Every CVE Search/ Get API key

CVE-2025-40308

Bluetooth: bcsp: receive data only if registered

5.6 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: bcsp: receive data only if registered

Currently, bcsp_recv() can be called even when the BCSP protocol has not been registered. This leads to a NULL pointer dereference, as shown in the following stack trace:

KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f]
RIP: 0010:bcsp_recv+0x13d/0x1740 drivers/bluetooth/hci_bcsp.c:590
Call Trace:
 <TASK>
 hci_uart_tty_receive+0x194/0x220 drivers/bluetooth/hci_ldisc.c:627
 tiocsti+0x23c/0x2c0 drivers/tty/tty_io.c:2290
 tty_ioctl+0x626/0xde0 drivers/tty/tty_io.c:2706
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

To prevent this, ensure that the HCI_UART_REGISTERED flag is set before processing received data. If the protocol is not registered, return -EUNATCH.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.19%Up 0.2 points since Dec 8, 2025
90%50%10%1%

What each source reports

OSV Score usedUBUNTU-CVE-2025-40308 5.6

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bcsp: receive data only if registered Currently, bcsp_recv() can be called even when the BCSP protocol has not been registered. This leads to a NULL pointer dereference, as shown in the following stack trace: KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] RIP: 0010:bcsp_recv+0x13d/0x1740 drivers/bluetooth/hci_bcsp.c:590 Call Trace: <TASK> hci_uart_tty_receive+0x194/0x220 drivers/bluetooth/hci_ldisc.c:627 tiocsti+0x23c/0x2c0 drivers/tty/tty_io.c:2290 tty_ioctl+0x626/0xde0 drivers/tty/tty_io.c:2706 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f To prevent this, ensure that the HCI_UART_REGISTERED flag is set before processing received data. If the protocol is not registered, return -EUNATCH.

Record
UBUNTU-CVE-2025-40308
CVSS 4.0
5.6 MediumCVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-03
CVE List No score

Bluetooth: bcsp: receive data only if registered

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: bcsp: receive data only if registered

Currently, bcsp_recv() can be called even when the BCSP protocol has not been registered. This leads to a NULL pointer dereference, as shown in the following stack trace:

KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f]
RIP: 0010:bcsp_recv+0x13d/0x1740 drivers/bluetooth/hci_bcsp.c:590
Call Trace:
 <TASK>
 hci_uart_tty_receive+0x194/0x220 drivers/bluetooth/hci_ldisc.c:627
 tiocsti+0x23c/0x2c0 drivers/tty/tty_io.c:2290
 tty_ioctl+0x626/0xde0 drivers/tty/tty_io.c:2706
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

To prevent this, ensure that the HCI_UART_REGISTERED flag is set before processing received data. If the protocol is not registered, return -EUNATCH.

Record
CVE-2025-40308
Updated
2026-11-02
EUVDEUVD-2025-201637 No score

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: bcsp: receive data only if registered

Currently, bcsp_recv() can be called even when the BCSP protocol has not been registered. This leads to a NULL pointer dereference, as shown in the following stack trace:

KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f]
RIP: 0010:bcsp_recv+0x13d/0x1740 drivers/bluetooth/hci_bcsp.c:590
Call Trace:
 <TASK>
 hci_uart_tty_receive+0x194/0x220 drivers/bluetooth/hci_ldisc.c:627
 tiocsti+0x23c/0x2c0 drivers/tty/tty_io.c:2290
 tty_ioctl+0x626/0xde0 drivers/tty/tty_io.c:2706
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

To prevent this, ensure that the HCI_UART_REGISTERED flag is set before processing received data. If the protocol is not registered, return -EUNATCH.

Record
EUVD-2025-201637
Updated
2026-11-02
GitHub AdvisoriesGHSA-4r3x-4wj9-mxfm No score

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bcsp: receive...

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: bcsp: receive data only if registered

Currently, bcsp_recv() can be called even when the BCSP protocol has not been registered. This leads to a NULL pointer dereference, as shown in the following stack trace:

KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f]
RIP: 0010:bcsp_recv+0x13d/0x1740 drivers/bluetooth/hci_bcsp.c:590
Call Trace:
 <TASK>
 hci_uart_tty_receive+0x194/0x220 drivers/bluetooth/hci_ldisc.c:627
 tiocsti+0x23c/0x2c0 drivers/tty/tty_io.c:2290
 tty_ioctl+0x626/0xde0 drivers/tty/tty_io.c:2706
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

To prevent this, ensure that the HCI_UART_REGISTERED flag is set before processing received data. If the protocol is not registered, return -EUNATCH.

