Every CVE Search/ Get API key

CVE-2025-40186

tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

8.1 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

syzbot reported the splat below in tcp_conn_request(). [0]

If a listener is close()d while a TFO socket is being processed in tcp_conn_request(), inet_csk_reqsk_queue_add() does not set reqsk->sk and calls inet_child_forget(), which calls tcp_disconnect() for the TFO socket.

After the cited commit, tcp_disconnect() calls reqsk_fastopen_remove(), where reqsk_put() is called due to !reqsk->sk.

Then, reqsk_fastopen_remove() in tcp_conn_request() decrements the last req->rsk_refcnt and frees reqsk, and __reqsk_free() at the drop_and_free label causes the refcount underflow for the listener and double-free of the reqsk.

Let's remove reqsk_fastopen_remove() in tcp_conn_request().

Note that other callers make sure tp->fastopen_rsk is not NULL.

[0]: refcount_t: underflow; use-after-free. WARNING: CPU: 12 PID: 5563 at lib/refcount.c:28 refcount_warn_saturate (lib/refcount.c:28) Modules linked in: CPU: 12 UID: 0 PID: 5563 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:refcount_warn_saturate (lib/refcount.c:28) Code: ab e8 8e b4 98 ff 0f 0b c3 cc cc cc cc cc 80 3d a4 e4 d6 01 00 75 9c c6 05 9b e4 d6 01 01 48 c7 c7 e8 df fb ab e8 6a b4 98 ff <0f> 0b e9 03 5b 76 00 cc 80 3d 7d e4 d6 01 00 0f 85 74 ff ff ff c6 RSP: 0018:ffffa79fc0304a98 EFLAGS: 00010246 RAX: d83af4db1c6b3900 RBX: ffff9f65c7a69020 RCX: d83af4db1c6b3900 RDX: 0000000000000000 RSI: 00000000ffff7fff RDI: ffffffffac78a280 RBP: 000000009d781b60 R08: 0000000000007fff R09: ffffffffac6ca280 R10: 0000000000017ffd R11: 0000000000000004 R12: ffff9f65c7b4f100 R13: ffff9f65c7d23c00 R14: ffff9f65c7d26000 R15: ffff9f65c7a64ef8 FS: 00007f9f962176c0(0000) GS:ffff9f65fcf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000180 CR3: 000000000dbbe006 CR4: 0000000000372ef0 Call Trace: <IRQ> tcp_conn_request (./include/linux/refcount.h:400 ./include/linux/refcount.h:432 ./include/linux/refcount.h:450 ./include/net/sock.h:1965 ./include/net/request_sock.h:131 net/ipv4/tcp_input.c:7301) tcp_rcv_state_process (net/ipv4/tcp_input.c:6708) tcp_v6_do_rcv (net/ipv6/tcp_ipv6.c:1670) tcp_v6_rcv (net/ipv6/tcp_ipv6.c:1906) ip6_protocol_deliver_rcu (net/ipv6/ip6_input.c:438) ip6_input (net/ipv6/ip6_input.c:500) ipv6_rcv (net/ipv6/ip6_input.c:311) __netif_receive_skb (net/core/dev.c:6104) process_backlog (net/core/dev.c:6456) __napi_poll (net/core/dev.c:7506) net_rx_action (net/core/dev.c:7569 net/core/dev.c:7696) handle_softirqs (kernel/softirq.c:579) do_softirq (kernel/softirq.c:480) </IRQ>

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.58%Up 0.6 points since Nov 13, 2025
90%50%10%1%

What each source reports

CVE List Score used 8.1

tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

In the Linux kernel, the following vulnerability has been resolved:

tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

syzbot reported the splat below in tcp_conn_request(). [0]

If a listener is close()d while a TFO socket is being processed in tcp_conn_request(), inet_csk_reqsk_queue_add() does not set reqsk->sk and calls inet_child_forget(), which calls tcp_disconnect() for the TFO socket.

After the cited commit, tcp_disconnect() calls reqsk_fastopen_remove(), where reqsk_put() is called due to !reqsk->sk.

Then, reqsk_fastopen_remove() in tcp_conn_request() decrements the last req->rsk_refcnt and frees reqsk, and __reqsk_free() at the drop_and_free label causes the refcount underflow for the listener and double-free of the reqsk.

Let's remove reqsk_fastopen_remove() in tcp_conn_request().

Note that other callers make sure tp->fastopen_rsk is not NULL.

[0]: refcount_t: underflow; use-after-free. WARNING: CPU: 12 PID: 5563 at lib/refcount.c:28 refcount_warn_saturate (lib/refcount.c:28) Modules linked in: CPU: 12 UID: 0 PID: 5563 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:refcount_warn_saturate (lib/refcount.c:28) Code: ab e8 8e b4 98 ff 0f 0b c3 cc cc cc cc cc 80 3d a4 e4 d6 01 00 75 9c c6 05 9b e4 d6 01 01 48 c7 c7 e8 df fb ab e8 6a b4 98 ff <0f> 0b e9 03 5b 76 00 cc 80 3d 7d e4 d6 01 00 0f 85 74 ff ff ff c6 RSP: 0018:ffffa79fc0304a98 EFLAGS: 00010246 RAX: d83af4db1c6b3900 RBX: ffff9f65c7a69020 RCX: d83af4db1c6b3900 RDX: 0000000000000000 RSI: 00000000ffff7fff RDI: ffffffffac78a280 RBP: 000000009d781b60 R08: 0000000000007fff R09: ffffffffac6ca280 R10: 0000000000017ffd R11: 0000000000000004 R12: ffff9f65c7b4f100 R13: ffff9f65c7d23c00 R14: ffff9f65c7d26000 R15: ffff9f65c7a64ef8 FS: 00007f9f962176c0(0000) GS:ffff9f65fcf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000180 CR3: 000000000dbbe006 CR4: 0000000000372ef0 Call Trace: <IRQ> tcp_conn_request (./include/linux/refcount.h:400 ./include/linux/refcount.h:432 ./include/linux/refcount.h:450 ./include/net/sock.h:1965 ./include/net/request_sock.h:131 net/ipv4/tcp_input.c:7301) tcp_rcv_state_process (net/ipv4/tcp_input.c:6708) tcp_v6_do_rcv (net/ipv6/tcp_ipv6.c:1670) tcp_v6_rcv (net/ipv6/tcp_ipv6.c:1906) ip6_protocol_deliver_rcu (net/ipv6/ip6_input.c:438) ip6_input (net/ipv6/ip6_input.c:500) ipv6_rcv (net/ipv6/ip6_input.c:311) __netif_receive_skb (net/core/dev.c:6104) process_backlog (net/core/dev.c:6456) __napi_poll (net/core/dev.c:7506) net_rx_action (net/core/dev.c:7569 net/core/dev.c:7696) handle_softirqs (kernel/softirq.c:579) do_softirq (kernel/softirq.c:480) </IRQ>

Record
CVE-2025-40186
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2025-150388 8.1

In the Linux kernel, the following vulnerability has been resolved:

tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

syzbot reported the splat below in tcp_conn_request(). [0]

If a listener is close()d while a TFO socket is being processed in tcp_conn_request(), inet_csk_reqsk_queue_add() does not set reqsk->sk and calls inet_child_forget(), which calls tcp_disconnect() for the TFO socket.

After the cited commit, tcp_disconnect() calls reqsk_fastopen_remove(), where reqsk_put() is called due to !reqsk->sk.

Then, reqsk_fastopen_remove() in tcp_conn_request() decrements the last req->rsk_refcnt and frees reqsk, and __reqsk_free() at the drop_and_free label causes the refcount underflow for the listener and double-free of the reqsk.

Let's remove reqsk_fastopen_remove() in tcp_conn_request().

Note that other callers make sure tp->fastopen_rsk is not NULL.

[0]: refcount_t: underflow; use-after-free. WARNING: CPU: 12 PID: 5563 at lib/refcount.c:28 refcount_warn_saturate (lib/refcount.c:28) Modules linked in: CPU: 12 UID: 0 PID: 5563 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:refcount_warn_saturate (lib/refcount.c:28) Code: ab e8 8e b4 98 ff 0f 0b c3 cc cc cc cc cc 80 3d a4 e4 d6 01 00 75 9c c6 05 9b e4 d6 01 01 48 c7 c7 e8 df fb ab e8 6a b4 98 ff <0f> 0b e9 03 5b 76 00 cc 80 3d 7d e4 d6 01 00 0f 85 74 ff ff ff c6 RSP: 0018:ffffa79fc0304a98 EFLAGS: 00010246 RAX: d83af4db1c6b3900 RBX: ffff9f65c7a69020 RCX: d83af4db1c6b3900 RDX: 0000000000000000 RSI: 00000000ffff7fff RDI: ffffffffac78a280 RBP: 000000009d781b60 R08: 0000000000007fff R09: ffffffffac6ca280 R10: 0000000000017ffd R11: 0000000000000004 R12: ffff9f65c7b4f100 R13: ffff9f65c7d23c00 R14: ffff9f65c7d26000 R15: ffff9f65c7a64ef8 FS: 00007f9f962176c0(0000) GS:ffff9f65fcf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000180 CR3: 000000000dbbe006 CR4: 0000000000372ef0 Call Trace: <IRQ> tcp_conn_request (./include/linux/refcount.h:400 ./include/linux/refcount.h:432 ./include/linux/refcount.h:450 ./include/net/sock.h:1965 ./include/net/request_sock.h:131 net/ipv4/tcp_input.c:7301) tcp_rcv_state_process (net/ipv4/tcp_input.c:6708) tcp_v6_do_rcv (net/ipv6/tcp_ipv6.c:1670) tcp_v6_rcv (net/ipv6/tcp_ipv6.c:1906) ip6_protocol_deliver_rcu (net/ipv6/ip6_input.c:438) ip6_input (net/ipv6/ip6_input.c:500) ipv6_rcv (net/ipv6/ip6_input.c:311) __netif_receive_skb (net/core/dev.c:6104) process_backlog (net/core/dev.c:6456) __napi_poll (net/core/dev.c:7506) net_rx_action (net/core/dev.c:7569 net/core/dev.c:7696) handle_softirqs (kernel/softirq.c:579) do_softirq (kernel/softirq.c:480) </IRQ>

Record
EUVD-2025-150388
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-qx52-pj36-489j 8.1

In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call...

