Every CVE Search/ Get API key

CVE-2025-40259

scsi: sg: Do not sleep in atomic context

6.7 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

scsi: sg: Do not sleep in atomic context

sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disabled.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.22%Up 0.2 points since Dec 5, 2025
90%50%10%1%

What each source reports

OSV Score usedUBUNTU-CVE-2025-40259 6.7

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Do not sleep in atomic context sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disabled.

Record
UBUNTU-CVE-2025-40259
CVSS 4.0
6.7 MediumCVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-06
CVE List No score

scsi: sg: Do not sleep in atomic context

In the Linux kernel, the following vulnerability has been resolved:

scsi: sg: Do not sleep in atomic context

sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disabled.

Record
CVE-2025-40259
Updated
2026-11-02
EUVDEUVD-2025-201198 No score

In the Linux kernel, the following vulnerability has been resolved:

scsi: sg: Do not sleep in atomic context

sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disabled.

Record
EUVD-2025-201198
Updated
2026-11-02
GitHub AdvisoriesGHSA-4cjv-m44p-782f No score

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Do not sleep in...

In the Linux kernel, the following vulnerability has been resolved:

scsi: sg: Do not sleep in atomic context

sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disabled.

Record
GHSA-4cjv-m44p-782f
Updated
2026-11-02
NVD No score

In the Linux kernel, the following vulnerability has been resolved:

scsi: sg: Do not sleep in atomic context

sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disabled.

Record
CVE-2025-40259
Updated
2026-11-02
OSVOESA-2026-1275 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Fix premature hw access after PCI error

After a recoverable PCI error has been detected and recovered, qla driver needs to check to see if the error condition still persist and/or wait for the OS to give the resume signal.

Sep 8 22:26:03 localhost kernel: WARNING: CPU: 9 PID: 124606 at qla_tmpl.c:440 qla27xx_fwdt_entry_t266+0x55/0x60 [qla2xxx] Sep 8 22:26:03 localhost kernel: RIP: 0010:qla27xx_fwdt_entry_t266+0x55/0x60 [qla2xxx] Sep 8 22:26:03 localhost kernel: Call Trace: Sep 8 22:26:03 localhost kernel: ? qla27xx_walk_template+0xb1/0x1b0 [qla2xxx] Sep 8 22:26:03 localhost kernel: ? qla27xx_execute_fwdt_template+0x12a/0x160 [qla2xxx] Sep 8 22:26:03 localhost kernel: ? qla27xx_fwdump+0xa0/0x1c0 [qla2xxx] Sep 8 22:26:03 localhost kernel: ? qla2xxx_pci_mmio_enabled+0xfb/0x120 [qla2xxx] Sep 8 22:26:03 localhost kernel: ? report_mmio_enabled+0x44/0x80 Sep 8 22:26:03 localhost kernel: ? report_slot_reset+0x80/0x80 Sep 8 22:26:03 localhost kernel: ? pci_walk_bus+0x70/0x90 Sep 8 22:26:03 localhost kernel: ? aer_dev_correctable_show+0xc0/0xc0 Sep 8 22:26:03 localhost kernel: ? pcie_do_recovery+0x1bb/0x240 Sep 8 22:26:03 localhost kernel: ? aer_recover_work_func+0xaa/0xd0 Sep 8 22:26:03 localhost kernel: ? process_one_work+0x1a7/0x360 .. Sep 8 22:26:03 localhost kernel: qla2xxx [0000:42:00.2]-8041:22: detected PCI disconnect. Sep 8 22:26:03 localhost kernel: qla2xxx [0000:42:00.2]-107ff:22: qla27xx_fwdt_entry_t262: dump ram MB failed. Area 5h start 198013h end 198013h Sep 8 22:26:03 localhost kernel: qla2xxx [0000:42:00.2]-107ff:22: Unable to capture FW dump Sep 8 22:26:03 localhost kernel: qla2xxx [0000:42:00.2]-1015:22: cmd=0x0, waited 5221 msecs Sep 8 22:26:03 localhost kernel: qla2xxx [0000:42:00.2]-680d:22: mmio enabled returning. Sep 8 22:26:03 localhost kernel: qla2xxx [0000:42:00.2]-d04c:22: MBX Command timeout for cmd 0, iocontrol=ffffffff jiffies=10140f2e5 mb[0-3]=0xffff 0xffff 0xffff 0xffff

In the Linux kernel, the following vulnerability has been resolved:

md/raid0, raid10: Don't set discard sectors for request queue

It should use disk_stack_limits to get a proper max_discard_sectors rather than setting a value by stack drivers.

And there is a bug. If all member disks are rotational devices, raid0/raid10 set max_discard_sectors. So the member devices are not ssd/nvme, but raid0/raid10 export the wrong value. It reports warning messages in function __blkdev_issue_discard when mkfs.xfs like this:

[ 4616.022599] ------------[ cut here ]------------ [ 4616.027779] WARNING: CPU: 4 PID: 99634 at block/blk-lib.c:50 __blkdev_issue_discard+0x16a/0x1a0 [ 4616.140663] RIP: 0010:__blkdev_issue_discard+0x16a/0x1a0 [ 4616.146601] Code: 24 4c 89 20 31 c0 e9 fe fe ff ff c1 e8 09 8d 48 ff 4c 89 f0 4c 09 e8 48 85 c1 0f 84 55 ff ff ff b8 ea ff ff ff e9 df fe ff ff <0f> 0b 48 8d 74 24 08 e8 ea d6 00 00 48 c7 c6 20 1e 89 ab 48 c7 c7 [ 4616.167567] RSP: 0018:ffffaab88cbffca8 EFLAGS: 00010246 [ 4616.173406] RAX: ffff9ba1f9e44678 RBX: 0000000000000000 RCX: ffff9ba1c9792080 [ 4616.181376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff9ba1c9792080 [ 4616.189345] RBP: 0000000000000cc0 R08: ffffaab88cbffd10 R09: 0000000000000000 [ 4616.197317] R10: 0000000000000012 R11: 0000000000000000 R12: 0000000000000000 [ 4616.205288] R13: 0000000000400000 R14: 0000000000000cc0 R15: ffff9ba1c9792080 [ 4616.213259] FS: 00007f9a5534e980(0000) GS:ffff9ba1b7c80000(0000) knlGS:0000000000000000 [ 4616.222298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 4616.228719] CR2: 000055a390a4c518 CR3: 0000000123e40006 CR4: 00000000001706e0 [ 4616.236689] Call Trace: [ 4616.239428] blkdev_issue_discard+0x52/0xb0 [ 4616.244108] blkdev_common_ioctl+0x43c/0xa00 [ 4616.248883] blkdev_ioctl+0x116/0x280 [ 4616.252977] __x64_sys_ioctl+0x8a/0xc0 […

Record
OESA-2026-1275
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 45 moreShow less
OSVOESA-2026-1303 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()

Jakub added a lockdep_assert_no_hardirq() check in __page_pool_put_page() to increase test coverage.

syzbot found a splat caused by hard irq blocking in ptr_ring_resize_multiple() [1]

As current users of ptr_ring_resize_multiple() do not require hard irqs being masked, replace it to only block BH.

Rename helpers to better reflect they are safe against BH only.

  • ptr_ring_resize_multiple() to ptr_ring_resize_multiple_bh()
  • skb_array_resize_multiple() to skb_array_resize_multiple_bh()

[1]

WARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 __page_pool_put_page net/core/page_pool.c:709 [inline] WARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780 Modules linked in: CPU: 1 UID: 0 PID: 9150 Comm: syz.1.1052 Not tainted 6.11.0-rc3-syzkaller-00202-gf8669d7b5f5d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:__page_pool_put_page net/core/page_pool.c:709 [inline] RIP: 0010:page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780 Code: 74 0e e8 7c aa fb f7 eb 43 e8 75 aa fb f7 eb 3c 65 8b 1d 38 a8 6a 76 31 ff 89 de e8 a3 ae fb f7 85 db 74 0b e8 5a aa fb f7 90 <0f> 0b 90 eb 1d 65 8b 1d 15 a8 6a 76 31 ff 89 de e8 84 ae fb f7 85 RSP: 0018:ffffc9000bda6b58 EFLAGS: 00010083 RAX: ffffffff8997e523 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc9000fbd0000 RSI: 0000000000001842 RDI: 0000000000001843 RBP: 0000000000000000 R08: ffffffff8997df2c R09: 1ffffd40003a000d R10: dffffc0000000000 R11: fffff940003a000e R12: ffffea0001d00040 R13: ffff88802e8a4000 R14: dffffc0000000000 R15: 00000000ffffffff FS: 00007fb7aaf716c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa15a0d4b72 CR3: 00000000561b0000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> tun_ptr_free drivers/net/tun.c:617 [inline] __ptr_ring_swap_queue include/linux/ptr_ring.h:571 [inline] ptr_ring_resize_multiple_noprof include/linux/ptr_ring.h:643 [inline] tun_queue_resize drivers/net/tun.c:3694 [inline] tun_device_event+0xaaf/0x1080 drivers/net/tun.c:3714 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2032 [inline] call_netdevice_notifiers net/core/dev.c:2046 [inline] dev_change_tx_queue_len+0x158/0x2a0 net/core/dev.c:9024 do_setlink+0xff6/0x41f0 net/core/rtnetlink.c:2923 rtnl_setlink+0x40d/0x5a0 net/core/rtnetlink.c:3201 rtnetlink_rcv_msg+0x73f/0xcf0 net/core/rtnetlink.c:6647 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550(CVE-2024-57994)

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

Each cpu DAI should associate with a widget. However, the topology might not create the right number of DAI widgets for aggregated amps. And it will cause NULL pointer deference. Check that the DAI widget associated with the CPU DAI is valid to prevent NULL pointer deference due to missing DAI widgets in topologies with aggregated amps.(CVE-2024-58012)

In the Linux kernel, the following vulnerability has been resolved:

driver core: fix potential NULL pointer dereference in dev_uevent()

If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev->driver from a valid pointer to NULL may result in crash. Fix this by using READ_ONCE() when fetching the pointer, and take bus' drivers klist lock to make sure driver instance will not disappear while we access it.