Record
GHSA-4r3x-4wj9-mxfm
Updated
2026-11-02
NVD No score

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: bcsp: receive data only if registered

Currently, bcsp_recv() can be called even when the BCSP protocol has not been registered. This leads to a NULL pointer dereference, as shown in the following stack trace:

KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f]
RIP: 0010:bcsp_recv+0x13d/0x1740 drivers/bluetooth/hci_bcsp.c:590
Call Trace:
 <TASK>
 hci_uart_tty_receive+0x194/0x220 drivers/bluetooth/hci_ldisc.c:627
 tiocsti+0x23c/0x2c0 drivers/tty/tty_io.c:2290
 tty_ioctl+0x626/0xde0 drivers/tty/tty_io.c:2706
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

To prevent this, ensure that the HCI_UART_REGISTERED flag is set before processing received data. If the protocol is not registered, return -EUNATCH.

Record
CVE-2025-40308
Updated
2026-11-02
OSVOESA-2026-1759 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/s390: Implement blocking domain

This fixes a crash when surprise hot-unplugging a PCI device. This crash happens because during hot-unplug __iommu_group_set_domain_nofail() attaching the default domain fails when the platform no longer recognizes the device as it has already been removed and we end up with a NULL domain pointer and UAF. This is exactly the case referred to in the second comment in __iommu_device_set_domain() and just as stated there if we can instead attach the blocking domain the UAF is prevented as this can handle the already removed device. Implement the blocking domain to use this handling. With this change, the crash is fixed but we still hit a warning attempting to change DMA ownership on a blocked device.(CVE-2024-53232)

In the Linux kernel, the following vulnerability has been resolved:

iommu: Fix two issues in iommu_copy_struct_from_user()

In the review for iommu_copy_struct_to_user() helper, Matt pointed out that a NULL pointer should be rejected prior to dereferencing it: https://lore.kernel.org/all/(CVE-2025-37900)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: Avoid race in open_cached_dir with lease breaks

A pre-existing valid cfid returned from find_or_create_cached_dir might race with a lease break, meaning open_cached_dir doesn't consider it valid, and thinks it's newly-constructed. This leaks a dentry reference if the allocation occurs before the queued lease break work runs.

Avoid the race by extending holding the cfid_list_lock across find_or_create_cached_dir and when the result is checked.(CVE-2025-37954)

In the Linux kernel, the following vulnerability has been resolved:

net_sched: prio: fix a race in prio_tune()

Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time.

The race is as follows:

CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()

This can be abused to underflow a parent's qlen.

Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.(CVE-2025-38083)

In the Linux kernel, the following vulnerability has been resolved:

IB/mlx5: Fix potential deadlock in MR deregistration

The issue arises when kzalloc() is invoked while holding umem_mutex or any other lock acquired under umem_mutex. This is problematic because kzalloc() can trigger fs_reclaim_aqcuire(), which may, in turn, invoke mmu_notifier_invalidate_range_start(). This function can lead to mlx5_ib_invalidate_range(), which attempts to acquire umem_mutex again, resulting in a deadlock.

The problematic flow: CPU0 | CPU1 ---------------------------------------|------------------------------------------------ mlx5_ib_dereg_mr() | → revoke_mr() | → mutex_lock(&umem_odp->umem_mutex) | | mlx5_mkey_cache_init() | → mutex_lock(&dev->cache.rb_lock) | → mlx5r_cache_create_ent_locked() | → kzalloc(GFP_KERNEL) | → fs_reclaim() | → mmu_notifier_invalidate_range_start() | → mlx5_ib_invalidate_range() | → mutex_lock(&umem_odp->umem_mutex) →…

Record
OESA-2026-1759
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 45 moreShow less
OSVOESA-2026-1760 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/s390: Implement blocking domain

This fixes a crash when surprise hot-unplugging a PCI device. This crash happens because during hot-unplug __iommu_group_set_domain_nofail() attaching the default domain fails when the platform no longer recognizes the device as it has already been removed and we end up with a NULL domain pointer and UAF. This is exactly the case referred to in the second comment in __iommu_device_set_domain() and just as stated there if we can instead attach the blocking domain the UAF is prevented as this can handle the already removed device. Implement the blocking domain to use this handling. With this change, the crash is fixed but we still hit a warning attempting to change DMA ownership on a blocked device.(CVE-2024-53232)

In the Linux kernel, the following vulnerability has been resolved:

iommu: Fix two issues in iommu_copy_struct_from_user()

In the review for iommu_copy_struct_to_user() helper, Matt pointed out that a NULL pointer should be rejected prior to dereferencing it: https://lore.kernel.org/all/(CVE-2025-37900)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: Avoid race in open_cached_dir with lease breaks

A pre-existing valid cfid returned from find_or_create_cached_dir might race with a lease break, meaning open_cached_dir doesn't consider it valid, and thinks it's newly-constructed. This leaks a dentry reference if the allocation occurs before the queued lease break work runs.