In the Linux kernel, the following vulnerability has been resolved:

tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

syzbot reported the splat below in tcp_conn_request(). [0]

If a listener is close()d while a TFO socket is being processed in tcp_conn_request(), inet_csk_reqsk_queue_add() does not set reqsk->sk and calls inet_child_forget(), which calls tcp_disconnect() for the TFO socket.

After the cited commit, tcp_disconnect() calls reqsk_fastopen_remove(), where reqsk_put() is called due to !reqsk->sk.

Then, reqsk_fastopen_remove() in tcp_conn_request() decrements the last req->rsk_refcnt and frees reqsk, and __reqsk_free() at the drop_and_free label causes the refcount underflow for the listener and double-free of the reqsk.

Let's remove reqsk_fastopen_remove() in tcp_conn_request().

Note that other callers make sure tp->fastopen_rsk is not NULL.

[0]: refcount_t: underflow; use-after-free. WARNING: CPU: 12 PID: 5563 at lib/refcount.c:28 refcount_warn_saturate (lib/refcount.c:28) Modules linked in: CPU: 12 UID: 0 PID: 5563 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:refcount_warn_saturate (lib/refcount.c:28) Code: ab e8 8e b4 98 ff 0f 0b c3 cc cc cc cc cc 80 3d a4 e4 d6 01 00 75 9c c6 05 9b e4 d6 01 01 48 c7 c7 e8 df fb ab e8 6a b4 98 ff <0f> 0b e9 03 5b 76 00 cc 80 3d 7d e4 d6 01 00 0f 85 74 ff ff ff c6 RSP: 0018:ffffa79fc0304a98 EFLAGS: 00010246 RAX: d83af4db1c6b3900 RBX: ffff9f65c7a69020 RCX: d83af4db1c6b3900 RDX: 0000000000000000 RSI: 00000000ffff7fff RDI: ffffffffac78a280 RBP: 000000009d781b60 R08: 0000000000007fff R09: ffffffffac6ca280 R10: 0000000000017ffd R11: 0000000000000004 R12: ffff9f65c7b4f100 R13: ffff9f65c7d23c00 R14: ffff9f65c7d26000 R15: ffff9f65c7a64ef8 FS: 00007f9f962176c0(0000) GS:ffff9f65fcf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000180 CR3: 000000000dbbe006 CR4: 0000000000372ef0 Call Trace: <IRQ> tcp_conn_request (./include/linux/refcount.h:400 ./include/linux/refcount.h:432 ./include/linux/refcount.h:450 ./include/net/sock.h:1965 ./include/net/request_sock.h:131 net/ipv4/tcp_input.c:7301) tcp_rcv_state_process (net/ipv4/tcp_input.c:6708) tcp_v6_do_rcv (net/ipv6/tcp_ipv6.c:1670) tcp_v6_rcv (net/ipv6/tcp_ipv6.c:1906) ip6_protocol_deliver_rcu (net/ipv6/ip6_input.c:438) ip6_input (net/ipv6/ip6_input.c:500) ipv6_rcv (net/ipv6/ip6_input.c:311) __netif_receive_skb (net/core/dev.c:6104) process_backlog (net/core/dev.c:6456) __napi_poll (net/core/dev.c:7506) net_rx_action (net/core/dev.c:7569 net/core/dev.c:7696) handle_softirqs (kernel/softirq.c:579) do_softirq (kernel/softirq.c:480) </IRQ>

Record
GHSA-qx52-pj36-489j
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
NVD 8.1

In the Linux kernel, the following vulnerability has been resolved:

tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

syzbot reported the splat below in tcp_conn_request(). [0]

If a listener is close()d while a TFO socket is being processed in tcp_conn_request(), inet_csk_reqsk_queue_add() does not set reqsk->sk and calls inet_child_forget(), which calls tcp_disconnect() for the TFO socket.

After the cited commit, tcp_disconnect() calls reqsk_fastopen_remove(), where reqsk_put() is called due to !reqsk->sk.

Then, reqsk_fastopen_remove() in tcp_conn_request() decrements the last req->rsk_refcnt and frees reqsk, and __reqsk_free() at the drop_and_free label causes the refcount underflow for the listener and double-free of the reqsk.

Let's remove reqsk_fastopen_remove() in tcp_conn_request().

Note that other callers make sure tp->fastopen_rsk is not NULL.

[0]: refcount_t: underflow; use-after-free. WARNING: CPU: 12 PID: 5563 at lib/refcount.c:28 refcount_warn_saturate (lib/refcount.c:28) Modules linked in: CPU: 12 UID: 0 PID: 5563 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:refcount_warn_saturate (lib/refcount.c:28) Code: ab e8 8e b4 98 ff 0f 0b c3 cc cc cc cc cc 80 3d a4 e4 d6 01 00 75 9c c6 05 9b e4 d6 01 01 48 c7 c7 e8 df fb ab e8 6a b4 98 ff <0f> 0b e9 03 5b 76 00 cc 80 3d 7d e4 d6 01 00 0f 85 74 ff ff ff c6 RSP: 0018:ffffa79fc0304a98 EFLAGS: 00010246 RAX: d83af4db1c6b3900 RBX: ffff9f65c7a69020 RCX: d83af4db1c6b3900 RDX: 0000000000000000 RSI: 00000000ffff7fff RDI: ffffffffac78a280 RBP: 000000009d781b60 R08: 0000000000007fff R09: ffffffffac6ca280 R10: 0000000000017ffd R11: 0000000000000004 R12: ffff9f65c7b4f100 R13: ffff9f65c7d23c00 R14: ffff9f65c7d26000 R15: ffff9f65c7a64ef8 FS: 00007f9f962176c0(0000) GS:ffff9f65fcf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000180 CR3: 000000000dbbe006 CR4: 0000000000372ef0 Call Trace: <IRQ> tcp_conn_request (./include/linux/refcount.h:400 ./include/linux/refcount.h:432 ./include/linux/refcount.h:450 ./include/net/sock.h:1965 ./include/net/request_sock.h:131 net/ipv4/tcp_input.c:7301) tcp_rcv_state_process (net/ipv4/tcp_input.c:6708) tcp_v6_do_rcv (net/ipv6/tcp_ipv6.c:1670) tcp_v6_rcv (net/ipv6/tcp_ipv6.c:1906) ip6_protocol_deliver_rcu (net/ipv6/ip6_input.c:438) ip6_input (net/ipv6/ip6_input.c:500) ipv6_rcv (net/ipv6/ip6_input.c:311) __netif_receive_skb (net/core/dev.c:6104) process_backlog (net/core/dev.c:6456) __napi_poll (net/core/dev.c:7506) net_rx_action (net/core/dev.c:7569 net/core/dev.c:7696) handle_softirqs (kernel/softirq.c:579) do_softirq (kernel/softirq.c:480) </IRQ>

Record
CVE-2025-40186
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2025-40186 8.1
Record
BELL-CVE-2025-40186
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 8.1

tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

In the Linux kernel, the following vulnerability has been resolved:

tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().

syzbot reported the splat below in tcp_conn_request(). [0]

If a listener is close()d while a TFO socket is being processed in tcp_conn_request(), inet_csk_reqsk_queue_add() does not set reqsk->sk and calls inet_child_forget(), which calls tcp_disconnect() for the TFO socket.

After the cited commit, tcp_disconnect() calls reqsk_fastopen_remove(), where reqsk_put() is called due to !reqsk->sk.

Then, reqsk_fastopen_remove() in tcp_conn_request() decrements the last req->rsk_refcnt and frees reqsk, and __reqsk_free() at the drop_and_free label causes the refcount underflow for the listener and double-free of the reqsk.

Let's remove reqsk_fastopen_remove() in tcp_conn_request().

Note that other callers make sure tp->fastopen_rsk is not NULL.