Use WRITE_ONCE() when setting the…

Record
OESA-2026-1303
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1304 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()

Jakub added a lockdep_assert_no_hardirq() check in __page_pool_put_page() to increase test coverage.

syzbot found a splat caused by hard irq blocking in ptr_ring_resize_multiple() [1]

As current users of ptr_ring_resize_multiple() do not require hard irqs being masked, replace it to only block BH.

Rename helpers to better reflect they are safe against BH only.

  • ptr_ring_resize_multiple() to ptr_ring_resize_multiple_bh()
  • skb_array_resize_multiple() to skb_array_resize_multiple_bh()

[1]

WARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 __page_pool_put_page net/core/page_pool.c:709 [inline] WARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780 Modules linked in: CPU: 1 UID: 0 PID: 9150 Comm: syz.1.1052 Not tainted 6.11.0-rc3-syzkaller-00202-gf8669d7b5f5d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:__page_pool_put_page net/core/page_pool.c:709 [inline] RIP: 0010:page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780 Code: 74 0e e8 7c aa fb f7 eb 43 e8 75 aa fb f7 eb 3c 65 8b 1d 38 a8 6a 76 31 ff 89 de e8 a3 ae fb f7 85 db 74 0b e8 5a aa fb f7 90 <0f> 0b 90 eb 1d 65 8b 1d 15 a8 6a 76 31 ff 89 de e8 84 ae fb f7 85 RSP: 0018:ffffc9000bda6b58 EFLAGS: 00010083 RAX: ffffffff8997e523 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc9000fbd0000 RSI: 0000000000001842 RDI: 0000000000001843 RBP: 0000000000000000 R08: ffffffff8997df2c R09: 1ffffd40003a000d R10: dffffc0000000000 R11: fffff940003a000e R12: ffffea0001d00040 R13: ffff88802e8a4000 R14: dffffc0000000000 R15: 00000000ffffffff FS: 00007fb7aaf716c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa15a0d4b72 CR3: 00000000561b0000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> tun_ptr_free drivers/net/tun.c:617 [inline] __ptr_ring_swap_queue include/linux/ptr_ring.h:571 [inline] ptr_ring_resize_multiple_noprof include/linux/ptr_ring.h:643 [inline] tun_queue_resize drivers/net/tun.c:3694 [inline] tun_device_event+0xaaf/0x1080 drivers/net/tun.c:3714 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2032 [inline] call_netdevice_notifiers net/core/dev.c:2046 [inline] dev_change_tx_queue_len+0x158/0x2a0 net/core/dev.c:9024 do_setlink+0xff6/0x41f0 net/core/rtnetlink.c:2923 rtnl_setlink+0x40d/0x5a0 net/core/rtnetlink.c:3201 rtnetlink_rcv_msg+0x73f/0xcf0 net/core/rtnetlink.c:6647 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550(CVE-2024-57994)

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

Each cpu DAI should associate with a widget. However, the topology might not create the right number of DAI widgets for aggregated amps. And it will cause NULL pointer deference. Check that the DAI widget associated with the CPU DAI is valid to prevent NULL pointer deference due to missing DAI widgets in topologies with aggregated amps.(CVE-2024-58012)

In the Linux kernel, the following vulnerability has been resolved:

driver core: fix potential NULL pointer dereference in dev_uevent()

If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev->driver from a valid pointer to NULL may result in crash. Fix this by using READ_ONCE() when fetching the pointer, and take bus' drivers klist lock to make sure driver instance will not disappear while we access it.

Use WRITE_ONCE() when setting the…

Record
OESA-2026-1304
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1305 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()

Jakub added a lockdep_assert_no_hardirq() check in __page_pool_put_page() to increase test coverage.

syzbot found a splat caused by hard irq blocking in ptr_ring_resize_multiple() [1]

As current users of ptr_ring_resize_multiple() do not require hard irqs being masked, replace it to only block BH.

Rename helpers to better reflect they are safe against BH only.

  • ptr_ring_resize_multiple() to ptr_ring_resize_multiple_bh()
  • skb_array_resize_multiple() to skb_array_resize_multiple_bh()

[1]

WARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 __page_pool_put_page net/core/page_pool.c:709 [inline] WARNING: CPU: 1 PID: 9150 at net/core/page_pool.c:709 page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780 Modules linked in: CPU: 1 UID: 0 PID: 9150 Comm: syz.1.1052 Not tainted 6.11.0-rc3-syzkaller-00202-gf8669d7b5f5d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 RIP: 0010:__page_pool_put_page net/core/page_pool.c:709 [inline] RIP: 0010:page_pool_put_unrefed_netmem+0x157/0xa40 net/core/page_pool.c:780 Code: 74 0e e8 7c aa fb f7 eb 43 e8 75 aa fb f7 eb 3c 65 8b 1d 38 a8 6a 76 31 ff 89 de e8 a3 ae fb f7 85 db 74 0b e8 5a aa fb f7 90 <0f> 0b 90 eb 1d 65 8b 1d 15 a8 6a 76 31 ff 89 de e8 84 ae fb f7 85 RSP: 0018:ffffc9000bda6b58 EFLAGS: 00010083 RAX: ffffffff8997e523 RBX: 0000000000000000 RCX: 0000000000040000 RDX: ffffc9000fbd0000 RSI: 0000000000001842 RDI: 0000000000001843 RBP: 0000000000000000 R08: ffffffff8997df2c R09: 1ffffd40003a000d R10: dffffc0000000000 R11: fffff940003a000e R12: ffffea0001d00040 R13: ffff88802e8a4000 R14: dffffc0000000000 R15: 00000000ffffffff FS: 00007fb7aaf716c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fa15a0d4b72 CR3: 00000000561b0000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> tun_ptr_free drivers/net/tun.c:617 [inline] __ptr_ring_swap_queue include/linux/ptr_ring.h:571 [inline] ptr_ring_resize_multiple_noprof include/linux/ptr_ring.h:643 [inline] tun_queue_resize drivers/net/tun.c:3694 [inline] tun_device_event+0xaaf/0x1080 drivers/net/tun.c:3714 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93 call_netdevice_notifiers_extack net/core/dev.c:2032 [inline] call_netdevice_notifiers net/core/dev.c:2046 [inline] dev_change_tx_queue_len+0x158/0x2a0 net/core/dev.c:9024 do_setlink+0xff6/0x41f0 net/core/rtnetlink.c:2923 rtnl_setlink+0x40d/0x5a0 net/core/rtnetlink.c:3201 rtnetlink_rcv_msg+0x73f/0xcf0 net/core/rtnetlink.c:6647 netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2550(CVE-2024-57994)

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

Each cpu DAI should associate with a widget. However, the topology might not create the right number of DAI widgets for aggregated amps. And it will cause NULL pointer deference. Check that the DAI widget associated with the CPU DAI is valid to prevent NULL pointer deference due to missing DAI widgets in topologies with aggregated amps.(CVE-2024-58012)

In the Linux kernel, the following vulnerability has been resolved:

driver core: fix potential NULL pointer dereference in dev_uevent()

If userspace reads "uevent" device attribute at the same time as another threads unbinds the device from its driver, change to dev->driver from a valid pointer to NULL may result in crash. Fix this by using READ_ONCE() when fetching the pointer, and take bus' drivers klist lock to make sure driver instance will not disappear while we access it.

Use WRITE_ONCE() when setting the…

Record
OESA-2026-1305
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-71386 No score

CVE-2025-40259 affecting package kernel for versions less than 6.6.119.3-1

In the Linux kernel, the following vulnerability has been resolved:

scsi: sg: Do not sleep in atomic context

sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disabled.