Avoid the race by extending holding the cfid_list_lock across find_or_create_cached_dir and when the result is checked.(CVE-2025-37954)

In the Linux kernel, the following vulnerability has been resolved:

net_sched: prio: fix a race in prio_tune()

Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time.

The race is as follows:

CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()

This can be abused to underflow a parent's qlen.

Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.(CVE-2025-38083)

In the Linux kernel, the following vulnerability has been resolved:

IB/mlx5: Fix potential deadlock in MR deregistration

The issue arises when kzalloc() is invoked while holding umem_mutex or any other lock acquired under umem_mutex. This is problematic because kzalloc() can trigger fs_reclaim_aqcuire(), which may, in turn, invoke mmu_notifier_invalidate_range_start(). This function can lead to mlx5_ib_invalidate_range(), which attempts to acquire umem_mutex again, resulting in a deadlock.

The problematic flow: CPU0 | CPU1 ---------------------------------------|------------------------------------------------ mlx5_ib_dereg_mr() | → revoke_mr() | → mutex_lock(&umem_odp->umem_mutex) | | mlx5_mkey_cache_init() | → mutex_lock(&dev->cache.rb_lock) | → mlx5r_cache_create_ent_locked() | → kzalloc(GFP_KERNEL) | → fs_reclaim() | → mmu_notifier_invalidate_range_start() | → mlx5_ib_invalidate_range() | → mutex_lock(&umem_odp->umem_mutex) →…

Record
OESA-2026-1760
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1761 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/s390: Implement blocking domain

This fixes a crash when surprise hot-unplugging a PCI device. This crash happens because during hot-unplug __iommu_group_set_domain_nofail() attaching the default domain fails when the platform no longer recognizes the device as it has already been removed and we end up with a NULL domain pointer and UAF. This is exactly the case referred to in the second comment in __iommu_device_set_domain() and just as stated there if we can instead attach the blocking domain the UAF is prevented as this can handle the already removed device. Implement the blocking domain to use this handling. With this change, the crash is fixed but we still hit a warning attempting to change DMA ownership on a blocked device.(CVE-2024-53232)

In the Linux kernel, the following vulnerability has been resolved:

iommu: Fix two issues in iommu_copy_struct_from_user()

In the review for iommu_copy_struct_to_user() helper, Matt pointed out that a NULL pointer should be rejected prior to dereferencing it: https://lore.kernel.org/all/(CVE-2025-37900)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: Avoid race in open_cached_dir with lease breaks

A pre-existing valid cfid returned from find_or_create_cached_dir might race with a lease break, meaning open_cached_dir doesn't consider it valid, and thinks it's newly-constructed. This leaks a dentry reference if the allocation occurs before the queued lease break work runs.

Avoid the race by extending holding the cfid_list_lock across find_or_create_cached_dir and when the result is checked.(CVE-2025-37954)

In the Linux kernel, the following vulnerability has been resolved:

net_sched: prio: fix a race in prio_tune()

Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time.

The race is as follows:

CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()

This can be abused to underflow a parent's qlen.

Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.(CVE-2025-38083)

In the Linux kernel, the following vulnerability has been resolved:

IB/mlx5: Fix potential deadlock in MR deregistration

The issue arises when kzalloc() is invoked while holding umem_mutex or any other lock acquired under umem_mutex. This is problematic because kzalloc() can trigger fs_reclaim_aqcuire(), which may, in turn, invoke mmu_notifier_invalidate_range_start(). This function can lead to mlx5_ib_invalidate_range(), which attempts to acquire umem_mutex again, resulting in a deadlock.