[0]: refcount_t: underflow; use-after-free. WARNING: CPU: 12 PID: 5563 at lib/refcount.c:28 refcount_warn_saturate (lib/refcount.c:28) Modules linked in: CPU: 12 UID: 0 PID: 5563 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:refcount_warn_saturate (lib/refcount.c:28) Code: ab e8 8e b4 98 ff 0f 0b c3 cc cc cc cc cc 80 3d a4 e4 d6 01 00 75 9c c6 05 9b e4 d6 01 01 48 c7 c7 e8 df fb ab e8 6a b4 98 ff <0f> 0b e9 03 5b 76 00 cc 80 3d 7d e4 d6 01 00 0f 85 74 ff ff ff c6 RSP: 0018:ffffa79fc0304a98 EFLAGS: 00010246 RAX: d83af4db1c6b3900 RBX: ffff9f65c7a69020 RCX: d83af4db1c6b3900 RDX: 0000000000000000 RSI: 00000000ffff7fff RDI: ffffffffac78a280 RBP: 000000009d781b60 R08: 0000000000007fff R09: ffffffffac6ca280 R10: 0000000000017ffd R11: 0000000000000004 R12: ffff9f65c7b4f100 R13: ffff9f65c7d23c00 R14: ffff9f65c7d26000 R15: ffff9f65c7a64ef8 FS: 00007f9f962176c0(0000) GS:ffff9f65fcf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000180 CR3: 000000000dbbe006 CR4: 0000000000372ef0 Call Trace: <IRQ> tcp_conn_request (./include/linux/refcount.h:400 ./include/linux/refcount.h:432 ./include/linux/refcount.h:450 ./include/net/sock.h:1965 ./include/net/request_sock.h:131 net/ipv4/tcp_input.c:7301) tcp_rcv_state_process (net/ipv4/tcp_input.c:6708) tcp_v6_do_rcv (net/ipv6/tcp_ipv6.c:1670) tcp_v6_rcv (net/ipv6/tcp_ipv6.c:1906) ip6_protocol_deliver_rcu (net/ipv6/ip6_input.c:438) ip6_input (net/ipv6/ip6_input.c:500) ipv6_rcv (net/ipv6/ip6_input.c:311) __netif_receive_skb (net/core/dev.c:6104) process_backlog (net/core/dev.c:6456) __napi_poll (net/core/dev.c:7506) net_rx_action (net/core/dev.c:7569 net/core/dev.c:7696) handle_softirqs (kernel/softirq.c:579) do_softirq (kernel/softirq.c:480) </IRQ>

Record
CVE-2025-40186
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 46 moreShow less
OSVDEBIAN-CVE-2025-40186 8.1

In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). syzbot reported the splat below in tcp_conn_request(). [0] If a listener is close()d while a TFO socket is being processed in tcp_conn_request(), inet_csk_reqsk_queue_add() does not set reqsk->sk and calls inet_child_forget(), which calls tcp_disconnect() for the TFO socket. After the cited commit, tcp_disconnect() calls reqsk_fastopen_remove(), where reqsk_put() is called due to !reqsk->sk. Then, reqsk_fastopen_remove() in tcp_conn_request() decrements the last req->rsk_refcnt and frees reqsk, and __reqsk_free() at the drop_and_free label causes the refcount underflow for the listener and double-free of the reqsk. Let's remove reqsk_fastopen_remove() in tcp_conn_request(). Note that other callers make sure tp->fastopen_rsk is not NULL. [0]: refcount_t: underflow; use-after-free. WARNING: CPU: 12 PID: 5563 at lib/refcount.c:28 refcount_warn_saturate (lib/refcount.c:28) Modules linked in: CPU: 12 UID: 0 PID: 5563 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:refcount_warn_saturate (lib/refcount.c:28) Code: ab e8 8e b4 98 ff 0f 0b c3 cc cc cc cc cc 80 3d a4 e4 d6 01 00 75 9c c6 05 9b e4 d6 01 01 48 c7 c7 e8 df fb ab e8 6a b4 98 ff <0f> 0b e9 03 5b 76 00 cc 80 3d 7d e4 d6 01 00 0f 85 74 ff ff ff c6 RSP: 0018:ffffa79fc0304a98 EFLAGS: 00010246 RAX: d83af4db1c6b3900 RBX: ffff9f65c7a69020 RCX: d83af4db1c6b3900 RDX: 0000000000000000 RSI: 00000000ffff7fff RDI: ffffffffac78a280 RBP: 000000009d781b60 R08: 0000000000007fff R09: ffffffffac6ca280 R10: 0000000000017ffd R11: 0000000000000004 R12: ffff9f65c7b4f100 R13: ffff9f65c7d23c00 R14: ffff9f65c7d26000 R15: ffff9f65c7a64ef8 FS: 00007f9f962176c0(0000) GS:ffff9f65fcf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000180 CR3: 000000000dbbe006 CR4: 0000000000372ef0 Call Trace: <IRQ> tcp_conn_request (./include/linux/refcount.h:400 ./include/linux/refcount.h:432 ./include/linux/refcount.h:450 ./include/net/sock.h:1965 ./include/net/request_sock.h:131 net/ipv4/tcp_input.c:7301) tcp_rcv_state_process (net/ipv4/tcp_input.c:6708) tcp_v6_do_rcv (net/ipv6/tcp_ipv6.c:1670) tcp_v6_rcv (net/ipv6/tcp_ipv6.c:1906) ip6_protocol_deliver_rcu (net/ipv6/ip6_input.c:438) ip6_input (net/ipv6/ip6_input.c:500) ipv6_rcv (net/ipv6/ip6_input.c:311) __netif_receive_skb (net/core/dev.c:6104) process_backlog (net/core/dev.c:6456) __napi_poll (net/core/dev.c:7506) net_rx_action (net/core/dev.c:7569 net/core/dev.c:7696) handle_softirqs (kernel/softirq.c:579) do_softirq (kernel/softirq.c:480) </IRQ>

Record
DEBIAN-CVE-2025-40186
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:22387 7.6

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2025:22387
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2025:22388 7.6

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:22388
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2025:22392 7.6

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:22392
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2025:23422 7.6

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2025:23422
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2025:23423 7.6

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:23423
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2025:23424 7.6

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2025:23424
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2025:23425 7.6

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:23425
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2025:23426 7.6

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:23426
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2025:23427 7.6

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:23427
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2025:23445 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:23445
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:23450 7.6

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:23450
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2025:23463 7.6

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:23463
CVSS 3.1
7.6 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-40186 7.3

In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). syzbot reported the splat below in tcp_conn_request(). [0] If a listener is close()d while a TFO socket is being processed in tcp_conn_request(), inet_csk_reqsk_queue_add() does not set reqsk->sk and calls inet_child_forget(), which calls tcp_disconnect() for the TFO socket. After the cited commit, tcp_disconnect() calls reqsk_fastopen_remove(), where reqsk_put() is called due to !reqsk->sk. Then, reqsk_fastopen_remove() in tcp_conn_request() decrements the last req->rsk_refcnt and frees reqsk, and __reqsk_free() at the drop_and_free label causes the refcount underflow for the listener and double-free of the reqsk. Let's remove reqsk_fastopen_remove() in tcp_conn_request(). Note that other callers make sure tp->fastopen_rsk is not NULL. [0]: refcount_t: underflow; use-after-free. WARNING: CPU: 12 PID: 5563 at lib/refcount.c:28 refcount_warn_saturate (lib/refcount.c:28) Modules linked in: CPU: 12 UID: 0 PID: 5563 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:refcount_warn_saturate (lib/refcount.c:28) Code: ab e8 8e b4 98 ff 0f 0b c3 cc cc cc cc cc 80 3d a4 e4 d6 01 00 75 9c c6 05 9b e4 d6 01 01 48 c7 c7 e8 df fb ab e8 6a b4 98 ff <0f> 0b e9 03 5b 76 00 cc 80 3d 7d e4 d6 01 00 0f 85 74 ff ff ff c6 RSP: 0018:ffffa79fc0304a98 EFLAGS: 00010246 RAX: d83af4db1c6b3900 RBX: ffff9f65c7a69020 RCX: d83af4db1c6b3900 RDX: 0000000000000000 RSI: 00000000ffff7fff RDI: ffffffffac78a280 RBP: 000000009d781b60 R08: 0000000000007fff R09: ffffffffac6ca280 R10: 0000000000017ffd R11: 0000000000000004 R12: ffff9f65c7b4f100 R13: ffff9f65c7d23c00 R14: ffff9f65c7d26000 R15: ffff9f65c7a64ef8 FS: 00007f9f962176c0(0000) GS:ffff9f65fcf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000180 CR3: 000000000dbbe006 CR4: 0000000000372ef0 Call Trace: <IRQ> tcp_conn_request (./include/linux/refcount.h:400 ./include/linux/refcount.h:432 ./include/linux/refcount.h:450 ./include/net/sock.h:1965 ./include/net/request_sock.h:131 net/ipv4/tcp_input.c:7301) tcp_rcv_state_process (net/ipv4/tcp_input.c:6708) tcp_v6_do_rcv (net/ipv6/tcp_ipv6.c:1670) tcp_v6_rcv (net/ipv6/tcp_ipv6.c:1906) ip6_protocol_deliver_rcu (net/ipv6/ip6_input.c:438) ip6_input (net/ipv6/ip6_input.c:500) ipv6_rcv (net/ipv6/ip6_input.c:311) __netif_receive_skb (net/core/dev.c:6104) process_backlog (net/core/dev.c:6456) __napi_poll (net/core/dev.c:7506) net_rx_action (net/core/dev.c:7569 net/core/dev.c:7696) handle_softirqs (kernel/softirq.c:579) do_softirq (kernel/softirq.c:480) </IRQ>

Record
UBUNTU-CVE-2025-40186
CVSS 4.0
7.3 HighCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2025:22387 No score