Record
AZL-71386
Updated
2026-11-02
OSVCLSA-2026-1770140694 No score

kernel-uek: Fix of 43 CVEs

  • crypto: af_alg - Fix incorrect boolean values in af_alg_ctx {CVE-2025-40022}
  • arm64: pensando: Must boot Ortano kernel with spin-table
  • net/sched: adjust device watchdog timer to detect stopped queue at right time
  • net/mlx5: Mark the mellanox graceful_period fix as out-of-tree change
  • infiniband/xsigo: Replace BUG_ON with WARN_ON_ONCE.
  • infiniband/xsigo: xsvnic_main: Remove unused functions
  • infiniband/xsigo: xve_cm: Fix mixed code warning
  • infiniband/xsigo: xve_ethtool: Remove unused variable 'priv'
  • infiniband/xsigo: xve_ib: Fix misleading indentation
  • infiniband/xsigo: xve_ib: Fix mixed code warning
  • infiniband/xsigo: xve_verbs: Remove unused label 'out_free_pd'
  • infiniband/xsigo: xve_main: Remove unused function 'xve_napi_del'
  • infiniband/xsigo: xve_main: Fix mixed code warning
  • infiniband/xsigo: xve_main: Fix misleading indentation
  • inifinibad/xsigo: xsvnic_main: Remove unused variable 'xsvnic_ethtool_ops'
  • infiniband/xsigo: xscore_impl: Remove unused label 'err_pd'
  • rds: Fix jiffies type in struct rds_conn_path
  • kernel: sysctl: Remove unused variable 'zero'
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • RDMA/cm: Base cm_id destruction timeout on CMA values
  • x86/its: Build fails with CONFIG_MITIGATION_ITS=n
  • LTS tag: v5.4.302
  • Input: pegasus-notetaker - fix potential out-of-bounds access {CVE-2025-68217}
  • Input: remove third argument of usb_maxpacket()
  • usb: deprecate the third argument of usb_maxpacket()
  • fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271}
  • pmdomain: imx: Fix reference count leak in imx_gpc_remove
  • pmdomain: arm: scmi: Fix genpd leak on provider registration failure {CVE-2025-68204}
  • net: netpoll: fix incorrect refcount handling causing incorrect cleanup {CVE-2025-68245}
  • net: qede: Initialize qede_ll_ops with designated initializer
  • net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error {CVE-2025-68220}
  • ALSA: usb-audio: fix uac2 clock source at terminal parser
  • mm/page_alloc: fix hash table order logging in alloc_large_system_hash()
  • kconfig/nconf: Initialize the default locale at startup
  • kconfig/mconf: Initialize the default locale at startup
  • vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248}
  • s390/ctcm: Fix double-kfree {CVE-2025-40253}
  • net: openvswitch: remove never-working support for setting nsh fields {CVE-2025-40254}
  • mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
  • MIPS: Malta: Fix !EVA SOC-it PCI MMIO
  • scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() {CVE-2025-68229}
  • scsi: sg: Do not sleep in atomic context {CVE-2025-40259}
  • Input: cros_ec_keyb - fix an invalid memory access {CVE-2025-40263}
  • be2net: pass wrb_params in case of OS2BMC {CVE-2025-40264}
  • isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() {CVE-2025-68734}
  • EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
  • EDAC/altera: Handle OCRAM ECC enable after warm reset
  • spi: Try to get ACPI GPIO IRQ earlier
  • ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe {CVE-2025-68241}
  • strparser: Fix signed/unsigned mismatch bug
  • gcov: add support for GCC 15
  • mm/ksm: fix flag-dropping behavior in ksm_madvise {CVE-2025-40040}
  • ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd {CVE-2025-40275}
  • drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE {CVE-2025-40277}
  • ASoC: cs4271: Fix regulator leak on probe failure
  • regulator: fixed: fix GPIO descriptor leak on register failure
  • regulator: fixed: use dev_err_probe for register
  • Bluetooth: L2CAP: export l2cap_chan_hold for modules
  • net_sched: limit try_bulk_dequeue_skb() batches
  • net_sched: remove need_resched() from qdisc_run()
  • net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
  • net/mlx5e: Fix maxrate wraparound in threshold between units
  • net: sched: act_ife: initialize struct tc_ife to fix KMSAN…
Record
CLSA-2026-1770140694
Updated
2026-11-02
OSVCLSA-2026-1775224807 No score

Fix of 95 CVEs

  • CVE-2025-39683
    • tracing: Remove unneeded goto out logic {CVE-2025-39683}
    • tracing: Limit access to parser->buffer when trace_get_user failed {CVE-2025-39683}
  • CVE-2025-38079
    • crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
  • CVE-2025-38159
    • wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
  • CVE-2025-38211
    • RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
  • CVE-2025-38024
    • RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024}
  • CVE-2025-38103
    • HID: hyperv: Correctly access fields declared as __le16 {CVE-2025-38103}
    • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • CVE-2025-38157
    • wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}
  • CVE-2025-38230
    • jfs: add sanity check for agwidth in dbMount {CVE-2025-38230}
    • fs/jfs: consolidate sanity checking in dbMount {CVE-2025-38230}
    • jfs: validate AG parameters in dbMount() to prevent crashes {CVE-2025-38230}
  • CVE-2025-39955
    • tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-39955}
  • CVE-2025-38680
    • media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680}
  • CVE-2025-38708
    • drbd: add missing kref_get in handle_write_conflicts {CVE-2025-38708}
  • CVE-2025-39759
    • btrfs: qgroup: introduce quota mode {CVE-2025-39759}
    • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • CVE-2025-38666
    • net: appletalk: Fix use-after-free in AARP proxy probe {CVE-2025-38666}
  • CVE-2025-40269
    • ALSA: usb-audio: Improve frames size computation {CVE-2025-40269}
    • ALSA: usb-audio: Replace s/frame/packet/ where appropriate {CVE-2025-40269}
    • ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269}
  • CVE-2025-40149
    • net: netdevice: Add operation ndo_sk_get_lower_dev {CVE-2025-40149}
    • net/tls: Device offload to use lowest netdevice in chain {CVE-2025-40149}
    • tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). {CVE-2025-40149}
  • CVE-2025-71089
    • iommu: disable SVA when CONFIG_X86 is set {CVE-2025-71089}
  • CVE-2026-23234
    • f2fs: fix to avoid UAF in f2fs_write_end_io() {CVE-2026-23234}
  • CVE-2026-23089
    • ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
  • CVE-2026-23074
    • net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
  • CVE-2026-23061
    • can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061}
  • CVE-2026-23060
    • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060}
  • CVE-2026-22997
    • net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts {CVE-2026-22997}
  • CVE-2026-22991
    • libceph: make free_choose_arg_map() resilient to partial allocation {CVE-2026-22991}
  • CVE-2026-22990
    • libceph: replace overzealous BUG_ON in osdmap_apply_incremental() {CVE-2026-22990}
  • CVE-2026-22978
    • wifi: avoid kernel-infoleak from struct iw_point {CVE-2026-22978}
  • CVE-2026-22977
    • net: sock: fix hardened usercopy panic in sock_recv_errqueue {CVE-2026-22977}
  • CVE-2025-71154
    • net: usb: rtl8150: fix memory leak on usb_submit_urb() failure {CVE-2025-71154}
  • CVE-2025-71085
    • ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() {CVE-2025-71085}
  • CVE-2025-68734
    • isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() {CVE-2025-68734}
  • CVE-2025-68349
    • NFSv4/pNFS: Clear…
Record
CLSA-2026-1775224807
Updated
2026-11-02
OSVCLSA-2026-1782145985 No score

kernel: Fix of 62 CVEs

  • libceph: prevent potential out-of-bounds reads in handle_auth_done() {CVE-2026-22984}
  • drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833}
  • netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392}
  • wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() {CVE-2026-31586}
  • scsi: sg: Do not sleep in atomic context {CVE-2025-40259}
  • Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} {CVE-2023-53827}
  • drm/i915/gem: add missing boundary check in vm_access {CVE-2023-28410}
  • ASoC: SOF: debug: Fix potential buffer overflow by snprintf() {CVE-2022-50051}
  • tipc: fix use-after-free Read in tipc_named_reinit {CVE-2022-49696}
  • wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration {CVE-2022-49022}
  • ethtool: do not perform operations on net devices being unregistered {CVE-2021-47517}
  • cxgb4: avoid accessing registers when clearing filters {CVE-2021-47138}
  • bpf: Fix ringbuf helper function compatibility {CVE-2021-34866}
  • HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
  • nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366}
  • asix: fix uninit-value in asix_mdio_read() {CVE-2021-47101}
  • kyber: fix out of bounds access when preempted {CVE-2021-46984}
  • can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
  • tls: separate no-async decryption request handling from async {CVE-2024-58240}
  • ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689}
  • Make filldir64 verify the directory entry filename is valid {CVE-2019-10220}
  • scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
  • team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
  • bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099}
  • Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082}
  • proc/vmcore: fix clearing user buffer by properly using clear_user() {CVE-2021-47566}
  • nfsd: fix use-after-free due to delegation race {CVE-2021-47506}
  • drm: bridge/panel: Cleanup connector on bridge detach {CVE-2021-47063}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
  • netfilter: nfnetlink_osf: avoid OOB read {CVE-2023-39189}
  • crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id {CVE-2025-68724}
  • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170}
  • wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258}
  • x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer {CVE-2021-47226}
  • kvm: LAPIC: Restore guard to prevent illegal APIC register access {CVE-2021-47255}
  • tunnels: fix kasan splat when generating ipv4 pmtu error {CVE-2023-53600}
  • macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209}
  • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • RDMA/cxgb4: Do not dma memory off of the stack {CVE-2019-17075}
  • netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
  • KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) {CVE-2019-7221}
  • RDMA/umad: Reject negative data_len in…
Record
CLSA-2026-1782145985
Updated
2026-11-02
OSVCLSA-2026-1782146775 No score