The problematic flow: CPU0 | CPU1 ---------------------------------------|------------------------------------------------ mlx5_ib_dereg_mr() | → revoke_mr() | → mutex_lock(&umem_odp->umem_mutex) | | mlx5_mkey_cache_init() | → mutex_lock(&dev->cache.rb_lock) | → mlx5r_cache_create_ent_locked() | → kzalloc(GFP_KERNEL) | → fs_reclaim() | → mmu_notifier_invalidate_range_start() | → mlx5_ib_invalidate_range() | → mutex_lock(&umem_odp->umem_mutex) →…

Record
OESA-2026-1761
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2026-1770140694 No score

kernel-uek: Fix of 43 CVEs

  • crypto: af_alg - Fix incorrect boolean values in af_alg_ctx {CVE-2025-40022}
  • arm64: pensando: Must boot Ortano kernel with spin-table
  • net/sched: adjust device watchdog timer to detect stopped queue at right time
  • net/mlx5: Mark the mellanox graceful_period fix as out-of-tree change
  • infiniband/xsigo: Replace BUG_ON with WARN_ON_ONCE.
  • infiniband/xsigo: xsvnic_main: Remove unused functions
  • infiniband/xsigo: xve_cm: Fix mixed code warning
  • infiniband/xsigo: xve_ethtool: Remove unused variable 'priv'
  • infiniband/xsigo: xve_ib: Fix misleading indentation
  • infiniband/xsigo: xve_ib: Fix mixed code warning
  • infiniband/xsigo: xve_verbs: Remove unused label 'out_free_pd'
  • infiniband/xsigo: xve_main: Remove unused function 'xve_napi_del'
  • infiniband/xsigo: xve_main: Fix mixed code warning
  • infiniband/xsigo: xve_main: Fix misleading indentation
  • inifinibad/xsigo: xsvnic_main: Remove unused variable 'xsvnic_ethtool_ops'
  • infiniband/xsigo: xscore_impl: Remove unused label 'err_pd'
  • rds: Fix jiffies type in struct rds_conn_path
  • kernel: sysctl: Remove unused variable 'zero'
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • RDMA/cm: Base cm_id destruction timeout on CMA values
  • x86/its: Build fails with CONFIG_MITIGATION_ITS=n
  • LTS tag: v5.4.302
  • Input: pegasus-notetaker - fix potential out-of-bounds access {CVE-2025-68217}
  • Input: remove third argument of usb_maxpacket()
  • usb: deprecate the third argument of usb_maxpacket()
  • fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271}
  • pmdomain: imx: Fix reference count leak in imx_gpc_remove
  • pmdomain: arm: scmi: Fix genpd leak on provider registration failure {CVE-2025-68204}
  • net: netpoll: fix incorrect refcount handling causing incorrect cleanup {CVE-2025-68245}
  • net: qede: Initialize qede_ll_ops with designated initializer
  • net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error {CVE-2025-68220}
  • ALSA: usb-audio: fix uac2 clock source at terminal parser
  • mm/page_alloc: fix hash table order logging in alloc_large_system_hash()
  • kconfig/nconf: Initialize the default locale at startup
  • kconfig/mconf: Initialize the default locale at startup
  • vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248}
  • s390/ctcm: Fix double-kfree {CVE-2025-40253}
  • net: openvswitch: remove never-working support for setting nsh fields {CVE-2025-40254}
  • mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
  • MIPS: Malta: Fix !EVA SOC-it PCI MMIO
  • scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() {CVE-2025-68229}
  • scsi: sg: Do not sleep in atomic context {CVE-2025-40259}
  • Input: cros_ec_keyb - fix an invalid memory access {CVE-2025-40263}
  • be2net: pass wrb_params in case of OS2BMC {CVE-2025-40264}
  • isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() {CVE-2025-68734}
  • EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
  • EDAC/altera: Handle OCRAM ECC enable after warm reset
  • spi: Try to get ACPI GPIO IRQ earlier
  • ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe {CVE-2025-68241}
  • strparser: Fix signed/unsigned mismatch bug
  • gcov: add support for GCC 15
  • mm/ksm: fix flag-dropping behavior in ksm_madvise {CVE-2025-40040}
  • ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd {CVE-2025-40275}
  • drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE {CVE-2025-40277}
  • ASoC: cs4271: Fix regulator leak on probe failure
  • regulator: fixed: fix GPIO descriptor leak on register failure
  • regulator: fixed: use dev_err_probe for register
  • Bluetooth: L2CAP: export l2cap_chan_hold for modules
  • net_sched: limit try_bulk_dequeue_skb() batches
  • net_sched: remove need_resched() from qdisc_run()
  • net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
  • net/mlx5e: Fix maxrate wraparound in threshold between units
  • net: sched: act_ife: initialize struct tc_ife to fix KMSAN…
Record
CLSA-2026-1770140694
Updated
2026-11-02
OSVCLSA-2026-1775224807 No score