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
  • kernel: smb: client: fix race with concurrent opens in rename(2) (CVE-2025-39825)
  • kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)
  • kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
  • kernel: nbd: fix incomplete validation of ioctl arg (CVE-2023-53513)
  • kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:22387
Updated
2026-11-02
OSVALSA-2025:22388 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
  • kernel: smb: client: fix race with concurrent opens in rename(2) (CVE-2025-39825)
  • kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)
  • kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
  • kernel: nbd: fix incomplete validation of ioctl arg (CVE-2023-53513)
  • kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:22388
Updated
2026-11-02
OSVCLSA-2025-1764085382 No score

kernel-uek: Fix of 236 CVEs

  • drm/amd/display: Skip on writeback when it's not applicable {CVE-2024-36914}
  • ASoC: topology: Fix references to freed memory {CVE-2024-41069}
  • Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
  • Bluetooth: SCO: Fix not validating setsockopt user input
  • drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
  • xfs: don't walk off the end of a directory data block {CVE-2024-41013}
  • wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937}
  • Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
  • net/rds: Fix rs_recv_pending counting issue
  • LTS tag: v5.4.301
  • net: rtnetlink: fix module reference count leak issue in rtnetlink_rcv_msg
  • media: s5p-mfc: remove an unused/uninitialized variable
  • NFSD: Fix last write offset handling in layoutcommit
  • NFSD: Minor cleanup in layoutcommit processing
  • padata: Reset next CPU when reorder sequence wraps around
  • KEYS: trusted_tpm1: Compare HMAC values in constant time
  • NFSD: Define a proc_layoutcommit for the FlexFiles layout type {CVE-2025-40087}
  • vfs: Don't leak disconnected dentries on umount {CVE-2025-40105}
  • jbd2: ensure that all ongoing I/O complete before freeing blocks
  • ext4: detect invalid INLINE_DATA + EXTENTS flag combination {CVE-2025-40167}
  • drm/amdgpu: use atomic functions with memory barriers for vm fault info
  • ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() {CVE-2025-40198}
  • spi: cadence-quadspi: Flush posted register writes before DAC access
  • spi: cadence-quadspi: Flush posted register writes before INDAC access
  • memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
  • memory: samsung: exynos-srom: Correct alignment
  • arm64: errata: Apply workarounds for Neoverse-V3AE
  • arm64: cputype: Add Neoverse-V3AE definitions
  • comedi: fix divide-by-zero in comedi_buf_munge() {CVE-2025-40106}
  • binder: remove "invalid inc weak" check
  • xhci: dbc: enable back DbC in resume if it was enabled before suspend
  • usb/core/quirks: Add Huawei ME906S to wakeup quirk
  • USB: serial: option: add Telit FN920C04 ECM compositions
  • USB: serial: option: add Quectel RG255C
  • USB: serial: option: add UNISOC UIS7720
  • net: ravb: Ensure memory write completes before ringing TX doorbell
  • net: usb: rtl8150: Fix frame padding
  • ocfs2: clear extent cache after moving/defragmenting extents
  • MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering
  • Revert "cpuidle: menu: Avoid discarding useful information"
  • net: bonding: fix possible peer notify event loss or dup issue
  • sctp: avoid NULL dereference when chunk data buffer is missing
  • arm64, mm: avoid always making PTE dirty in pte_mkwrite()
  • net: enetc: correct the value of ENETC_RXB_TRUESIZE
  • rtnetlink: Allow deleting FDB entries in user namespace
  • net: rtnetlink: add NLM_F_BULK support to rtnl_fdb_del
  • net: add ndo_fdb_del_bulk
  • net: rtnetlink: add bulk delete support flag
  • net: netlink: add NLM_F_BULK delete request modifier
  • net: rtnetlink: use BIT for flag values
  • net: rtnetlink: add helper to extract msg type's kind
  • net: rtnetlink: add msg kind names
  • net: rtnetlink: remove redundant assignment to variable err
  • m68k: bitops: Fix find_*_bit() signatures
  • hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super()
  • hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
  • dlm: check for defined force value in dlm_lockspace_release
  • hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
  • hfs: validate record offset in hfsplus_bmap_alloc
  • hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
  • hfs: make proper initalization of struct hfs_find_data
  • hfs: clear offset and space out of valid records in b-tree node
  • exec: Fix incorrect type for ret
  • hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() {CVE-2025-40088}
  • ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
  • sched/fair: Fix pelt lost idle time…
Record
CLSA-2025-1764085382
Updated
2026-11-02
OSVCLSA-2026-1767864313 No score

kernel: Fix of 46 CVEs

  • mm: hugetlb: fix UAF in hugetlb_handle_userfault {CVE-2022-50630}
  • drm/amdkfd: fix potential kgd_mem UAFs {CVE-2023-53816}
  • net/mlx5e: Fix deadlock in tc route query code {CVE-2023-53591}
  • PCI: Fix pci_device_is_present() for VFs by checking PF {CVE-2022-50636}
  • wifi: ath11k: fix monitor mode bringup crash {CVE-2022-50627}
  • wifi: mac80211_hwsim: drop short frames {CVE-2023-53321}
  • scsi: target: iscsi: Fix timeout on deleted connection {CVE-2025-38075}
  • amdgpu: validate offset_in_bo of drm_amdgpu_gem_va {CVE-2023-53819}
  • dmaengine: ptdma: check for null desc before calling pt_cmd_callback {CVE-2023-53755}
  • wifi: mt7601u: fix an integer underflow {CVE-2023-53679}
  • Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673}
  • firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails {CVE-2022-50087}
  • tls: wait for pending async decryptions if tls_strp_msg_hold fails {CVE-2025-40176}
  • clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns {CVE-2025-38499}
  • net: openvswitch: reject negative ifindex {CVE-2023-53843}
  • drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833}
  • iommu/amd: Improve page fault error reporting {CVE-2023-53789}
  • media: v4l2-mem2mem: add lock to protect parameter num_rdy {CVE-2023-53519}
  • Bluetooth: Fix potential use-after-free when clear keys {CVE-2023-53386}
  • Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305}
  • ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285}
  • ext4: fix use-after-free in ext4_orphan_cleanup {CVE-2022-50673}
  • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
  • rxrpc: Make it so that a waiting process can be aborted {CVE-2023-53218}
  • ip6_vti: fix slab-use-after-free in decode_session6 {CVE-2023-53821}
  • vxlan: Fix nexthop hash size {CVE-2023-53192}
  • wifi: mac80211: check S1G action frame size {CVE-2023-53257}
  • wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() {CVE-2022-50279}
  • dm flakey: fix a crash with invalid table line {CVE-2023-53786}
  • md/raid10: fix null-ptr-deref in raid10_sync_request {CVE-2023-53832}
  • md: don't dereference mddev after export_rdev() {CVE-2023-53665}
  • md: fix 'delete_mutex' deadlock
  • md: fix duplicate filename for rdev {CVE-2023-53665}
  • kernfs: Fix UAF in polling when open file is released {CVE-2025-39881}
  • mptcp: pm: avoid possible UaF when selecting endp {CVE-2024-44974}
  • mptcp: fix UaF in listener shutdown {CVE-2023-53088}
  • Bluetooth: MGMT: Fix possible UAFs {CVE-2025-39981}
  • Bluetooth: hci_sync: fix set_local_name race condition
  • Bluetooth: MGMT: Fix possible deadlocks {CVE-2024-53207}
  • tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186}
  • e1000e: fix heap overflow in e1000_set_eeprom {CVE-2025-39898}
  • wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864}
  • nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724}
  • usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022}
  • xfrm: xfrm_alloc_spi shouldn't use 0 as SPI {CVE-2025-39965}
  • xfrm: Duplicate SPI Handling {CVE-2025-39797}
  • nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216}
  • NFS: Fix a race when updating an existing write {CVE-2025-39697}
  • nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
  • drm/amd/display: Check dce_hwseq before dereferencing it {CVE-2025-38361}
Record
CLSA-2026-1767864313
Updated
2026-11-02
OSVCLSA-2026-1767867153 No score

kernel: Fix of 16 CVEs

  • crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
  • wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
  • NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945}
  • tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186}
  • can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
  • Squashfs: check return result of sb_min_blocksize {CVE-2025-38415}
  • ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757}
  • ext4: fix undefined behavior in bit shift for ext4_check_flag_values {CVE-2022-50403}
  • scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
  • fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978}
  • ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729}
  • ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886}
  • wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}
  • atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245}
  • atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459}
  • smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}
Record
CLSA-2026-1767867153
Updated
2026-11-02
OSVCLSA-2026-1767867718 No score

kernel: Fix of 16 CVEs

  • crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
  • wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
  • NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945}
  • tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186}
  • can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
  • Squashfs: check return result of sb_min_blocksize {CVE-2025-38415}
  • ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757}
  • ext4: fix undefined behavior in bit shift for ext4_check_flag_values {CVE-2022-50403}
  • scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
  • fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978}
  • ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729}
  • ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886}
  • wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}
  • atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245}
  • atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459}
  • smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}
Record
CLSA-2026-1767867718
Updated
2026-11-02
OSVCLSA-2026-1768110920 No score

kernel: Fix of 16 CVEs

  • crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
  • wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
  • NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945}
  • tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186}
  • can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
  • Squashfs: check return result of sb_min_blocksize {CVE-2025-38415}
  • ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757}
  • ext4: fix undefined behavior in bit shift for ext4_check_flag_values {CVE-2022-50403}
  • scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
  • fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978}
  • ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729}
  • ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886}
  • wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}
  • atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245}
  • atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459}
  • smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}
Record
CLSA-2026-1768110920
Updated
2026-11-02
OSVCLSA-2026-1770032032 No score