kernel: Fix of 58 CVEs

  • libceph: prevent potential out-of-bounds reads in handle_auth_done() {CVE-2026-22984}
  • svcrdma: bound check rq_pages index in inline path {CVE-2025-71068}
  • drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833}
  • netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392}
  • wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() {CVE-2026-31586}
  • scsi: sg: Do not sleep in atomic context {CVE-2025-40259}
  • bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664}
  • Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} {CVE-2023-53827}
  • drm/i915/gem: add missing boundary check in vm_access {CVE-2023-28410}
  • ASoC: SOF: debug: Fix potential buffer overflow by snprintf() {CVE-2022-50051}
  • tipc: fix use-after-free Read in tipc_named_reinit {CVE-2022-49696}
  • wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration {CVE-2022-49022}
  • drm/i915/gem: Really move i915_gem_context.link under ref protection {CVE-2022-48662}
  • drm/i915: Release i915_gem_context from a worker {CVE-2022-48662}
  • KVM: x86/mmu: Don't advance iterator after restart due to yielding {CVE-2021-47094}
  • HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366}
  • netfilter: xt_tcpmss: check remaining length before reading optlen {CVE-2026-43190}
  • media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405}
  • net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356}
  • skbuff: skb_segment, Call zero copy functions before using skbuff frags {CVE-2023-53354}
  • nfsd: call op_release, even when op_func returns an error {CVE-2023-53241}
  • icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). {CVE-2023-53343}
  • RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device {CVE-2023-53393}
  • scsi: target: iscsi: Fix a race condition between login_work and the login thread {CVE-2022-50350}
  • Make filldir64 verify the directory entry filename is valid {CVE-2019-10220}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id {CVE-2025-68724}
  • nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170}
  • team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
  • proc/vmcore: fix clearing user buffer by properly using clear_user() {CVE-2021-47566}
  • cxgb4: avoid accessing registers when clearing filters {CVE-2021-47138}
  • bpf: Fix ringbuf helper function compatibility {CVE-2021-34866}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
  • atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}
  • ext4: block range must be validated before use in ext4_mb_clear_bb() {CVE-2022-50021}
  • bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099}
  • net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204}
  • scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
  • ice: Fix memory corruption in VF driver {CVE-2022-49722}
  • net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
  • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • tunnels: fix kasan splat when generating ipv4 pmtu error {CVE-2023-53600}
  • Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
  • netfilter: nf_conntrack_helper: pass helper to…
Record
CLSA-2026-1782146775
Updated
2026-11-02
OSVCLSA-2026-1782151303 No score

kernel: Fix of 151 CVEs

  • spi: spi-fsl-lpspi: fix teardown order issue (UAF) {CVE-2026-31485}
  • Buffer overflow in drivers/xen/sys-hypervisor.c {CVE-2026-31786}
  • ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037}
  • net: bonding: fix use-after-free in bond_xmit_broadcast() {CVE-2026-31419}
  • bonding: do not set usable_slaves for broadcast mode {CVE-2026-31419}
  • net: bonding: update the slave array for broadcast mode {CVE-2026-31419}
  • dlm: validate length in dlm_search_rsb_tree {CVE-2026-43125}
  • net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
  • net: Fix an unsafe loop on the list {CVE-2024-50024}
  • sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy {CVE-2025-21636}
  • wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx {CVE-2023-54300}
  • wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
  • drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream {CVE-2024-49913}
  • xfrm: validate new SA's prefixlen using SA family when sel.family is unset {CVE-2024-50142}
  • serial: imx: Introduce timeout when waiting on transmitter empty {CVE-2024-40967}
  • iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind {CVE-2023-53501}
  • octeontx2-af: Add validation before accessing cgx and lmac {CVE-2023-53654}
  • sctp: sysctl: rto_min/max: avoid using current->nsproxy {CVE-2025-21639}
  • net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices {CVE-2023-52984}
  • sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start {CVE-2024-49944}
  • netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path {CVE-2026-43451}
  • thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR {CVE-2022-48703}
  • x86/mm: Fix pti_clone_pgtable() alignment assumption {CVE-2024-44965}
  • net: usb: asix_devices: add phy_mask for ax88772 mdio bus {CVE-2025-38725}
  • ALSA: hda: Do not unset preset when cleaning up codec {CVE-2023-52736}
  • drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func {CVE-2024-49909}
  • Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE {CVE-2024-53144}
  • fuse: Initialize beyond-EOF page contents before setting uptodate {CVE-2024-44947}
  • sctp: sysctl: udp_port: avoid using current->nsproxy {CVE-2025-21637}
  • dm stats: check for and propagate alloc_percpu failure {CVE-2023-53044}
  • netpoll: Fix race condition in netpoll_owner_active {CVE-2024-41005}
  • tracing: Fix overflow in get_free_elt() {CVE-2024-43890}
  • mm/slub: avoid accessing metadata when pointer is invalid in object_err() {CVE-2025-39902}
  • xen/netfront: stop tx queues during live migration {CVE-2022-48969}
  • Bluetooth: btusb: clamp SCO altsetting table indices {CVE-2026-31497}
  • ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free {CVE-2025-38105}
  • can: j1939: make j1939_sk_bind() fail if device is no longer registered {CVE-2025-39925}
  • nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() {CVE-2023-52508}
  • smb: client: Don't log plaintext credentials in cifs_set_cifscreds {CVE-2026-23303}
  • cifs: Fix integer overflow while processing acdirmax mount option {CVE-2025-21963}
  • netfilter: nfnetlink_log: account for netlink header size {CVE-2026-31416}
  • drm/amdgpu/vkms: fix a possible null pointer dereference {CVE-2023-52815}
  • drm/amd/amdgpu: Check tbo resource pointer {CVE-2024-46807}
  • bonding: fix null pointer deref in bond_ipsec_offload_ok {CVE-2024-44990}
  • wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower {CVE-2024-50237}
  • trace_events_hist: add check for return value of 'create_hist_field' {CVE-2023-53005}
  • drm/amdkfd: Add sync after creating vram bo {CVE-2023-53009}
  • bpf: Send signals asynchronously if !preemptible {CVE-2025-21728}
  • drm/client: fix null pointer dereference in drm_client_modeset_probe {CVE-2024-43894}
  • ext4: correct grp validation in ext4_mb_good_group {CVE-2023-53861}
  • RDMA/irdma: Initialize…
Record
CLSA-2026-1782151303
Updated
2026-11-02
OSVCLSA-2026-1782155469 No score

kernel: Fix of 143 CVEs

  • ice: Fix PTP NULL pointer dereference during VSI rebuild {CVE-2026-23210}
  • tracing: Add recursion protection in kernel stack trace recording {CVE-2026-23138}
  • mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() {CVE-2025-38681}
  • cpuset: fix warning when disabling remote partition {CVE-2025-71142}
  • virtio: break and reset virtio devices on device_shutdown() {CVE-2025-38064}
  • netdevsim: fix a race issue related to the operation on bpf_bound_progs list {CVE-2026-23126}
  • atm: clip: Fix potential null-ptr-deref in to_atmarpd(). {CVE-2025-38460}
  • idpf: fix error handling in the init_task on load {CVE-2026-23017}
  • rxrpc: Fix recvmsg() unconditional requeue {CVE-2026-23066}
  • block: zero non-PI portion of auto integrity buffer {CVE-2026-23007}
  • can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode {CVE-2025-38665}
  • virtio_net: Fix napi_skb_cache_put warning {CVE-2024-43835}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() {CVE-2026-23169}
  • net: fix segmentation of forwarding fraglist GRO {CVE-2026-23154}
  • gfs2: Validate i_depth for exhash directories {CVE-2025-38710}
  • KVM: Don't clobber irqfd routing type when deassigning irqfd {CVE-2026-23198}
  • ipvlan: Make the addrs_lock be per port {CVE-2026-23103}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • can: mcp251xfd: fix infinite loop when xmit fails {CVE-2024-41088}
  • RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly {CVE-2025-71096}
  • RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction {CVE-2025-38161}
  • scsi: qla2xxx: Validate sp before freeing associated memory {CVE-2025-71236}
  • net/sched: netem: account for backlog updates from child qdisc {CVE-2024-56770}
  • drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat {CVE-2026-31656}
  • iavf: fix off-by-one issues in iavf_config_rss_reg() {CVE-2025-71087}
  • net/sched: ets: fix divide by zero in the offload path {CVE-2026-23379}
  • can: j1939: implement NETDEV_UNREGISTER notification handler {CVE-2025-39925}
  • ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() {CVE-2026-31531}
  • Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb {CVE-2026-31510}
  • ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() {CVE-2026-23003}
  • drm/i915/gt: Check set_default_submission() before deferencing {CVE-2026-31540}
  • mac802154: check local interfaces before deleting sdata list {CVE-2024-57948}
  • lib/buildid: use __kernel_read() for sleepable context {CVE-2026-23002}
  • scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs {CVE-2023-52808}
  • net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
  • irqchip/imx-irqsteer: Handle runtime power management correctly {CVE-2024-42290}
  • io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop {CVE-2026-23113}
  • net/sched: ets: Remove drr class from the active list if it changes to strict {CVE-2025-68815}
  • net: bonding: fix NULL deref in bond_debug_rlb_hash_show {CVE-2026-31546}
  • ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
  • openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
  • net: USB: Fix wrong-direction WARNING in plusb.c {CVE-2023-52742}
  • module: Fix kernel panic when a symbol st_shndx is out of bounds {CVE-2026-31521}
  • udf: Fix preallocation discarding at indirect extent boundary {CVE-2022-48946}
  • net/mlx5: qos: Restrict RTNL area to avoid a lock cycle {CVE-2025-39947}
  • scsi: core: Wake up the error handler when final completions race against each other {CVE-2026-23110}
  • nbd: don't allow reconnect after disconnect {CVE-2025-21731}
  • nfsd: check that server is running in unlock_filesystem {CVE-2026-22989}
  • af_key: validate families in pfkey_send_migrate() {CVE-2026-31515}
  • netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() {CVE-2024-36286} -…
Record
CLSA-2026-1782155469
Updated
2026-11-02
OSVCLSA-2026-1783414723 No score

