
kernel-livepatch-SLE15-SP7-RT_Update_9
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 171 CVEs
 before 1-150700.1.3.2
1-150700.1.3.2
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.7.31.2
6.4.0-150700.7.31.2
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.7.31.1
6.4.0-150700.7.31.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.7.31.1
6.4.0-150700.7.31.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 206 CVEs
 before 6.12.0-160000.33.1
6.12.0-160000.33.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 206 CVEs
 before 6.12.0-160000.33.1
6.12.0-160000.33.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
 None known
linux-gcp-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
 None known
linux-gcp-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
 None known
linux-gcp-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1
Show 8 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1
 None known
linux-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
 None known
linux-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1
Show 5 moreShow less
6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1
 None known
linux-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1
Show 8 moreShow less
6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-lowlatency-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1
Show 5 moreShow less
5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30
 None known
linux-lowlatency-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1
Show 5 moreShow less
6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-lowlatency-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1
Show 8 moreShow less
6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1
 None known
linux-nvidia-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15
 None known
linux-nvidia-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15
Show 6 moreShow less
6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25
 None known
linux-oem-5.17
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13
Show 21 moreShow less
5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36
 None known
linux-oem-6.0
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10
Show 11 moreShow less
6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21
 None known
linux-oem-6.1
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9
Show 22 moreShow less
6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36
 None known
linux-oem-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8
Show 14 moreShow less
6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28
 None known
linux-oracle-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1
Show 8 moreShow less
6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1
 None known
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-riscv
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4
Show 18 moreShow less
5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32
 None known
linux-riscv-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1
 None known
linux-riscv-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1
Show 5 moreShow less
6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1
 None known
linux-starfive-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1
 None known
linux-starfive-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1
 None known
linux-starfive-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.8~22.04.16.5.0-1008.9~22.04.16.5.0-1009.10~22.04.16.5.0-1010.11~22.04.16.5.0-1011.12~22.04.1
Show 6 moreShow less
6.5.0-1012.13~22.04.16.5.0-1014.15~22.04.16.5.0-1015.16~22.04.16.5.0-1016.17~22.04.16.5.0-1017.18~22.04.16.5.0-1018.19~22.04.1
 None known
linux-aws-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-1007.7~24.04.16.14.0-1009.9~24.04.16.14.0-1010.10~24.04.16.14.0-1011.11~24.04.16.14.0-1012.12~24.04.1
Show 6 moreShow less
6.14.0-1013.13~24.04.16.14.0-1014.14~24.04.16.14.0-1015.15~24.04.16.14.0-1016.16~24.04.16.14.0-1017.17~24.04.16.14.0-1018.18~24.04.1
 None known
linux-aws-6.17
Ubuntu:24.04:LTS
 before 6.17.0-1007.7~24.04.1, plus listed versions
6.17.0-1005.5~24.04.2
6.17.0-1007.7~24.04.1
linux-azure-6.11