Fix of 95 CVEs

  • CVE-2025-39683
    • tracing: Remove unneeded goto out logic {CVE-2025-39683}
    • tracing: Limit access to parser->buffer when trace_get_user failed {CVE-2025-39683}
  • CVE-2025-38079
    • crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
  • CVE-2025-38159
    • wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
  • CVE-2025-38211
    • RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
  • CVE-2025-38024
    • RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024}
  • CVE-2025-38103
    • HID: hyperv: Correctly access fields declared as __le16 {CVE-2025-38103}
    • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • CVE-2025-38157
    • wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}
  • CVE-2025-38230
    • jfs: add sanity check for agwidth in dbMount {CVE-2025-38230}
    • fs/jfs: consolidate sanity checking in dbMount {CVE-2025-38230}
    • jfs: validate AG parameters in dbMount() to prevent crashes {CVE-2025-38230}
  • CVE-2025-39955
    • tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-39955}
  • CVE-2025-38680
    • media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680}
  • CVE-2025-38708
    • drbd: add missing kref_get in handle_write_conflicts {CVE-2025-38708}
  • CVE-2025-39759
    • btrfs: qgroup: introduce quota mode {CVE-2025-39759}
    • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • CVE-2025-38666
    • net: appletalk: Fix use-after-free in AARP proxy probe {CVE-2025-38666}
  • CVE-2025-40269
    • ALSA: usb-audio: Improve frames size computation {CVE-2025-40269}
    • ALSA: usb-audio: Replace s/frame/packet/ where appropriate {CVE-2025-40269}
    • ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269}
  • CVE-2025-40149
    • net: netdevice: Add operation ndo_sk_get_lower_dev {CVE-2025-40149}
    • net/tls: Device offload to use lowest netdevice in chain {CVE-2025-40149}
    • tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). {CVE-2025-40149}
  • CVE-2025-71089
    • iommu: disable SVA when CONFIG_X86 is set {CVE-2025-71089}
  • CVE-2026-23234
    • f2fs: fix to avoid UAF in f2fs_write_end_io() {CVE-2026-23234}
  • CVE-2026-23089
    • ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
  • CVE-2026-23074
    • net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
  • CVE-2026-23061
    • can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061}
  • CVE-2026-23060
    • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060}
  • CVE-2026-22997
    • net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts {CVE-2026-22997}
  • CVE-2026-22991
    • libceph: make free_choose_arg_map() resilient to partial allocation {CVE-2026-22991}
  • CVE-2026-22990
    • libceph: replace overzealous BUG_ON in osdmap_apply_incremental() {CVE-2026-22990}
  • CVE-2026-22978
    • wifi: avoid kernel-infoleak from struct iw_point {CVE-2026-22978}
  • CVE-2026-22977
    • net: sock: fix hardened usercopy panic in sock_recv_errqueue {CVE-2026-22977}
  • CVE-2025-71154
    • net: usb: rtl8150: fix memory leak on usb_submit_urb() failure {CVE-2025-71154}
  • CVE-2025-71085
    • ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() {CVE-2025-71085}
  • CVE-2025-68734
    • isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() {CVE-2025-68734}
  • CVE-2025-68349
    • NFSv4/pNFS: Clear…
Record
CLSA-2026-1775224807
Updated
2026-11-02
OSVCLSA-2026-1782155469 No score