kernel: Fix of 10 CVEs

  • KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role {CVE-2026-46113}
  • ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
  • ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037}
  • ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() {CVE-2026-43038}
  • scsi: sg: Do not sleep in atomic context {CVE-2025-40259}
  • raid1: fix use-after-free for original bio in raid1_write_request() {CVE-2024-35979}
  • bpf: Use VM_MAP instead of VM_ALLOC for ringbuf {CVE-2022-48714}
  • RDMA/irdma: avoid invalid read in irdma_net_event {CVE-2025-71133}
  • ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer {CVE-2023-53395}
Record
CLSA-2026-1783414723
Updated
2026-11-02
OSV No score

scsi: sg: Do not sleep in atomic context

In the Linux kernel, the following vulnerability has been resolved:

scsi: sg: Do not sleep in atomic context

sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disabled.

Record
CVE-2025-40259
Updated
2026-11-02
OSVDEBIAN-CVE-2025-40259 No score

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Do not sleep in atomic context sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disabled.

Record
DEBIAN-CVE-2025-40259
Updated
2026-11-02
OSVMGASA-2026-0017 No score

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.120 fixes bugs and vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel.

Record
MGASA-2026-0017
Updated
2026-11-02
OSVMGASA-2026-0018 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.120 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2026-0018
Updated
2026-11-02
OSVopenSUSE-SU-2026:20287-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
  • CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
  • CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
  • CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
  • CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
  • CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
  • CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
  • CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
  • CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
  • CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
  • CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…
Record
openSUSE-SU-2026:20287-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2025-40259 No score

CVE-2025-40259 in linux - Patched by Root

Root has patched CVE-2025-40259 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2025-40259
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-40259 No score

CVE-2025-40259 in linux - Patched by Root

Root has patched CVE-2025-40259 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2025-40259
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2025-40259 No score

CVE-2025-40259 in linux - Patched by Root

Root has patched CVE-2025-40259 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2025-40259
Updated
2026-11-03
OSVROOT-OS-UBUNTU-2204-CVE-2025-40259 No score

CVE-2025-40259 in linux - Patched by Root

Root has patched CVE-2025-40259 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2025-40259
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2025-40259 No score

CVE-2025-40259 in linux - Patched by Root

Root has patched CVE-2025-40259 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2025-40259
Updated
2026-11-06
OSVSUSE-SU-2026:0447-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
  • CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
  • CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
  • CVE-2025-40350: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (bsc#1255260).
  • CVE-2025-40355: sysfs: check visibility before changing group attribute ownership (bsc#1255261).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68171: x86/fpu: Ensure XFD state on signal delivery (bsc#1255255).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68215: ice: fix PTP cleanup on driver removal in error path (bsc#1255226).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
  • CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68301: net: atlantic: fix fragment overflow handling in RX path (bsc#1255120).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68327: usb: renesas_usbhs: Fix synchronous external abort on unbind (bsc#1255488).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68363: bpf: Check skb->transport_header is set in bpf_skb_check_mtu (bsc#1255552).
  • CVE-2025-68365: fs/ntfs3: Initialize allocated memory before use (bsc#1255548).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68727: ntfs3: Fix uninit buffer allocated by __getname() (bsc#1255568).
  • CVE-2025-68728: ntfs3: fix uninit memory after failed mi_read in mi_format_new (bsc#1255539).
  • CVE-2025-68733: smack: fix bug: unprivileged task can create labels (bsc#1255615).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet:…
Record
SUSE-SU-2026:0447-1
Updated
2026-11-02
OSVSUSE-SU-2026:0471-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
  • CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
  • CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
  • CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
  • CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
  • CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779).
  • CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).
  • CVE-2026-23001: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).
  • CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).

The following non security issues were fixed:

  • bpf/selftests: test_select_reuseport_kern: Remove unused header (bsc#1257603).
  • btrfs: do not strictly require dirty metadata threshold for metadata writepages (stable-fixes).
  • cifs: Fix copy offload to flush destination region (bsc#1252511).
  • cifs: Fix flushing, invalidation and file size with copy_file_range() (bsc#1252511).
  • cifs: add new field to track the last access time of cfid (git-fixes).
  • ext4: use optimized mballoc scanning regardless of inode format (bsc#1254378).
  • ice: use netif_get_num_default_rss_queues() (bsc#1247712).
  • mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (bsc#1253087).
  • net: hv_netvsc: reject RSS hash key programming without RX indirection table (bsc#1257473).
  • net: tcp: allow zero-window ACK update the window (bsc#1254767).
  • sched: Increase sched_tick_remote timeout (bsc#1254510).
  • scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296).
  • smb: change return type of cached_dir_lease_break() to bool (git-fixes).
  • smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (git-fixes).
  • smb: client: remove unused fid_lock (git-fixes).
  • smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (git-fixes).
  • smb: client: split cached_fid bitfields to avoid shared-byte RMW races (bsc#1250748).
  • smb: client: update cfid->last_access_time in open_cached_dir_by_dentry() (git-fixes).
  • smb: improve directory cache reuse for readdir operations (bsc#1252712).
  • x86: make page fault handling disable interrupts properly (git-fixes).
Record
SUSE-SU-2026:0471-1
Updated
2026-11-02
OSVSUSE-SU-2026:0472-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
  • CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
  • CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
  • CVE-2025-40350: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (bsc#1255260).
  • CVE-2025-40355: sysfs: check visibility before changing group attribute ownership (bsc#1255261).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68171: x86/fpu: Ensure XFD state on signal delivery (bsc#1255255).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68215: ice: fix PTP cleanup on driver removal in error path (bsc#1255226).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
  • CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68301: net: atlantic: fix fragment overflow handling in RX path (bsc#1255120).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68327: usb: renesas_usbhs: Fix synchronous external abort on unbind (bsc#1255488).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68363: bpf: Check skb->transport_header is set in bpf_skb_check_mtu (bsc#1255552).
  • CVE-2025-68365: fs/ntfs3: Initialize allocated memory before use (bsc#1255548).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68727: ntfs3: Fix uninit buffer allocated by __getname() (bsc#1255568).
  • CVE-2025-68728: ntfs3: fix uninit memory after failed mi_read in mi_format_new (bsc#1255539).
  • CVE-2025-68733: smack: fix bug: unprivileged task can create labels (bsc#1255615).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet:…
Record
SUSE-SU-2026:0472-1
Updated
2026-11-02
OSVSUSE-SU-2026:0473-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50347: mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (bsc#1249928).
  • CVE-2022-50580: blk-throttle: prevent overflow while calculating wait time (bsc#1252542).
  • CVE-2022-50676: net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() (bsc#1254689).
  • CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
  • CVE-2022-50709: wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (bsc#1255565).
  • CVE-2022-50716: wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (bsc#1255839).
  • CVE-2022-50717: nvmet-tcp: add bounds check on Transfer Tag (bsc#1255844).
  • CVE-2022-50719: ALSA: line6: fix stack overflow in line6_midi_transmit (bsc#1255939).
  • CVE-2022-50740: wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (bsc#1256155).
  • CVE-2022-50744: scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs (bsc#1256165).
  • CVE-2022-50749: acct: fix potential integer overflow in encode_comp_t() (bsc#1256191).
  • CVE-2022-50751: configfs: fix possible memory leak in configfs_create_dir() (bsc#1256184).
  • CVE-2022-50760: drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (bsc#1255983).
  • CVE-2022-50770: ocfs2: fix memory leak in ocfs2_mount_volume() (bsc#1256221).
  • CVE-2022-50777: net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (bsc#1256320).
  • CVE-2022-50780: net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (bsc#1256305).
  • CVE-2022-50782: ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1256282).
  • CVE-2022-50786: media: s5p-mfc: Clear workbit to handle error condition (bsc#1256258).
  • CVE-2022-50816: ipv6: ensure sane device mtu in tunnels (bsc#1256038).
  • CVE-2022-50834: nfc: Fix potential resource leaks (bsc#1256219).
  • CVE-2022-50865: tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (bsc#1256168).
  • CVE-2022-50868: hwrng: amd - Fix PCI device refcount leak (bsc#1256386).
  • CVE-2022-50880: wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (bsc#1256132).
  • CVE-2022-50881: ath9k: Fix typo in function name (bsc#1256130).
  • CVE-2022-50884: drm: Prevent drm_copy_field() to attempt copying a NULL pointer (bsc#1256127).
  • CVE-2022-50885: RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (bsc#1256122).
  • CVE-2022-50887: regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (bsc#1256125).
  • CVE-2023-50756: nvme-pci: fix mempool alloc size (bsc#1256216).
  • CVE-2023-53685: tun: Fix memory leak for detached NAPI queue (bsc#1251770).
  • CVE-2023-53747: vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (bsc#1254572).
  • CVE-2023-53751: cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1254986).
  • CVE-2023-53825: kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg() (bsc#1254707).
  • CVE-2023-53853: netlink: annotate accesses to nlk->cb_running (bsc#1254673).
  • CVE-2023-53863: netlink: do not hard code device address lenth in fdb dumps (bsc#1254657).
  • CVE-2023-53992: wifi: cfg80211: ocb: don't leave if not joined (bsc#1256058).
  • CVE-2023-54012: net: fix stack overflow when LRO is disabled for virtual interfaces (bsc#1255571).
  • CVE-2023-54047: drm/rockchip: dw_hdmi: cleanup drm encoder during unbind (bsc#1256398).
  • CVE-2023-54048: RDMA/bnxt_re: Prevent handling any completions after qp destroy (bsc#1256395).
  • CVE-2023-54067: btrfs: fix race when deleting free space root from the dirty cow roots list (bsc#1256369).
  • CVE-2023-54111: pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (bsc#1256149).
  • CVE-2023-54112: kcm: Fix memory leak in error path of kcm_sendmsg() (bsc#1256354).
  • CVE-2023-54118: serial: sc16is7xx: setup GPIO controller later in probe…
Record
SUSE-SU-2026:0473-1
Updated
2026-11-02
OSVSUSE-SU-2026:0587-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
  • CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
  • CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
  • CVE-2025-40350: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (bsc#1255260).
  • CVE-2025-40355: sysfs: check visibility before changing group attribute ownership (bsc#1255261).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68171: x86/fpu: Ensure XFD state on signal delivery (bsc#1255255).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68215: ice: fix PTP cleanup on driver removal in error path (bsc#1255226).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
  • CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68301: net: atlantic: fix fragment overflow handling in RX path (bsc#1255120).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68327: usb: renesas_usbhs: Fix synchronous external abort on unbind (bsc#1255488).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68363: bpf: Check skb->transport_header is set in bpf_skb_check_mtu (bsc#1255552).
  • CVE-2025-68365: fs/ntfs3: Initialize allocated memory before use (bsc#1255548).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68727: ntfs3: Fix uninit buffer allocated by __getname() (bsc#1255568).
  • CVE-2025-68728: ntfs3: fix uninit memory after failed mi_read in mi_format_new (bsc#1255539).
  • CVE-2025-68733: smack: fix bug: unprivileged task can create labels (bsc#1255615).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet:…
Record
SUSE-SU-2026:0587-1
Updated
2026-11-02
OSVSUSE-SU-2026:20477-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
  • CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
  • CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
  • CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
  • CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
  • CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
  • CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
  • CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
  • CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
  • CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
  • CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
  • CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
  • CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
  • CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
  • CVE-2025-40271: fs/proc: fix uaf in…
Record
SUSE-SU-2026:20477-1
Updated
2026-11-02
OSVSUSE-SU-2026:20498-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
  • CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
  • CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
  • CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
  • CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
  • CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
  • CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
  • CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
  • CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
  • CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
  • CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
  • CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
  • CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
  • CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
  • CVE-2025-40271: fs/proc: fix uaf in…
Record
SUSE-SU-2026:20498-1
Updated
2026-11-02
OSVSUSE-SU-2026:20555-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
  • CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
  • CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
  • CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
  • CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
  • CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
  • CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
  • CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
  • CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
  • CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
  • CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…
Record
SUSE-SU-2026:20555-1
Updated
2026-11-02
OSVSUSE-SU-2026:20570-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
  • CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
  • CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
  • CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
  • CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
  • CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
  • CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
  • CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
  • CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
  • CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
  • CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…
Record
SUSE-SU-2026:20570-1
Updated
2026-11-02
OSVSUSE-SU-2026:20599-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
  • CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
  • CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
  • CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
  • CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
  • CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
  • CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
  • CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
  • CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
  • CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
  • CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…
Record
SUSE-SU-2026:20599-1
Updated
2026-11-02
OSVSUSE-SU-2026:20615-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
  • CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
  • CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
  • CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269).
  • CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).
  • CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319).
  • CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245).
  • CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
  • CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157).
  • CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
  • CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164).
  • CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
  • CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403).
  • CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
  • CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).
  • CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482).
  • CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506).
  • CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694).
  • CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544).
  • CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593).
  • CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542).
  • CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536).
  • CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526).
  • CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).
  • CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).
  • CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527).
  • CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
  • CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
  • CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529).
  • CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
  • CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708).
  • CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
  • CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579).
  • CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584).
  • CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582).
  • CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
  • CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). -…
Record
SUSE-SU-2026:20615-1
Updated
2026-11-02
OSVSUSE-SU-2026:20845-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
  • CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
  • CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
  • CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
  • CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
  • CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
  • CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
  • CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
  • CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
  • CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
  • CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
  • CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
  • CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
  • CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
  • CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40192: Revert "ipmi: fix msg stack when IPMI is disconnected" (bsc#1253622).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer()…
Record
SUSE-SU-2026:20845-1
Updated
2026-11-02
OSVSUSE-SU-2026:20876-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
  • CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
  • CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
  • CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
  • CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
  • CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
  • CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
  • CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
  • CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
  • CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
  • CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
  • CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
  • CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
  • CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
  • CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40192: Revert "ipmi: fix msg stack when IPMI is disconnected" (bsc#1253622).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer()…
Record
SUSE-SU-2026:20876-1
Updated
2026-11-02
OSVUSN-8094-1 No score

linux, linux-aws, linux-aws-6.17, linux-gcp, linux-hwe-6.17, linux-oracle, linux-oracle-6.17 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ATM drivers;
  • Network block device driver;
  • Bluetooth drivers;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Intel Stratix 10 firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • Microsoft Hyper-V drivers;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Macintosh device drivers;
  • Multiple devices driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVME drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Voltage and Current Regulator drivers;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Media Oriented Systems Transport (MOST) driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • AFS file system;
  • BFS file system;
  • BTRFS file system;
  • EROFS file system;
  • Ext4 file system;
  • FAT file system;
  • GFS2 file system;
  • Journaling layer for block devices (JBD2);
  • File systems infrastructure;
  • Network file system (NFS) client;
  • NTFS3 file system;
  • OCFS2 file system;
  • SMB network file system;
  • XFS file system;
  • BPF subsystem;
  • MediaTek SoC drivers;
  • Bluetooth subsystem;
  • io_uring subsystem;
  • Locking primitives;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Kexec HandOver (KHO);
  • Memory management;
  • Ceph Core library;
  • Networking core;
  • Devlink API;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Open vSwitch;
  • Network traffic control;
  • VMware vSockets driver;
  • eXpress Data Path;
  • Integrity Measurement Architecture(IMA) framework;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • HD-audio driver;
  • Turtle Beach Wavefront ALSA driver;
  • SoundWire (SDCA) ASoC drivers; (CVE-2025-40246, CVE-2025-40247, CVE-2025-40248, CVE-2025-40249, CVE-2025-40250, CVE-2025-40251, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40255, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40260, CVE-2025-40261, CVE-2025-40262, CVE-2025-40263, CVE-2025-40264, CVE-2025-40265, CVE-2025-40266, CVE-2025-40290, CVE-2025-40345, CVE-2025-68212, CVE-2025-68213, CVE-2025-68214, CVE-2025-68215, CVE-2025-68217, CVE-2025-68218, CVE-2025-68219, CVE-2025-68220, CVE-2025-68221,…
Record
USN-8094-1
Updated
2026-11-04
OSVUSN-8094-2 No score

linux-gcp-6.17, linux-realtime vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ATM drivers;
  • Network block device driver;
  • Bluetooth drivers;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Intel Stratix 10 firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • Microsoft Hyper-V drivers;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Macintosh device drivers;
  • Multiple devices driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVME drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Voltage and Current Regulator drivers;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Media Oriented Systems Transport (MOST) driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • AFS file system;
  • BFS file system;
  • BTRFS file system;
  • EROFS file system;
  • Ext4 file system;
  • FAT file system;
  • GFS2 file system;
  • Journaling layer for block devices (JBD2);
  • File systems infrastructure;
  • Network file system (NFS) client;
  • NTFS3 file system;
  • OCFS2 file system;
  • SMB network file system;
  • XFS file system;
  • BPF subsystem;
  • MediaTek SoC drivers;
  • Bluetooth subsystem;
  • io_uring subsystem;
  • Locking primitives;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Kexec HandOver (KHO);
  • Memory management;
  • Ceph Core library;
  • Networking core;
  • Devlink API;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Open vSwitch;
  • Network traffic control;
  • VMware vSockets driver;
  • eXpress Data Path;
  • Integrity Measurement Architecture(IMA) framework;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • HD-audio driver;
  • Turtle Beach Wavefront ALSA driver;
  • SoundWire (SDCA) ASoC drivers; (CVE-2025-40246, CVE-2025-40247, CVE-2025-40248, CVE-2025-40249, CVE-2025-40250, CVE-2025-40251, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40255, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40260, CVE-2025-40261, CVE-2025-40262, CVE-2025-40263, CVE-2025-40264, CVE-2025-40265, CVE-2025-40266, CVE-2025-40290, CVE-2025-40345, CVE-2025-68212, CVE-2025-68213, CVE-2025-68214, CVE-2025-68215, CVE-2025-68217, CVE-2025-68218, CVE-2025-68219, CVE-2025-68220, CVE-2025-68221,…
Record
USN-8094-2
Updated
2026-11-04
OSVUSN-8094-3 No score