kernel: Fix of 63 CVEs

  • mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory {CVE-2025-39883}
  • comedi: aio_iiro_16: Fix bit shift out of bounds {CVE-2025-38529}
  • comedi: das6402: Fix bit shift out of bounds {CVE-2025-38482}
  • comedi: pcl812: Fix bit shift out of bounds {CVE-2025-38530}
  • comedi: das16m1: Fix bit shift out of bounds {CVE-2025-38483}
  • tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). {CVE-2025-40186}
  • wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
  • smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}
  • libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285}
  • sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240}
  • smb: client: let recv_done verify data_offset, data_length and remaining_data_length {CVE-2025-39933}
  • vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248}
  • ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping {CVE-2025-40154}
  • Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673}
  • net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
  • net/mlx5e: fix a potential double-free in fs_any_create_groups {CVE-2023-52667}
  • mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update {CVE-2024-35855}
  • Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
  • perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835}
  • ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704}
  • stm class: Fix a double free in stm_register_device() {CVE-2024-38627}
  • pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940}
  • ipvlan: add ipvlan_route_v6_outbound() helper {CVE-2023-52796}
  • wifi: ath11k: fix gtk offload status event locking {CVE-2023-52777}
  • ice: fix memory corruption bug with suspend and rebuild {CVE-2024-35911}
  • drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' {CVE-2024-27042}
  • drm/i915/vma: Fix UAF on destroy against retire race {CVE-2024-26939}
  • netfilter: nf_tables: prefer nft_chain_validate {CVE-2024-41042}
  • Bluetooth: Fix potential use-after-free when clear keys {CVE-2023-53386}
  • drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] {CVE-2024-46815}
  • drm/amd/display: Check pipe offset before setting vblank {CVE-2024-42120}
  • nbd: fix incomplete validation of ioctl arg {CVE-2023-53513}
  • RDMA/rxe: Fix incomplete state save in rxe_requester {CVE-2023-53539}
  • netfilter: nftables: exthdr: fix 4-byte stack OOB write
  • net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749}
  • net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823}
  • iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid {CVE-2025-37927}
  • drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE {CVE-2025-40277}
  • nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724}
  • RDMA/rxe: Fix mr->map double free {CVE-2022-50543}
  • ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212}
  • vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403}
  • RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024}
  • drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies {CVE-2025-40096}
  • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • drm/i915: mark requests for GuC virtual engines to avoid use-after-free {CVE-2023-53552}
  • net: atlantic: fix fragment overflow handling in RX path {CVE-2025-68301}
  • net: atm: add lec_mutex {CVE-2025-38323}
  • net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789}
  • scsi: lpfc: Fix buffer free/clear order in deferred receive path…
Record
CLSA-2026-1770032032
Updated
2026-11-02
OSVCLSA-2026-1782155469 No score

kernel: Fix of 143 CVEs

  • ice: Fix PTP NULL pointer dereference during VSI rebuild {CVE-2026-23210}
  • tracing: Add recursion protection in kernel stack trace recording {CVE-2026-23138}
  • mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() {CVE-2025-38681}
  • cpuset: fix warning when disabling remote partition {CVE-2025-71142}
  • virtio: break and reset virtio devices on device_shutdown() {CVE-2025-38064}
  • netdevsim: fix a race issue related to the operation on bpf_bound_progs list {CVE-2026-23126}
  • atm: clip: Fix potential null-ptr-deref in to_atmarpd(). {CVE-2025-38460}
  • idpf: fix error handling in the init_task on load {CVE-2026-23017}
  • rxrpc: Fix recvmsg() unconditional requeue {CVE-2026-23066}
  • block: zero non-PI portion of auto integrity buffer {CVE-2026-23007}
  • can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode {CVE-2025-38665}
  • virtio_net: Fix napi_skb_cache_put warning {CVE-2024-43835}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() {CVE-2026-23169}
  • net: fix segmentation of forwarding fraglist GRO {CVE-2026-23154}
  • gfs2: Validate i_depth for exhash directories {CVE-2025-38710}
  • KVM: Don't clobber irqfd routing type when deassigning irqfd {CVE-2026-23198}
  • ipvlan: Make the addrs_lock be per port {CVE-2026-23103}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • can: mcp251xfd: fix infinite loop when xmit fails {CVE-2024-41088}
  • RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly {CVE-2025-71096}
  • RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction {CVE-2025-38161}
  • scsi: qla2xxx: Validate sp before freeing associated memory {CVE-2025-71236}
  • net/sched: netem: account for backlog updates from child qdisc {CVE-2024-56770}
  • drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat {CVE-2026-31656}
  • iavf: fix off-by-one issues in iavf_config_rss_reg() {CVE-2025-71087}
  • net/sched: ets: fix divide by zero in the offload path {CVE-2026-23379}
  • can: j1939: implement NETDEV_UNREGISTER notification handler {CVE-2025-39925}
  • ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() {CVE-2026-31531}
  • Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb {CVE-2026-31510}
  • ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() {CVE-2026-23003}
  • drm/i915/gt: Check set_default_submission() before deferencing {CVE-2026-31540}
  • mac802154: check local interfaces before deleting sdata list {CVE-2024-57948}
  • lib/buildid: use __kernel_read() for sleepable context {CVE-2026-23002}
  • scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs {CVE-2023-52808}
  • net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
  • irqchip/imx-irqsteer: Handle runtime power management correctly {CVE-2024-42290}
  • io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop {CVE-2026-23113}
  • net/sched: ets: Remove drr class from the active list if it changes to strict {CVE-2025-68815}
  • net: bonding: fix NULL deref in bond_debug_rlb_hash_show {CVE-2026-31546}
  • ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
  • openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
  • net: USB: Fix wrong-direction WARNING in plusb.c {CVE-2023-52742}
  • module: Fix kernel panic when a symbol st_shndx is out of bounds {CVE-2026-31521}
  • udf: Fix preallocation discarding at indirect extent boundary {CVE-2022-48946}
  • net/mlx5: qos: Restrict RTNL area to avoid a lock cycle {CVE-2025-39947}
  • scsi: core: Wake up the error handler when final completions race against each other {CVE-2026-23110}
  • nbd: don't allow reconnect after disconnect {CVE-2025-21731}
  • nfsd: check that server is running in unlock_filesystem {CVE-2026-22989}
  • af_key: validate families in pfkey_send_migrate() {CVE-2026-31515}
  • netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() {CVE-2024-36286} -…
Record
CLSA-2026-1782155469
Updated
2026-11-02
OSVCLSA-2026-1788449727 No score

Fix of 235 CVEs

  • Bump kernel ABI to 29: ship the ELS kernel as 4.19.0-29-*, distinct from the prior 4.19.0-28.
  • CVE-2021-46984
    • kyber: fix out of bounds access when preempted {CVE-2021-46984}
  • CVE-2021-47049
    • Drivers: hv: vmbus: Use after free in __vmbus_open() {CVE-2021-47049}
  • CVE-2021-47101
    • asix: fix uninit-value in asix_mdio_read() {CVE-2021-47101}
  • CVE-2021-47191
    • scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() {CVE-2021-47191}
  • CVE-2021-47352
    • virtio-net: Add validation for used length {CVE-2021-47352}
  • CVE-2021-47379
    • blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd {CVE-2021-47379}
  • CVE-2021-47391
    • RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests {CVE-2021-47391}
  • CVE-2021-47479
    • staging: rtl8712: fix use-after-free in rtl8712_dl_fw {CVE-2021-47479}
  • CVE-2022-21546
    • scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546}
  • CVE-2022-39189
    • KVM: x86: do not report a vCPU as preempted outside instruction boundaries {CVE-2022-39189}
  • CVE-2022-43945
    • SUNRPC: Fix svcxdr_init_encode's buflen calculation {CVE-2022-43945}
    • NFSD: Cap rsize_bop result based on send buffer size {CVE-2022-43945}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2022-49026
    • e100: Fix possible use after free in e100_xmit_prepare {CVE-2022-49026}
  • CVE-2022-49720
    • block: Fix handling of offline queues in blk_mq_alloc_request_hctx() {CVE-2022-49720}
  • CVE-2022-49975
    • bpf: Don't redirect packets with invalid pkt_len {CVE-2022-49975}
    • bpf: Move skb->len == 0 checks into __bpf_redirect {CVE-2022-49975}
  • CVE-2022-50066
    • net: atlantic: fix aq_vec index out of range error {CVE-2022-50066}
  • CVE-2022-50103
    • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • CVE-2022-50129
    • RDMA/srpt: Introduce a reference count in struct srpt_device {CVE-2022-50129}
    • RDMA/srpt: Fix a use-after-free {CVE-2022-50129}
  • CVE-2022-50300
    • btrfs: fix extent map use-after-free when handling missing device in read_one_chunk {CVE-2022-50300}
  • CVE-2022-50406
    • iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406}
  • CVE-2022-50422
    • scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
  • CVE-2022-50552
    • blk-mq: use quiesced elevator switch when reinitializing queues {CVE-2022-50552}
  • CVE-2023-51779
    • Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
  • CVE-2023-52434
    • smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434}
  • CVE-2023-52515
    • RDMA/srp: Do not call scsi_done() from srp_abort() {CVE-2023-52515}
  • CVE-2023-52531
    • wifi: iwlwifi: mvm: Fix a memory corruption issue {CVE-2023-52531}
  • CVE-2023-52741
    • cifs: Fix use-after-free in rdata->read_into_pages() {CVE-2023-52741}
  • CVE-2023-53000
    • netlink: prevent potential spectre v1 gadgets {CVE-2023-53000}
  • CVE-2023-53039
    • workqueue: Add resource managed version of delayed work init {CVE-2023-53039}
    • devm-helpers: Fix devm_delayed_work_autocancel() kerneldoc {CVE-2023-53039}
    • devm-helpers: Add resource managed version of work init {CVE-2023-53039}
    • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
    • HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc {CVE-2023-53039}
  • CVE-2023-53111
    • loop: Fix use-after-free issues {CVE-2023-53111}
  • CVE-2023-53254
    • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels…
Record
CLSA-2026-1788449727
Updated
2026-11-02
OSVopenSUSE-SU-2025:20172-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
  • CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
  • CVE-2025-38084: mm/hugetlb: unshare page tables during VMA split, not before (bsc#1245431 bsc#1245498).
  • CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431 bsc#1245499).
  • CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
  • CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
  • CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
  • CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
  • CVE-2025-39822: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034).
  • CVE-2025-39831: fbnic: Move phylink resume out of service_task and into open/close (bsc#1249977).
  • CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
  • CVE-2025-39897: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval (bsc#1250746).
  • CVE-2025-39917: bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt (bsc#1250723).
  • CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
  • CVE-2025-39961: iommu/amd/pgtbl: Fix possible race while increase page table level (bsc#1251817).
  • CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
  • CVE-2025-39990: bpf: Check the helper function is valid in get_helper_proto (bsc#1252054).
  • CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
  • CVE-2025-40003: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work (bsc#1252301).
  • CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
  • CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
  • CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
  • CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
  • CVE-2025-40031: tee: fix register_shm_helper() (bsc#1252779).
  • CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
  • CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
  • CVE-2025-40047: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (bsc#1252790).
  • CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
  • CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
  • CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
  • CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
  • CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
  • CVE-2025-40074: tcp: convert to dev_net_rcu() (bsc#1252794).
  • CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
  • CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
  • CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
  • CVE-2025-40086: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923).
  • CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
  • CVE-2025-40101: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST (bsc#1252901).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
  • CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
  • CVE-2025-40133: mptcp: Call dst_release() in mptcp_active_enable() (bsc#1253328).
  • CVE-2025-40134: dm: fix NULL pointer dereference in…
Record
openSUSE-SU-2025:20172-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2025-40186 No score