kernel: Fix of 143 CVEs

  • ice: Fix PTP NULL pointer dereference during VSI rebuild {CVE-2026-23210}
  • tracing: Add recursion protection in kernel stack trace recording {CVE-2026-23138}
  • mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() {CVE-2025-38681}
  • cpuset: fix warning when disabling remote partition {CVE-2025-71142}
  • virtio: break and reset virtio devices on device_shutdown() {CVE-2025-38064}
  • netdevsim: fix a race issue related to the operation on bpf_bound_progs list {CVE-2026-23126}
  • atm: clip: Fix potential null-ptr-deref in to_atmarpd(). {CVE-2025-38460}
  • idpf: fix error handling in the init_task on load {CVE-2026-23017}
  • rxrpc: Fix recvmsg() unconditional requeue {CVE-2026-23066}
  • block: zero non-PI portion of auto integrity buffer {CVE-2026-23007}
  • can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode {CVE-2025-38665}
  • virtio_net: Fix napi_skb_cache_put warning {CVE-2024-43835}
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() {CVE-2026-23169}
  • net: fix segmentation of forwarding fraglist GRO {CVE-2026-23154}
  • gfs2: Validate i_depth for exhash directories {CVE-2025-38710}
  • KVM: Don't clobber irqfd routing type when deassigning irqfd {CVE-2026-23198}
  • ipvlan: Make the addrs_lock be per port {CVE-2026-23103}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • can: mcp251xfd: fix infinite loop when xmit fails {CVE-2024-41088}
  • RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly {CVE-2025-71096}
  • RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction {CVE-2025-38161}
  • scsi: qla2xxx: Validate sp before freeing associated memory {CVE-2025-71236}
  • net/sched: netem: account for backlog updates from child qdisc {CVE-2024-56770}
  • drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat {CVE-2026-31656}
  • iavf: fix off-by-one issues in iavf_config_rss_reg() {CVE-2025-71087}
  • net/sched: ets: fix divide by zero in the offload path {CVE-2026-23379}
  • can: j1939: implement NETDEV_UNREGISTER notification handler {CVE-2025-39925}
  • ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() {CVE-2026-31531}
  • Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb {CVE-2026-31510}
  • ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() {CVE-2026-23003}
  • drm/i915/gt: Check set_default_submission() before deferencing {CVE-2026-31540}
  • mac802154: check local interfaces before deleting sdata list {CVE-2024-57948}
  • lib/buildid: use __kernel_read() for sleepable context {CVE-2026-23002}
  • scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs {CVE-2023-52808}
  • net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979}
  • irqchip/imx-irqsteer: Handle runtime power management correctly {CVE-2024-42290}
  • io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop {CVE-2026-23113}
  • net/sched: ets: Remove drr class from the active list if it changes to strict {CVE-2025-68815}
  • net: bonding: fix NULL deref in bond_debug_rlb_hash_show {CVE-2026-31546}
  • ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813}
  • openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681}
  • net: USB: Fix wrong-direction WARNING in plusb.c {CVE-2023-52742}
  • module: Fix kernel panic when a symbol st_shndx is out of bounds {CVE-2026-31521}
  • udf: Fix preallocation discarding at indirect extent boundary {CVE-2022-48946}
  • net/mlx5: qos: Restrict RTNL area to avoid a lock cycle {CVE-2025-39947}
  • scsi: core: Wake up the error handler when final completions race against each other {CVE-2026-23110}
  • nbd: don't allow reconnect after disconnect {CVE-2025-21731}
  • nfsd: check that server is running in unlock_filesystem {CVE-2026-22989}
  • af_key: validate families in pfkey_send_migrate() {CVE-2026-31515}
  • netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() {CVE-2024-36286} -…
Record
CLSA-2026-1782155469
Updated
2026-11-02
OSVCLSA-2026-1783362244 No score