linux-realtime-6.17 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ATM drivers;
  • Network block device driver;
  • Bluetooth drivers;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Intel Stratix 10 firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • Microsoft Hyper-V drivers;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Macintosh device drivers;
  • Multiple devices driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVME drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Voltage and Current Regulator drivers;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Media Oriented Systems Transport (MOST) driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • AFS file system;
  • BFS file system;
  • BTRFS file system;
  • EROFS file system;
  • Ext4 file system;
  • FAT file system;
  • GFS2 file system;
  • Journaling layer for block devices (JBD2);
  • File systems infrastructure;
  • Network file system (NFS) client;
  • NTFS3 file system;
  • OCFS2 file system;
  • SMB network file system;
  • XFS file system;
  • BPF subsystem;
  • MediaTek SoC drivers;
  • Bluetooth subsystem;
  • io_uring subsystem;
  • Locking primitives;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Kexec HandOver (KHO);
  • Memory management;
  • Ceph Core library;
  • Networking core;
  • Devlink API;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Open vSwitch;
  • Network traffic control;
  • VMware vSockets driver;
  • eXpress Data Path;
  • Integrity Measurement Architecture(IMA) framework;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • HD-audio driver;
  • Turtle Beach Wavefront ALSA driver;
  • SoundWire (SDCA) ASoC drivers; (CVE-2025-40246, CVE-2025-40247, CVE-2025-40248, CVE-2025-40249, CVE-2025-40250, CVE-2025-40251, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40255, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40260, CVE-2025-40261, CVE-2025-40262, CVE-2025-40263, CVE-2025-40264, CVE-2025-40265, CVE-2025-40266, CVE-2025-40290, CVE-2025-40345, CVE-2025-68212, CVE-2025-68213, CVE-2025-68214, CVE-2025-68215, CVE-2025-68217, CVE-2025-68218, CVE-2025-68219, CVE-2025-68220, CVE-2025-68221,…
Record
USN-8094-3
Updated
2026-11-04
OSVUSN-8094-4 No score

linux-azure, linux-azure-6.17 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ATM drivers;
  • Network block device driver;
  • Bluetooth drivers;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Intel Stratix 10 firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • Microsoft Hyper-V drivers;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Macintosh device drivers;
  • Multiple devices driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVME drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Voltage and Current Regulator drivers;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Media Oriented Systems Transport (MOST) driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • AFS file system;
  • BFS file system;
  • BTRFS file system;
  • EROFS file system;
  • Ext4 file system;
  • FAT file system;
  • GFS2 file system;
  • Journaling layer for block devices (JBD2);
  • File systems infrastructure;
  • Network file system (NFS) client;
  • NTFS3 file system;
  • OCFS2 file system;
  • SMB network file system;
  • XFS file system;
  • BPF subsystem;
  • MediaTek SoC drivers;
  • Bluetooth subsystem;
  • io_uring subsystem;
  • Locking primitives;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Kexec HandOver (KHO);
  • Memory management;
  • Ceph Core library;
  • Networking core;
  • Devlink API;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Open vSwitch;
  • Network traffic control;
  • VMware vSockets driver;
  • eXpress Data Path;
  • Integrity Measurement Architecture(IMA) framework;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • HD-audio driver;
  • Turtle Beach Wavefront ALSA driver;
  • SoundWire (SDCA) ASoC drivers; (CVE-2025-40246, CVE-2025-40247, CVE-2025-40248, CVE-2025-40249, CVE-2025-40250, CVE-2025-40251, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40255, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40260, CVE-2025-40261, CVE-2025-40262, CVE-2025-40263, CVE-2025-40264, CVE-2025-40265, CVE-2025-40266, CVE-2025-40290, CVE-2025-40345, CVE-2025-68212, CVE-2025-68213, CVE-2025-68214, CVE-2025-68215, CVE-2025-68217, CVE-2025-68218, CVE-2025-68219, CVE-2025-68220, CVE-2025-68221,…
Record
USN-8094-4
Updated
2026-11-04
OSVUSN-8094-5 No score

linux-raspi vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ATM drivers;
  • Network block device driver;
  • Bluetooth drivers;
  • Data acquisition framework and drivers;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Intel Stratix 10 firmware drivers;
  • GPIO subsystem;
  • GPU drivers;
  • Microsoft Hyper-V drivers;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • Macintosh device drivers;
  • Multiple devices driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVME drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Voltage and Current Regulator drivers;
  • Real Time Clock drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Media Oriented Systems Transport (MOST) driver;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • UFS subsystem;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • AFS file system;
  • BFS file system;
  • BTRFS file system;
  • EROFS file system;
  • Ext4 file system;
  • FAT file system;
  • GFS2 file system;
  • Journaling layer for block devices (JBD2);
  • File systems infrastructure;
  • Network file system (NFS) client;
  • NTFS3 file system;
  • OCFS2 file system;
  • SMB network file system;
  • XFS file system;
  • BPF subsystem;
  • MediaTek SoC drivers;
  • Bluetooth subsystem;
  • io_uring subsystem;
  • Locking primitives;
  • Scheduler infrastructure;
  • Timer subsystem;
  • Tracing infrastructure;
  • Kexec HandOver (KHO);
  • Memory management;
  • Ceph Core library;
  • Networking core;
  • Devlink API;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Open vSwitch;
  • Network traffic control;
  • VMware vSockets driver;
  • eXpress Data Path;
  • Integrity Measurement Architecture(IMA) framework;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • HD-audio driver;
  • Turtle Beach Wavefront ALSA driver;
  • SoundWire (SDCA) ASoC drivers; (CVE-2025-40246, CVE-2025-40247, CVE-2025-40248, CVE-2025-40249, CVE-2025-40250, CVE-2025-40251, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40255, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40260, CVE-2025-40261, CVE-2025-40262, CVE-2025-40263, CVE-2025-40264, CVE-2025-40265, CVE-2025-40266, CVE-2025-40290, CVE-2025-40345, CVE-2025-68212, CVE-2025-68213, CVE-2025-68214, CVE-2025-68215, CVE-2025-68217, CVE-2025-68218, CVE-2025-68219, CVE-2025-68220, CVE-2025-68221,…
Record
USN-8094-5
Updated
2026-11-04
OSVUSN-8095-1 No score

linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-1
Updated
2026-11-03
OSVUSN-8095-2 No score

linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-2
Updated
2026-11-03
OSVUSN-8095-3 No score

linux-realtime, linux-realtime-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-3
Updated
2026-11-03
OSVUSN-8095-4 No score

linux-aws-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-4
Updated
2026-11-03
OSVUSN-8095-5 No score

linux-raspi, linux-raspi-realtime vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-5
Updated
2026-11-03
OSVUSN-8096-1 No score

linux, linux-aws, linux-gcp, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-xilinx-zynqmp vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Tablet) drivers;
  • ISDN/mISDN subsystem;
  • Macintosh device drivers;
  • Media drivers;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVME drivers;
  • PA-RISC drivers;
  • PCI subsystem;
  • Chrome hardware platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Watchdog drivers;
  • BFS file system;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • SMB network file system;
  • XFS file system;
  • BPF subsystem;
  • Ethernet bridge;
  • Memory management;
  • Network traffic control;
  • io_uring subsystem;
  • Locking primitives;
  • Scheduler infrastructure;
  • Shadow Call Stack mechanism;
  • Tracing infrastructure;
  • Bluetooth subsystem;
  • CAIF protocol;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • Ethtool driver;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • SCTP protocol;
  • Network sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • Wireless networking;
  • Rust bindings mechanism;
  • Integrity Measurement Architecture(IMA) framework;
  • Key management;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • Turtle Beach Wavefront ALSA driver;
  • STMicroelectronics SoC drivers;
  • USB sound devices; (CVE-2022-49465, CVE-2024-36903, CVE-2024-36927, CVE-2024-37354, CVE-2024-41014, CVE-2024-46830, CVE-2024-47666, CVE-2024-49968, CVE-2025-22022, CVE-2025-22111, CVE-2025-22121, CVE-2025-38022, CVE-2025-38129, CVE-2025-38556, CVE-2025-40040, CVE-2025-40083, CVE-2025-40110, CVE-2025-40211, CVE-2025-40248, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40261, CVE-2025-40262,…
Record
USN-8096-1
Updated
2026-11-04