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.11.0-1008.8~24.04.16.11.0-1012.12~24.04.16.11.0-1013.13~24.04.16.11.0-1014.14~24.04.16.11.0-1015.15~24.04.16.11.0-1017.17~24.04.16.11.0-1018.18~24.04.1
 None known
linux-azure-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-1010.10~24.04.16.14.0-1012.12~24.04.16.14.0-1013.13~24.04.16.14.0-1014.14~24.04.16.14.0-1017.17~24.04.1
 None known
linux-azure-fde-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-1012.12~24.04.16.14.0-1013.13~24.04.16.14.0-1014.14~24.04.16.14.0-1015.15~24.04.16.14.0-1017.17~24.04.1
 None known
linux-azure-nvidia-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-1003.36.14.0-1006.66.14.0-1007.7
 None known
linux-gcp-6.11
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.11.0-1006.6~24.04.26.11.0-1011.11~24.04.16.11.0-1013.13~24.04.16.11.0-1014.14~24.04.16.11.0-1015.15~24.04.16.11.0-1016.16~24.04.16.11.0-1017.17~24.04.1
 None known
linux-gcp-6.14
Ubuntu:24.04:LTS
 before 6.14.0-1011.11~24.04.1, plus listed versions
6.14.0-1007.7~24.04.1
6.14.0-1011.11~24.04.1
linux-hwe-6.11
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.11.0-17.17~24.04.26.11.0-19.19~24.04.16.11.0-21.21~24.04.16.11.0-24.24~24.04.16.11.0-25.25~24.04.16.11.0-26.26~24.04.16.11.0-28.28~24.04.16.11.0-29.29~24.04.1
 None known
linux-hwe-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-24.24~24.04.36.14.0-27.27~24.04.16.14.0-28.28~24.04.16.14.0-29.29~24.04.16.14.0-32.32~24.04.1
Show 5 moreShow less
6.14.0-33.33~24.04.16.14.0-34.34~24.04.16.14.0-35.35~24.04.16.14.0-36.36~24.04.16.14.0-37.37~24.04.1
 None known
linux-lowlatency-hwe-6.11
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.11.0-1009.10~24.04.16.11.0-1011.12~24.04.16.11.0-1012.13~24.04.16.11.0-1013.14~24.04.16.11.0-1014.15~24.04.16.11.0-1015.16~24.04.26.11.0-1016.17~24.04.1
 None known
linux-nvidia-6.17
Ubuntu:24.04:LTS
 before 6.17.0-1008.8, plus listed versions
6.17.0-1004.4
6.17.0-1008.8
linux-oem-6.11
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.11.0-1007.76.11.0-1008.86.11.0-1009.96.11.0-1010.106.11.0-1011.11
Show 13 moreShow less
6.11.0-1012.126.11.0-1013.136.11.0-1015.156.11.0-1016.166.11.0-1017.176.11.0-1018.186.11.0-1020.206.11.0-1021.216.11.0-1022.226.11.0-1023.236.11.0-1024.246.11.0-1025.256.11.0-1027.27
 None known
linux-oem-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-1004.46.14.0-1005.56.14.0-1006.66.14.0-1007.76.14.0-1008.8
Show 11 moreShow less
6.14.0-1010.106.14.0-1011.116.14.0-1012.126.14.0-1013.136.14.0-1014.146.14.0-1015.156.14.0-1016.166.14.0-1017.176.14.0-1018.186.14.0-1019.196.14.0-1020.20
 None known
linux-oem-6.17
Ubuntu:24.04:LTS
 before 6.17.0-1011.11, plus listed versions
6.17.0-1005.56.17.0-1006.66.17.0-1007.76.17.0-1008.86.17.0-1009.96.17.0-1010.10
6.17.0-1011.11
linux-oem-6.8
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-1003.36.8.0-1004.46.8.0-1005.56.8.0-1006.66.8.0-1007.7
Show 21 moreShow less
6.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1020.206.8.0-1024.246.8.0-1025.256.8.0-1026.266.8.0-1027.276.8.0-1028.286.8.0-1029.296.8.0-1030.306.8.0-1031.316.8.0-1032.32
 None known
linux-oracle-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-1007.7~24.04.16.14.0-1009.9~24.04.16.14.0-1010.10~24.04.16.14.0-1011.11~24.04.16.14.0-1012.12~24.04.1
Show 6 moreShow less
6.14.0-1013.13~24.04.16.14.0-1014.14~24.04.16.14.0-1015.15~24.04.16.14.0-1016.16~24.04.16.14.0-1017.17~24.04.16.14.0-1018.18~24.04.1
 None known
linux-oracle-6.17
Ubuntu:24.04:LTS
 before 6.17.0-1007.7~24.04.1, plus listed versions
6.17.0-1004.4~24.04.2
6.17.0-1007.7~24.04.1
linux-raspi-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-2019.20
 None known
linux-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.1-1015.16
 None known
linux-riscv
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.5.0-9.9.16.8.0-20.20.16.8.0-28.28.16.8.0-31.31.16.8.0-35.35.1
Show 19 moreShow less
6.8.0-36.36.16.8.0-38.38.16.8.0-39.39.16.8.0-40.40.16.8.0-41.41.16.8.0-44.44.16.8.0-47.47.16.8.0-48.48.16.8.0-49.49.16.8.0-50.51.16.8.0-51.52.16.8.0-52.53.16.8.0-53.55.16.8.0-55.57.16.8.0-56.58.16.8.0-57.59.16.8.0-58.60.16.8.0-59.61.16.8.0-60.63.1
 None known
linux-riscv-6.14
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.14.0-22.22.1~24.04.16.14.0-23.23.1~24.04.16.14.0-24.24.1~24.04.16.14.0-27.27.1~24.04.16.14.0-28.28.1~24.04.1