kernel: Fix of 122 CVEs

  • KVM: x86: Fix shadow paging use-after-free due to unexpected role {CVE-2026-46113}
  • KVM: x86: Fix shadow paging use-after-free due to unexpected GFN {CVE-2026-46113}
  • Bluetooth: bcsp: receive data only if registered {CVE-2025-40308}
  • xen/privcmd: unregister xenstore notifier on module exit {CVE-2026-31788}
  • xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
  • USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts {CVE-2026-43429}
  • net: usb: rtl8150: enable basic endpoint checking {CVE-2025-21708}
  • net: usb: kaweth: validate USB endpoints {CVE-2026-23312}
  • net: usb: kalmia: validate USB endpoints {CVE-2026-23365}
  • net: usb: pegasus: validate USB endpoints {CVE-2026-23290}
  • net: usb: pegasus: enable basic endpoint checking {CVE-2026-43156}
  • USB: usbcore: Introduce usb_bulk_msg_killable() {CVE-2026-43429}
  • USB: core: Add routines for endpoint checks in old drivers {CVE-2026-43156}
  • nf_tables: nft_dynset: fix possible stateful expression memleak in error path {CVE-2026-23399}
  • tpm: Cap the number of PCR banks {CVE-2025-71077}
  • clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() {CVE-2023-53704}
  • dm: fix a race condition in retrieve_deps {CVE-2023-54324}
  • ice: fix Tx scheduler error handling in XDP callback {CVE-2025-38127}
  • mlx5: fix skb leak while fifo resync and push {CVE-2023-54238}
  • mmc: vub300: fix return value check of mmc_add_host() {CVE-2022-50251}
  • bonding: annotate data-races around slave->last_rx {CVE-2026-23212}
  • RDMA/irdma: Fix data race on CQP completion stats {CVE-2023-54302}
  • bpf: cpumap: Fix memory leak in cpu_map_update_elem {CVE-2023-53441}
  • fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38215}
  • trace/fgraph: Fix the warning caused by missing unregister notifier {CVE-2025-39829}
  • vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects {CVE-2025-39850}
  • team: prevent adding a device which is already a team device lower {CVE-2024-58071}
  • net: stmmac: move the EST lock to struct stmmac_priv {CVE-2024-38594}
  • drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too {CVE-2024-50108}
  • rxrpc: Fix handling of received connection abort {CVE-2024-58053}
  • bnxt_en: Fix out-of-bound memcpy() during ethtool -w {CVE-2025-37911}
  • scsi: storvsc: Ratelimit warning logs to prevent VM denial of service {CVE-2025-21690}
  • net: atlantic: Fix DMA mapping for PTP hwts ring {CVE-2024-26680}
  • wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() {CVE-2024-47713}
  • drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) {CVE-2024-49905}
  • dm: fix NULL pointer dereference in __dm_suspend() {CVE-2025-40134}
  • smb: client: validate the whole DACL before rewriting it in cifsacl {CVE-2026-31709}
  • PM: runtime: Fix a race condition related to device removal {CVE-2026-23452}
  • ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces {CVE-2026-43436}
  • nvme-pci: Fix race bug in nvme_poll_irqdisable() {CVE-2026-43448}
  • sctp: add mutual exclusion in proc_sctp_do_udp_port() {CVE-2025-22062}
  • cachefiles: fix dentry leak in cachefiles_open_file() {CVE-2024-49870}
  • mm: revert "mm: shmem: fix data-race in shmem_getattr()" {CVE-2024-53136}
  • memcg: fix soft lockup in the OOM process {CVE-2024-57977}
  • resource: fix region_intersects() vs add_memory_driver_managed() {CVE-2024-49878}
  • r8169: add tally counter fields added with RTL8125 {CVE-2024-49973}
  • svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() {CVE-2024-53215}
  • ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths {CVE-2026-43066}
  • wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() {CVE-2025-71273}
  • net: netlink: af_netlink: Prevent empty skb by adding a check on len. {CVE-2021-47606}
  • extcon: Modify extcon device to be created after driver data is set {CVE-2022-49308}
  • tick/nohz: unexport __init-annotated tick_nohz_full_setup() {CVE-2022-49675}
  • bridge:…
Record
CLSA-2026-1783362244
Updated
2026-11-02
OSV No score

Bluetooth: bcsp: receive data only if registered

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: bcsp: receive data only if registered

Currently, bcsp_recv() can be called even when the BCSP protocol has not been registered. This leads to a NULL pointer dereference, as shown in the following stack trace:

KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f]
RIP: 0010:bcsp_recv+0x13d/0x1740 drivers/bluetooth/hci_bcsp.c:590
Call Trace:
 <TASK>
 hci_uart_tty_receive+0x194/0x220 drivers/bluetooth/hci_ldisc.c:627
 tiocsti+0x23c/0x2c0 drivers/tty/tty_io.c:2290
 tty_ioctl+0x626/0xde0 drivers/tty/tty_io.c:2706
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:907 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

To prevent this, ensure that the HCI_UART_REGISTERED flag is set before processing received data. If the protocol is not registered, return -EUNATCH.

Record
CVE-2025-40308
Updated
2026-11-02
OSVDEBIAN-CVE-2025-40308 No score

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bcsp: receive data only if registered Currently, bcsp_recv() can be called even when the BCSP protocol has not been registered. This leads to a NULL pointer dereference, as shown in the following stack trace: KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] RIP: 0010:bcsp_recv+0x13d/0x1740 drivers/bluetooth/hci_bcsp.c:590 Call Trace: <TASK> hci_uart_tty_receive+0x194/0x220 drivers/bluetooth/hci_ldisc.c:627 tiocsti+0x23c/0x2c0 drivers/tty/tty_io.c:2290 tty_ioctl+0x626/0xde0 drivers/tty/tty_io.c:2706 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f To prevent this, ensure that the HCI_UART_REGISTERED flag is set before processing received data. If the protocol is not registered, return -EUNATCH.

Record
DEBIAN-CVE-2025-40308
Updated
2026-11-02
OSVMGASA-2026-0017 No score

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.120 fixes bugs and vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel.