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Azure Linux:3
 before 6.6.119.3-1
6.6.119.3-1
linux-lts
Alpaquita:23
 6.1.158-r0 up to 6.1.159-r0
6.1.159-r0
linux-lts
Alpaquita:25
 6.12.58-r0 up to 6.12.61-r0
6.12.61-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
kernel-uek
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
kernel-uek-container
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
kernel-uek-container-debug
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
kernel-uek-debug
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
kernel-uek-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-uek-devel
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
kernel-uek-headers
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
kernel-uek-tools
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
perf
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
python-perf
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
linux-buildinfo-5.4.0-226-tuxcare.els8-generic
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-buildinfo-5.4.0-226-tuxcare.els8-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-cloud-tools-5.4.0-226-tuxcare.els8
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-cloud-tools-5.4.0-226-tuxcare.els8-generic
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-cloud-tools-5.4.0-226-tuxcare.els8-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-cloud-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-doc
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-headers-5.4.0-226-tuxcare.els8
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-headers-5.4.0-226-tuxcare.els8-generic
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-headers-5.4.0-226-tuxcare.els8-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-image-unsigned-5.4.0-226-tuxcare.els8-generic
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-image-unsigned-5.4.0-226-tuxcare.els8-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-libc-dev
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-modules-5.4.0-226-tuxcare.els8-generic
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-modules-5.4.0-226-tuxcare.els8-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-modules-extra-5.4.0-226-tuxcare.els8-generic
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-source-5.4.0
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-tools-5.4.0-226-tuxcare.els8
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-tools-5.4.0-226-tuxcare.els8-generic
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-tools-5.4.0-226-tuxcare.els8-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-tools-host
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
bpftool
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-core
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-cross-headers
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-debug
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-debug-core
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-debug-devel
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-debug-modules
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-debug-modules-extra
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-debug-modules-internal
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-devel
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-headers
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-ipaclones-internal
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-modules
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-modules-extra
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-modules-internal
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-selftests-internal
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-tools
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-tools-libs
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-tools-libs-devel
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
perf
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
python3-perf
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
bpftool
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-core
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-cross-headers
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-debug
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-debug-core
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-debug-devel
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-debug-modules
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-debug-modules-extra
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-debug-modules-internal
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-devel
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-headers
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-ipaclones-internal
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-modules
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-modules-extra
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-modules-internal
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-selftests-internal
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-tools
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-tools-libs
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-tools-libs-devel
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
perf
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
python3-perf
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 150 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.11.els5
7.0.0-284.1101.el9_2.tuxcare.11.els5
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 150 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els5
5.14.0-284.1101.el9_2.tuxcare.11.els5
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 150 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els5
5.14.0-284.1101.el9_2.tuxcare.11.els5
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 150 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els5
5.14.0-284.1101.el9_2.tuxcare.11.els5
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 150 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els5
5.14.0-284.1101.el9_2.tuxcare.11.els5
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 150 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.11.els5
5.14.0-284.1101.el9_2.tuxcare.11.els5
Kernel
Linux
 4.12.0 up to 5.4.302, 5.5.0 up to 5.10.247, 5.11.0 up to 5.15.197, 5.16.0 up to 6.1.159, 6.2.0 up to 6.6.118, 6.7.0 up to 6.12.60, 6.13.0 up to 6.17.10
5.4.3025.10.2475.15.1976.1.1596.6.1186.12.606.17.10
linux
Debian:12
 before 6.1.159-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 40 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.159-1
linux
Debian:13
 before 6.12.63-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-1~bpo12+1
6.12.63-1
linux
Debian:14
 before 6.17.10-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
6.17.10-1
linux
Debian:11
From an advisory covering 135 CVEs
 before 5.10.247-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 42 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.234-15.10.237-15.10.244-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.247-1
linux-6.1
Debian:11
From an advisory covering 114 CVEs
 before 6.1.159-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1
Show 8 moreShow less
6.1.128-1~deb11u16.1.129-1~deb11u16.1.137-1~deb11u16.1.140-1~deb11u16.1.147-1~deb11u16.1.148-1~deb11u16.1.153-1~deb11u16.1.158-1~deb11u1
6.1.159-1~deb11u1
kernel
Mageia:9
From an advisory covering 236 CVEs
 before 6.6.120-1.mga9
6.6.120-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 236 CVEs
 before 7.1.14-14.mga9
7.1.14-14.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 236 CVEs
 before 3.24-88.mga9
3.24-88.mga9
kernel-linus
Mageia:9
From an advisory covering 236 CVEs
 before 6.6.120-1.mga9
6.6.120-1.mga9
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 35 CVEs
 before 5.10.0-299.0.0.202.oe2203sp4
5.10.0-299.0.0.202.oe2203sp4
kernel
openEuler:24.03-LTS
From an advisory covering 99 CVEs
 before 6.6.0-138.0.0.119.oe2403
6.6.0-138.0.0.119.oe2403
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 99 CVEs
 before 6.6.0-138.0.0.132.oe2403sp1
6.6.0-138.0.0.132.oe2403sp1
kernel
openEuler:24.03-LTS-SP2
From an advisory covering 94 CVEs
 before 6.6.0-138.0.0.132.oe2403sp2
6.6.0-138.0.0.132.oe2403sp2
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
rootio-linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1.150700.17.21.1
6.4.0-150700.53.31.1.150700.17.21.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-livepatch-SLE15-SP7_Update_9
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 171 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.53.31.1
6.4.0-150700.53.31.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-livepatch-SLE15-SP6_Update_20
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 38 CVEs
 before 1-150600.13.3.1
1-150600.13.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-default
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1.150600.12.40.1
6.4.0-150600.23.87.1.150600.12.40.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-source
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1.150600.12.40.1
6.4.0-150600.23.87.1.150600.12.40.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1.150600.12.40.1
6.4.0-150600.23.87.1.150600.12.40.1
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 38 CVEs
 before 6.4.0-150600.23.87.1
6.4.0-150600.23.87.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 172 CVEs
 before 6.4.0-150700.20.27.1
6.4.0-150700.20.27.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 172 CVEs
 before 6.4.0-150700.20.27.1
6.4.0-150700.20.27.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 172 CVEs
 before 6.4.0-150700.20.27.1
6.4.0-150700.20.27.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 145 CVEs
 before 4.12.14-122.293.1
4.12.14-122.293.1
kgraft-patch-SLE12-SP5_Update_77
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 145 CVEs
 before 1-8.3.1
1-8.3.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 145 CVEs
 before 4.12.14-122.293.1
4.12.14-122.293.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 145 CVEs
 before 4.12.14-122.293.1
4.12.14-122.293.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 145 CVEs
 before 4.12.14-122.293.1
4.12.14-122.293.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 145 CVEs
 before 4.12.14-122.293.1
4.12.14-122.293.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 145 CVEs
 before 4.12.14-122.293.1
4.12.14-122.293.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 145 CVEs
 before 4.12.14-122.293.1
4.12.14-122.293.1
kernel-livepatch-SLE15-SP7-RT_Update_9
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 171 CVEs
 before 1-150700.1.3.2
1-150700.1.3.2
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.7.31.2
6.4.0-150700.7.31.2
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.7.31.1
6.4.0-150700.7.31.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 171 CVEs
 before 6.4.0-150700.7.31.1
6.4.0-150700.7.31.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 524 CVEs
 before 6.4.0-39.1
6.4.0-39.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 524 CVEs
 before 6.4.0-39.1.21.16
6.4.0-39.1.21.16
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 524 CVEs
 before 6.4.0-39.1
6.4.0-39.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 524 CVEs
 before 6.4.0-39.1
6.4.0-39.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 524 CVEs
 before 6.4.0-39.1
6.4.0-39.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 524 CVEs
 before 6.4.0-39.1.21.16
6.4.0-39.1.21.16
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 524 CVEs
 before 6.4.0-39.1
6.4.0-39.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 524 CVEs
 before 6.4.0-39.1
6.4.0-39.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1.160000.2.7
6.12.0-160000.26.1.160000.2.7
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1.160000.2.7
6.12.0-160000.26.1.160000.2.7
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1.160000.2.7
6.12.0-160000.26.1.160000.2.7
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
linux-aws
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
 None known
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
 None known
linux
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
 None known
linux-aws
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-kvm
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
 None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1103.110~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1103.110~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1110.119~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1110.119~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-bluefield
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19
Show 45 moreShow less
5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92
 None known
linux-gcp
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 45 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1103.112~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1103.112~20.04.1
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-173.183~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-173.183~20.04.1
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-ibm
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8
Show 45 moreShow less
5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71
 None known
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1097.100~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 45 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1
5.15.0-1097.100~20.04.1
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-intel-iotg-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1098.104~20.04.1, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1
Show 45 moreShow less
5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1
5.15.0-1098.104~20.04.1
linux-iot
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11
Show 45 moreShow less
5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1035.365.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1042.435.4.0-1043.445.4.0-1044.455.4.0-1045.465.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1060.635.4.0-1061.645.4.0-1062.65
 None known
linux-kvm
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1.160000.2.7
6.12.0-160000.26.1.160000.2.7
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 205 CVEs
 before 6.12.0-160000.26.1
6.12.0-160000.26.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
affectedOSV
factsOSV
severityOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-40259 is a medium vulnerability (CVSS 6.7) in Linux, published December 4, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. Fixed in kernel 6.6.119.3-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 383 package rows, 2,726 versions, 3,592 references and the rest of 34 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 15 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open