Show 7 moreShow less
6.14.0-29.29.1~24.04.16.14.0-32.32.1~24.04.16.14.0-33.33.1~24.04.16.14.0-34.34.1~24.04.16.14.0-35.35.1~24.04.16.14.0-36.36.1~24.04.16.14.0-37.37.1~24.04.1
 None known
linux-realtime-6.14
Ubuntu:Pro:Realtime:24.04:LTS
 All versions, plus listed versions
6.14.0-1003.3~24.04.36.14.0-1010.10~24.04.16.14.0-1011.11~24.04.16.14.0-1012.12~24.04.16.14.0-1013.13~24.04.1
Show 4 moreShow less
6.14.0-1014.14~24.04.16.14.0-1015.15~24.04.16.14.0-1016.16~24.04.16.14.0-1017.17~24.04.1
 None known
linux-realtime-6.17
Ubuntu:Pro:Realtime:24.04:LTS
 before 6.17.0-1006.7~24.04.1, plus listed versions
6.17.0-1004.5~24.04.2
6.17.0-1006.7~24.04.1
linux
Ubuntu:25.10
 before 6.17.0-14.14, plus listed versions
6.14.0-15.156.15.0-3.36.15.0-4.46.16.0-13.136.16.0-16.16
Show 7 moreShow less
6.17.0-3.36.17.0-4.46.17.0-5.56.17.0-6.66.17.0-7.76.17.0-8.86.17.0-12.12
6.17.0-14.14
linux-aws
Ubuntu:25.10
 before 6.17.0-1007.7, plus listed versions
6.14.0-1005.56.14.0-1007.7+25.10.26.16.0-1001.16.17.0-1001.16.17.0-1002.2
Show 4 moreShow less
6.17.0-1003.36.17.0-1004.46.17.0-1005.56.17.0-1006.6
6.17.0-1007.7
linux-azure
Ubuntu:25.10
 before 6.17.0-1008.8, plus listed versions
6.14.0-1004.46.14.0-1007.7+25.10.16.16.0-1001.16.17.0-1002.26.17.0-1003.36.17.0-1004.46.17.0-1006.66.17.0-1007.7
6.17.0-1008.8
linux-azure-fde
Ubuntu:25.10
 All versions, plus listed versions
6.17.0-1003.36.17.0-1004.46.17.0-1005.56.17.0-1007.76.17.0-1008.8
Show 5 moreShow less
6.17.0-1010.106.17.0-1012.126.17.0-1014.146.17.0-1015.156.17.0-1017.17
 None known
linux-oracle
Ubuntu:25.10
 before 6.17.0-1007.7, plus listed versions
6.14.0-1005.56.14.0-1007.7+25.10.16.16.0-1001.16.17.0-1001.16.17.0-1002.26.17.0-1003.36.17.0-1005.56.17.0-1006.6
6.17.0-1007.7
linux-raspi
Ubuntu:25.10
 before 6.17.0-1008.8, plus listed versions
6.14.0-1005.56.17.0-1003.36.17.0-1004.46.17.0-1005.56.17.0-1006.66.17.0-1007.7
6.17.0-1008.8
linux-realtime
Ubuntu:25.10
 before 6.17.0-1006.7, plus listed versions
6.14.0-1002.26.17.0-1001.26.17.0-1002.36.17.0-1003.46.17.0-1004.56.17.0-1005.6
6.17.0-1006.7
linux-riscv
Ubuntu:25.10
 before 6.17.0-14.14.1, plus listed versions
6.14.0-13.13.26.17.0-4.4.16.17.0-5.5.16.17.0-6.6.16.17.0-7.7.16.17.0-8.8.16.17.0-12.12.1
6.17.0-14.14.1
linux
Ubuntu:25.10
From an advisory covering 367 CVEs
 before 6.17.0-14.14, plus listed versions
6.14.0-15.156.15.0-3.36.15.0-4.46.16.0-13.136.16.0-16.16
Show 7 moreShow less
6.17.0-3.36.17.0-4.46.17.0-5.56.17.0-6.66.17.0-7.76.17.0-8.86.17.0-12.12
6.17.0-14.14
linux-raspi
Ubuntu:25.10
From an advisory covering 367 CVEs
 before 6.17.0-1008.8, plus listed versions
6.14.0-1005.56.17.0-1003.36.17.0-1004.46.17.0-1005.56.17.0-1006.66.17.0-1007.7
6.17.0-1008.8
linux-realtime
Ubuntu:25.10
From an advisory covering 367 CVEs
 before 6.17.0-1006.7, plus listed versions
6.14.0-1002.26.17.0-1001.26.17.0-1002.36.17.0-1003.46.17.0-1004.56.17.0-1005.6
6.17.0-1006.7
linux-aws
Ubuntu:25.10
From an advisory covering 367 CVEs
 before 6.17.0-1007.7, plus listed versions
6.14.0-1005.56.14.0-1007.7+25.10.26.16.0-1001.16.17.0-1001.16.17.0-1002.2
Show 4 moreShow less
6.17.0-1003.36.17.0-1004.46.17.0-1005.56.17.0-1006.6
6.17.0-1007.7
linux-oracle
Ubuntu:25.10
From an advisory covering 367 CVEs
 before 6.17.0-1007.7, plus listed versions
6.14.0-1005.56.14.0-1007.7+25.10.16.16.0-1001.16.17.0-1001.16.17.0-1002.26.17.0-1003.36.17.0-1005.56.17.0-1006.6
6.17.0-1007.7
linux-azure
Ubuntu:25.10
From an advisory covering 367 CVEs
 before 6.17.0-1008.8, plus listed versions
6.14.0-1004.46.14.0-1007.7+25.10.16.16.0-1001.16.17.0-1002.26.17.0-1003.36.17.0-1004.46.17.0-1006.66.17.0-1007.7
6.17.0-1008.8
linux-oem-6.17
Ubuntu:24.04:LTS
From an advisory covering 366 CVEs
 before 6.17.0-1011.11, plus listed versions
6.17.0-1005.56.17.0-1006.66.17.0-1007.76.17.0-1008.86.17.0-1009.96.17.0-1010.10
6.17.0-1011.11

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-40181 is a vulnerability with no CVSS score yet in Linux, published November 12, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 11th percentile. Fixed in linux-lts 6.12.57-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 56 versions, 1,013 references and the rest of 12 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open