CVE-2025-40186 in linux - Patched by Root

Root has patched CVE-2025-40186 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2025-40186
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2025-40186 No score

CVE-2025-40186 in linux - Patched by Root

Root has patched CVE-2025-40186 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2025-40186
Updated
2026-11-03
OSVSUSE-SU-2025:4393-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
  • CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
  • CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
  • CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
  • CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
  • CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
  • CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
  • CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
  • CVE-2025-39822: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034).
  • CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
  • CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
  • CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
  • CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
  • CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
  • CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
  • CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
  • CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40047: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (bsc#1252790).
  • CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
  • CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
  • CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
  • CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
  • CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
  • CVE-2025-40074: ipv4: start using dst_dev_rcu() (bsc#1252794).
  • CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
  • CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
  • CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
  • CVE-2025-40086: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923).
  • CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
  • CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
  • CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
  • CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
  • CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
  • CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
  • CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
  • CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
  • CVE-2025-40185: ice: ice_adapter: release xa entry on adapter allocation failure (bsc#1253394).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).

The following non security issues were fixed:

  • ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
  • ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (git-fixes).
  • ACPI: CPPC: Perform fast check switch only for online CPUs (git-fixes).
  • ACPI: PRM:…
Record
SUSE-SU-2025:4393-1
Updated
2026-11-02
OSVSUSE-SU-2025:4422-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
  • CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
  • CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
  • CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
  • CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
  • CVE-2025-38361: drm/amd/display: Check dce_hwseq before dereferencing it (bsc#1247079).
  • CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
  • CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
  • CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
  • CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
  • CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
  • CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
  • CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
  • CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
  • CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
  • CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
  • CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
  • CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
  • CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
  • CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
  • CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
  • CVE-2025-40074: ipv4: start using dst_dev_rcu() (bsc#1252794).
  • CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
  • CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
  • CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
  • CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
  • CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
  • CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
  • CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
  • CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
  • CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
  • CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).

The following non security issues were fixed:

  • ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
  • ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (git-fixes).
  • ACPI: CPPC: Perform fast check switch only for online CPUs (git-fixes).
  • ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (stable-fixes).
  • ACPI: SBS: Fix present test in acpi_battery_read() (git-fixes).
  • ACPI: property: Return present device nodes only on fwnode interface (stable-fixes).
  • ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids (stable-fixes).
  • ACPICA: Update dsmethod.c to get rid of unused variable warning…
Record
SUSE-SU-2025:4422-1
Updated
2026-11-02
OSVSUSE-SU-2025:4505-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
  • CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
  • CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
  • CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
  • CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
  • CVE-2025-38361: drm/amd/display: Check dce_hwseq before dereferencing it (bsc#1247079).
  • CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
  • CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
  • CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
  • CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
  • CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
  • CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
  • CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
  • CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
  • CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
  • CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
  • CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
  • CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
  • CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
  • CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
  • CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
  • CVE-2025-40074: ipv4: start using dst_dev_rcu() (bsc#1252794).
  • CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
  • CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
  • CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
  • CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
  • CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
  • CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
  • CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
  • CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
  • CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
  • CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).

The following non-security bugs were fixed:

  • ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
  • ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (git-fixes).
  • ACPI: CPPC: Perform fast check switch only for online CPUs (git-fixes).
  • ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (stable-fixes).
  • ACPI: SBS: Fix present test in acpi_battery_read() (git-fixes).
  • ACPI: property: Return present device nodes only on fwnode interface (stable-fixes).
  • ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids (stable-fixes).
  • ACPICA: Update dsmethod.c to get rid of unused variable…
Record
SUSE-SU-2025:4505-1
Updated
2026-11-02
OSVSUSE-SU-2025:4515-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-50364: i2c: mux: reg: check return value after calling platform_get_resource() (bsc#1250083).
  • CVE-2022-50368: drm/msm/dsi: fix memory corruption with too many bridges (bsc#1250009).
  • CVE-2022-50494: thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (bsc#1251173).
  • CVE-2022-50545: r6040: Fix kmemleak in probe and remove (bsc#1251285).
  • CVE-2022-50551: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (bsc#1251322).
  • CVE-2022-50569: xfrm: Update ipcomp_scratches with NULL when freed (bsc#1252640).
  • CVE-2022-50578: class: fix possible memory leak in __class_register() (bsc#1252519).
  • CVE-2023-53229: wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (bsc#1249650).
  • CVE-2023-53369: net: dcb: choose correct policy to parse DCB_ATTR_BCN (bsc#1250206).
  • CVE-2023-53431: scsi: ses: Don't attach if enclosure has no components (bsc#1250374).
  • CVE-2023-53542: ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (bsc#1251154).
  • CVE-2023-53597: cifs: fix mid leak during reconnection after timeout threshold (bsc#1251159).
  • CVE-2023-53641: wifi: ath9k: hif_usb: fix memory leak of remain_skbs (bsc#1251728).
  • CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
  • CVE-2025-38436: drm/scheduler: signal scheduled fence when kill job (bsc#1247227).
  • CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
  • CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
  • CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
  • CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
  • CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
  • CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
  • CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
  • CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
  • CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).
  • CVE-2025-40205: btrfs: avoid potential out-of-bounds in btrfs_encode_fh() (bsc#1253456).

The following non-security bugs were fixed:

  • KVM: x86: Give a hint when Win2016 might fail to boot due to XSAVES erratum (git-fixes).
  • PCI: aardvark: Fix checking for MEM resource type (git-fixes).
  • cifs: Check the lease context if we actually got a lease (bsc#1228688).
  • cifs: return a single-use cfid if we did not get a lease (bsc#1228688).
  • dmaengine: bcm2835: Avoid GFP_KERNEL in device_prep_slave_sg (bsc#1070872).
  • kabi/severities: Update info about kvm_86_ops.
  • net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (bsc#1220419).
  • skmsg: Return copied bytes in sk_msg_memcopy_from_iter (bsc#1250650).
  • smb3: fix Open files on server counter going negative (git-fixes).
  • tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork (bsc#1250705).
  • tcp_bpf: Fix copied value in tcp_bpf_sendmsg (bsc#1250650).
  • thermal: intel_powerclamp: Use first online CPU as control_cpu (bsc#1251173).
Record
SUSE-SU-2025:4515-1
Updated
2026-11-02
OSVSUSE-SU-2025:4516-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
  • CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
  • CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
  • CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
  • CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
  • CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
  • CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
  • CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
  • CVE-2025-39822: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034).
  • CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
  • CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
  • CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
  • CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
  • CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
  • CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
  • CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
  • CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40047: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (bsc#1252790).
  • CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
  • CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
  • CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
  • CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
  • CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
  • CVE-2025-40074: ipv4: start using dst_dev_rcu() (bsc#1252794).
  • CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
  • CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774).
  • CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
  • CVE-2025-40086: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923).
  • CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
  • CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
  • CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
  • CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
  • CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
  • CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
  • CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
  • CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
  • CVE-2025-40185: ice: ice_adapter: release xa entry on adapter allocation failure (bsc#1253394).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).
  • CVE-2025-40206: Add missing bugzilla reference to net fix (bsc#1250237 bsc#1253393).

The following non-security bugs were fixed:

  • ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
  • ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs…
Record
SUSE-SU-2025:4516-1
Updated
2026-11-02
OSVSUSE-SU-2025:4517-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
  • CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
  • CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
  • CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
  • CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
  • CVE-2025-38360: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (bsc#1247078).
  • CVE-2025-38361: drm/amd/display: Check dce_hwseq before dereferencing it (bsc#1247079).
  • CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
  • CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
  • CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
  • CVE-2025-39822: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034).
  • CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
  • CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
  • CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
  • CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
  • CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
  • CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
  • CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
  • CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40047: io_uring/waitid: always prune wait queue entry in io_waitid_wait() (bsc#1252790).
  • CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
  • CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
  • CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
  • CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
  • CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
  • CVE-2025-40074: ipv4: start using dst_dev_rcu() (bsc#1252794).
  • CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
  • CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
  • CVE-2025-40086: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923).
  • CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
  • CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
  • CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
  • CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
  • CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
  • CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
  • CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
  • CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
  • CVE-2025-40185: ice: ice_adapter: release xa entry on adapter allocation failure (bsc#1253394).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).

The following non-security bugs were fixed:

  • ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
  • ACPI: CPPC: Limit perf ctrs in PCC…
Record
SUSE-SU-2025:4517-1
Updated
2026-11-02
OSVSUSE-SU-2025:4521-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912).
  • CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
  • CVE-2025-21710: tcp: correct handling of extreme memory squeeze (bsc#1237888).
  • CVE-2025-37916: pds_core: remove write-after-free of client_id (bsc#1243474).
  • CVE-2025-38359: s390/mm: Fix in_atomic() handling in do_secure_storage_access() (bsc#1247076).
  • CVE-2025-38361: drm/amd/display: Check dce_hwseq before dereferencing it (bsc#1247079).
  • CVE-2025-39788: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (bsc#1249547).
  • CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove() (bsc#1249982).
  • CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).
  • CVE-2025-39859: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog (bsc#1250252).
  • CVE-2025-39944: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (bsc#1251120).
  • CVE-2025-39980: nexthop: Forbid FDB status change while nexthop is in a group (bsc#1252063).
  • CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).
  • CVE-2025-40021: tracing: dynevent: Add a missing lockdown check on dynevent (bsc#1252681).
  • CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).
  • CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).
  • CVE-2025-40038: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1252817).
  • CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
  • CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
  • CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).
  • CVE-2025-40059: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).
  • CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
  • CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).
  • CVE-2025-40074: ipv4: start using dst_dev_rcu() (bsc#1252794).
  • CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
  • CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).
  • CVE-2025-40098: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() (bsc#1252917).
  • CVE-2025-40105: vfs: Don't leak disconnected dentries on umount (bsc#1252928).
  • CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
  • CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
  • CVE-2025-40159: xsk: Harden userspace-supplied xdp_desc validation (bsc#1253403).
  • CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
  • CVE-2025-40169: bpf: Reject negative offsets for ALU ops (bsc#1253416).
  • CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).
  • CVE-2025-40176: tls: wait for pending async decryptions if tls_strp_msg_hold fails (bsc#1253425).
  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).

The following non-security bugs were fixed:

  • ACPI: CPPC: Check _CPC validity for only the online CPUs (git-fixes).
  • ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (git-fixes).
  • ACPI: CPPC: Perform fast check switch only for online CPUs (git-fixes).
  • ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (stable-fixes).
  • ACPI: SBS: Fix present test in acpi_battery_read() (git-fixes).
  • ACPI: property: Return present device nodes only on fwnode interface (stable-fixes).
  • ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids (stable-fixes).
  • ACPICA: Update dsmethod.c to get rid of unused variable…
Record
SUSE-SU-2025:4521-1
Updated
2026-11-02
OSVSUSE-SU-2026:0487-1 No score

Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.3 fixes various security issues

The following security issues were fixed:

  • CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455).
  • CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205).
  • CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480).
  • CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473).
  • CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).

The following non security issue was fixed:

  • bsc#1249241: fix addr_bit_set() issue on big-endian machines BITOP_BE32_SWIZZLE ought to be defined depending on the target's endianess, but the livepatch includes only the little-endian variant. Fix that. (bsc#1249241 bsc#1256928).
Record
SUSE-SU-2026:0487-1
Updated
2026-11-02
OSVSUSE-SU-2026:0489-1 No score

Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.8 fixes various security issues

The following security issues were fixed:

  • CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205).
  • CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480).
  • CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473).
  • CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).

The following non security issue was fixed:

  • bsc#1249241: fix addr_bit_set() issue on big-endian machines BITOP_BE32_SWIZZLE ought to be defined depending on the target's endianess, but the livepatch includes only the little-endian variant. Fix that. (bsc#1249241 bsc#1256928).
Record
SUSE-SU-2026:0489-1
Updated
2026-11-02
OSVSUSE-SU-2026:0490-1 No score

Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.13 fixes various security issues

The following security issues were fixed:

  • CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480).
  • CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473).
  • CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).
Record
SUSE-SU-2026:0490-1
Updated
2026-11-02
OSVSUSE-SU-2026:0491-1 No score

Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.16 fixes various security issues

The following security issues were fixed:

  • CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473).
  • CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).
Record
SUSE-SU-2026:0491-1
Updated
2026-11-02
OSVSUSE-SU-2026:0515-1 No score

Security update for the Linux Kernel (Live Patch 65 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise kernel 4.12.14-122.247 fixes various security issues

The following security issues were fixed:

  • CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314).
  • CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205).
  • CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).

The following non security issue was fixed:

  • bsc#1250280: don't expose {file,inode}_operations with static lifetimes Fix issue with static lifetime empty_iops/no_open_fops by allocating them on the heap. Make sure previously assigned instances don't become dangling. (bsc#1250280).
Record
SUSE-SU-2026:0515-1
Updated
2026-11-02
OSVSUSE-SU-2026:0518-1 No score

Security update for the Linux Kernel (Live Patch 64 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise kernel 4.12.14-122.244 fixes various security issues

The following security issues were fixed:

  • CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314).
  • CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205).
  • CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).

The following non security issue was fixed:

  • bsc#1250280: don't expose {file,inode}_operations with static lifetimes Fix issue with static lifetime empty_iops/no_open_fops by allocating them on the heap. Make sure previously assigned instances don't become dangling. (bsc#1250280).
Record
SUSE-SU-2026:0518-1
Updated
2026-11-02
OSVSUSE-SU-2026:0521-1 No score

Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise kernel 4.12.14-122.261 fixes various security issues

The following security issues were fixed:

  • CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314).
  • CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205).
  • CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).

The following non security issue was fixed:

  • bsc#1250280: don't expose {file,inode}_operations with static lifetimes Fix issue with static lifetime empty_iops/no_open_fops by allocating them on the heap. Make sure previously assigned instances don't become dangling. (bsc#1250280).
Record
SUSE-SU-2026:0521-1
Updated
2026-11-02
OSVSUSE-SU-2026:0524-1 No score

Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise kernel 4.12.14-122.272 fixes various security issues

The following security issues were fixed:

  • CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314).
  • CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).

The following non security issue was fixed:

  • bsc#1250280: don't expose {file,inode}_operations with static lifetimes Fix issue with static lifetime empty_iops/no_open_fops by allocating them on the heap. Make sure previously assigned instances don't become dangling. (bsc#1250280).
Record
SUSE-SU-2026:0524-1
Updated
2026-11-02
OSVSUSE-SU-2026:0525-1 No score

Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise kernel 4.12.14-122.275 fixes one security issue

The following security issue was fixed:

  • CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).

The following non security issue was fixed:

  • bsc#1250280: don't expose {file,inode}_operations with static lifetimes Fix issue with static lifetime empty_iops/no_open_fops by allocating them on the heap. Make sure previously assigned instances don't become dangling. (bsc#1250280).
Record
SUSE-SU-2026:0525-1
Updated
2026-11-02
OSVSUSE-SU-2026:0543-1 No score

Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.33 fixes various security issues

The following security issues were fixed:

  • CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455).
  • CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205).
  • CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480).
  • CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473).
  • CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).
Record
SUSE-SU-2026:0543-1
Updated
2026-11-02
OSVSUSE-SU-2026:0546-1 No score

Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.60 fixes various security issues

The following security issues were fixed:

  • CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205).
  • CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480).
  • CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473).
  • CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).
Record
SUSE-SU-2026:0546-1
Updated
2026-11-02
OSVSUSE-SU-2026:0548-1 No score

Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.47 fixes various security issues

The following security issues were fixed:

  • CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455).
  • CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205).
  • CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480).
  • CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473).
  • CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).
Record
SUSE-SU-2026:0548-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-rt
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.rt7.428.el8_10
4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-core
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.rt7.428.el8_10
4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.rt7.428.el8_10
4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug-core
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.rt7.428.el8_10
4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug-devel
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.rt7.428.el8_10
4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug-modules
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.rt7.428.el8_10
4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.rt7.428.el8_10
4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-devel
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.rt7.428.el8_10
4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-modules
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.rt7.428.el8_10
4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-modules-extra
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.rt7.428.el8_10
4.18.0-553.87.1.rt7.428.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-devel
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
perf
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 7 CVEs
 before 4.18.0-553.87.1.el8_10
4.18.0-553.87.1.el8_10
linux-lts
Alpaquita:23
 6.1.156-r0 up to 6.1.158-r0
6.1.158-r0
linux-lts
Alpaquita:25
 6.12.53-r0 up to 6.12.57-r0
6.12.57-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek-container
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek-container-debug
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek-debug
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek-devel
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek-headers
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
kernel-uek-tools
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
perf
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
python-perf
TuxCare:OracleLinux:7
From an advisory covering 252 CVEs
 before 5.4.17-2136.338.4.2.el7uek.tuxcare.els4
5.4.17-2136.338.4.2.el7uek.tuxcare.els4
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.7.els26
7.0.0-284.1101.el9_2.tuxcare.7.els26
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.7.els26
2:1.0.0-2.el9_2.tuxcare.7.els26
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.7.els26
2:1.0.0-2.el9_2.tuxcare.7.els26
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.7.els26
2:1.0.0-2.el9_2.tuxcare.7.els26
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 46 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els26
5.14.0-284.1101.el9_2.tuxcare.7.els26
bpftool
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els4
3.10.0-1160.139.1.el7.tuxcare.els4
kernel
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els4
3.10.0-1160.139.1.el7.tuxcare.els4
kernel-debug
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els4
3.10.0-1160.139.1.el7.tuxcare.els4
kernel-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els4
3.10.0-1160.139.1.el7.tuxcare.els4
kernel-devel
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els4
3.10.0-1160.139.1.el7.tuxcare.els4
kernel-headers
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els4
3.10.0-1160.139.1.el7.tuxcare.els4
kernel-tools
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els4
3.10.0-1160.139.1.el7.tuxcare.els4
kernel-tools-libs
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els4
3.10.0-1160.139.1.el7.tuxcare.els4
kernel-tools-libs-devel
TuxCare:OracleLinux:7
From an advisory covering 16 CVEs
 before 3.10.0-1160.139.1.el7.tuxcare.els4
3.10.0-1160.139.1.el7.tuxcare.els4
Kernel
Linux
 before 5.4.301, 5.5.0 up to 5.10.246, 5.11.0 up to 5.15.195, 5.16.0 up to 6.1.157, 6.2.0 up to 6.6.113, 6.7.0 up to 6.12.54, 6.13.0 up to 6.17.4
5.4.3015.10.2465.15.1956.1.1576.6.1136.12.546.17.4
linux
Debian:12
 before 6.1.158-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 39 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.158-1
linux
Debian:13
 before 6.12.57-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-1~bpo12+1
6.12.57-1
linux
Debian:14
 before 6.17.6-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
6.17.6-1
linux-6.1
Debian:11
From an advisory covering 128 CVEs
 before 6.1.158-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1
Show 7 moreShow less
6.1.128-1~deb11u16.1.129-1~deb11u16.1.137-1~deb11u16.1.140-1~deb11u16.1.147-1~deb11u16.1.148-1~deb11u16.1.153-1~deb11u1
6.1.158-1~deb11u1
linux
Debian:11
From an advisory covering 135 CVEs
 before 5.10.247-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 42 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.234-15.10.237-15.10.244-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.247-1
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt
Red Hat:enterprise_linux:8::realtime
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::realtime
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::realtime
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.rt7.428.el8_10
0:4.18.0-553.87.1.rt7.428.el8_10
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 7 CVEs
 before 0:4.18.0-553.87.1.el8_10
0:4.18.0-553.87.1.el8_10
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
rootio-linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.53.25.1
6.4.0-150700.53.25.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.53.25.1
6.4.0-150700.53.25.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.53.25.1.150700.17.17.1
6.4.0-150700.53.25.1.150700.17.17.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.53.25.1
6.4.0-150700.53.25.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.53.25.1
6.4.0-150700.53.25.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.53.25.2
6.4.0-150700.53.25.2
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.53.25.1
6.4.0-150700.53.25.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.53.25.1
6.4.0-150700.53.25.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.53.25.1
6.4.0-150700.53.25.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.53.25.1
6.4.0-150700.53.25.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.53.25.1
6.4.0-150700.53.25.1
kernel-livepatch-SLE15-SP7_Update_7
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 69 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.53.25.1
6.4.0-150700.53.25.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.53.25.1
6.4.0-150700.53.25.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3
6.4.0-150600.23.81.3
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3
6.4.0-150600.23.81.3
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3.150600.12.36.3
6.4.0-150600.23.81.3.150600.12.36.3
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.2
6.4.0-150600.23.81.2
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3
6.4.0-150600.23.81.3
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.1
6.4.0-150600.23.81.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3
6.4.0-150600.23.81.3
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.2
6.4.0-150600.23.81.2
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.1
6.4.0-150600.23.81.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3
6.4.0-150600.23.81.3
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3
6.4.0-150600.23.81.3
kernel-livepatch-SLE15-SP6_Update_18
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 65 CVEs
 before 1-150600.13.3.3
1-150600.13.3.3
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3
6.4.0-150600.23.81.3
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3
6.4.0-150600.23.81.3
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.1
6.4.0-150600.23.81.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3
6.4.0-150600.23.81.3
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3
6.4.0-150600.23.81.3
kernel-default
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3
6.4.0-150600.23.81.3
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3.150600.12.36.3
6.4.0-150600.23.81.3.150600.12.36.3
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.1
6.4.0-150600.23.81.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3
6.4.0-150600.23.81.3
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3
6.4.0-150600.23.81.3
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.1
6.4.0-150600.23.81.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.2
6.4.0-150600.23.81.2
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.1
6.4.0-150600.23.81.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.23.81.3
6.4.0-150600.23.81.3
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.8.58.1
6.4.0-150600.8.58.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.8.58.1
6.4.0-150600.8.58.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.8.58.1
6.4.0-150600.8.58.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.8.58.1
6.4.0-150600.8.58.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.8.58.1
6.4.0-150600.8.58.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.8.58.1
6.4.0-150600.8.58.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 29 CVEs
 before 4.12.14-122.283.1
4.12.14-122.283.1
kgraft-patch-SLE12-SP5_Update_75
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 29 CVEs
 before 1-8.3.1
1-8.3.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 29 CVEs
 before 4.12.14-122.283.1
4.12.14-122.283.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 29 CVEs
 before 4.12.14-122.283.1
4.12.14-122.283.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 29 CVEs
 before 4.12.14-122.283.1
4.12.14-122.283.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 29 CVEs
 before 4.12.14-122.283.1
4.12.14-122.283.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 29 CVEs
 before 4.12.14-122.283.1
4.12.14-122.283.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 29 CVEs
 before 4.12.14-122.283.1
4.12.14-122.283.1
kernel-livepatch-SLE15-SP7-RT_Update_7
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 69 CVEs
 before 1-150700.1.3.1
1-150700.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.7.25.1
6.4.0-150700.7.25.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.7.25.1
6.4.0-150700.7.25.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 69 CVEs
 before 6.4.0-150700.7.25.1
6.4.0-150700.7.25.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 70 CVEs
 before 6.4.0-150700.20.21.1
6.4.0-150700.20.21.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 70 CVEs
 before 6.4.0-150700.20.21.1
6.4.0-150700.20.21.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 70 CVEs
 before 6.4.0-150700.20.21.1
6.4.0-150700.20.21.1
kernel-livepatch-SLE15-SP6-RT_Update_18
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 65 CVEs
 before 1-150600.1.3.1
1-150600.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.10.61.1
6.4.0-150600.10.61.1
kernel-rt_debug
SUSE:Real Time Module 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.10.61.1
6.4.0-150600.10.61.1
kernel-source-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.10.61.1
6.4.0-150600.10.61.1
kernel-syms-rt
SUSE:Real Time Module 15 SP6
From an advisory covering 65 CVEs
 before 6.4.0-150600.10.61.1
6.4.0-150600.10.61.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.10.61.1
6.4.0-150600.10.61.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.10.61.1
6.4.0-150600.10.61.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.10.61.1
6.4.0-150600.10.61.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 65 CVEs
 before 6.4.0-150600.10.61.1
6.4.0-150600.10.61.1
kernel-livepatch-SLE15-SP7-RT_Update_1
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 5 CVEs
 before 10-150700.2.1
10-150700.2.1
kernel-livepatch-SLE15-SP7-RT_Update_2
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 4 CVEs
 before 10-150700.2.1
10-150700.2.1
kernel-livepatch-SLE15-SP7-RT_Update_3
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 3 CVEs
 before 6-150700.2.1
6-150700.2.1
kernel-livepatch-SLE15-SP7-RT_Update_4
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 2 CVEs
 before 6-150700.2.1
6-150700.2.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
 None known
linux-gcp-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 100 CVEs
 before 6.12.0-160000.8.1
6.12.0-160000.8.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 100 CVEs
 before 6.12.0-160000.8.1
6.12.0-160000.8.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 100 CVEs
 before 6.12.0-160000.8.1
6.12.0-160000.8.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 100 CVEs
 before 6.12.0-160000.8.1.160000.2.5
6.12.0-160000.8.1.160000.2.5
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 100 CVEs
 before 6.12.0-160000.8.1
6.12.0-160000.8.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 100 CVEs
 before 6.12.0-160000.8.1
6.12.0-160000.8.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 100 CVEs
 before 6.12.0-160000.8.1
6.12.0-160000.8.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 100 CVEs
 before 6.12.0-160000.8.1
6.12.0-160000.8.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 100 CVEs
 before 6.12.0-160000.8.1
6.12.0-160000.8.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 100 CVEs
 before 6.12.0-160000.8.1
6.12.0-160000.8.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 100 CVEs
 before 6.12.0-160000.8.1
6.12.0-160000.8.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 100 CVEs
 before 6.12.0-160000.8.1
6.12.0-160000.8.1

History

History
RecordedChangedSources
affected
factsOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-40186 is a high vulnerability (CVSS 8.1) in Linux, published November 12, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.58%, the 48th percentile. Fixed in linux-lts 6.1.158-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,023 package rows, 56 versions, 1,408 references and the rest of 11 source descriptions. The JSON record has them. Also not on the record: 14 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 63 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open