Record
MGASA-2026-0017
Updated
2026-11-02
OSVMGASA-2026-0018 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.120 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2026-0018
Updated
2026-11-02
OSVopenSUSE-SU-2026:20145-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2025-39880: ceph: fix race condition validating r_parent before applying state (bsc#1250388).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
  • CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1254961).
  • CVE-2025-40215: xfrm: delete x->tunnel as we delete x (bsc#1254959).
  • CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (bsc#1254964).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156).
  • CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
  • CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
  • CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
  • CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
  • CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
  • CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (bsc#1254824).
  • CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
  • CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
  • CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
  • CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
  • CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
  • CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
  • CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
  • CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
  • CVE-2025-40330: bnxt_en: Shutdown FW…
Record
openSUSE-SU-2026:20145-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-40308 No score

CVE-2025-40308 in linux - Patched by Root

Root has patched CVE-2025-40308 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2025-40308
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2025-40308 No score

CVE-2025-40308 in linux - Patched by Root

Root has patched CVE-2025-40308 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2025-40308
Updated
2026-11-03
OSVROOT-OS-UBUNTU-2204-CVE-2025-40308 No score

CVE-2025-40308 in linux - Patched by Root

Root has patched CVE-2025-40308 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2025-40308
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2025-40308 No score

CVE-2025-40308 in linux - Patched by Root

Root has patched CVE-2025-40308 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2025-40308
Updated
2026-11-06
OSVSUSE-SU-2026:0278-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
  • CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
  • CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
  • CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
  • CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
  • CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
  • CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
  • CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
  • CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
  • CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
  • CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
  • CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
  • CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
  • CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
  • CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
  • CVE-2025-40287: exfat: fix improper check of dentry.stream.valid_size (bsc#1255030).
  • CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM (bsc#1255042).
  • CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
  • CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
  • CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187). -…
Record
SUSE-SU-2026:0278-1
Updated
2026-11-02
OSVSUSE-SU-2026:0281-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
  • CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
  • CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
  • CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
  • CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
  • CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
  • CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
  • CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
  • CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
  • CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
  • CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
  • CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
  • CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
  • CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
  • CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
  • CVE-2025-40287: exfat: fix improper check of dentry.stream.valid_size (bsc#1255030).
  • CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM (bsc#1255042).
  • CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
  • CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
  • CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187). -…
Record
SUSE-SU-2026:0281-1
Updated
2026-11-02
OSVSUSE-SU-2026:0293-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
  • CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
  • CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
  • CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
  • CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
  • CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
  • CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
  • CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
  • CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
  • CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
  • CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
  • CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
  • CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
  • CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
  • CVE-2025-40331: sctp: Prevent TOCTOU out-of-bounds write (bsc#1254615).
  • CVE-2025-68259: KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (bsc#1255199).

The following non security issues were fixed:

  • ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (git-fixes).
  • ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (git-fixes).
  • ALSA: dice: fix buffer overflow in detect_stream_formats() (git-fixes).
  • ALSA: firewire-motu: add bounds check in put_user loop for DSP events (git-fixes).
  • ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (git-fixes).
  • ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() (git-fixes).
  • ALSA: uapi: Fix typo in asound.h comment (git-fixes).
  • ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 (stable-fixes).
  • ASoC: Intel: catpt: Fix error path in hw_params() (git-fixes).
  • ASoC: ak4458: Disable regulator when error happens (git-fixes).
  • ASoC: ak5558: Disable regulator when error happens (git-fixes).
  • ASoC: codecs: wcd938x: fix OF node leaks on probe failure (git-fixes).
  • ASoC: fsl_xcvr: clear the channel status control memory (git-fixes).
  • ASoC: qcom: q6adm: the the copp device only during last instance (git-fixes).
  • ASoC: qcom: q6asm-dai: perform correct state check before closing (git-fixes).
  • ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment…
Record
SUSE-SU-2026:0293-1
Updated
2026-11-02
OSVSUSE-SU-2026:0315-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
  • CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
  • CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
  • CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
  • CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
  • CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
  • CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
  • CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
  • CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
  • CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
  • CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
  • CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
  • CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
  • CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
  • CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
  • CVE-2025-40287: exfat: fix improper check of dentry.stream.valid_size (bsc#1255030).
  • CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM (bsc#1255042).
  • CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
  • CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
  • CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187). -…
Record
SUSE-SU-2026:0315-1
Updated
2026-11-02
OSVSUSE-SU-2026:0316-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-49604,CVE-2025-40074: ip: Fix data-races around sysctl_ip_fwd_use_pmtu (bsc#1238414 bsc#1252794).
  • CVE-2022-50527: drm/amdgpu: Fix size validation for non-exclusive domains (v4) (bsc#1251738).
  • CVE-2022-50625: serial: amba-pl011: avoid SBSA UART accessing DMACR register (bsc#1254559).
  • CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785).
  • CVE-2022-50656: nfc: pn533: Clear nfc_target before being used (bsc#1254745).
  • CVE-2022-50678: wifi: brcmfmac: fix invalid address access when enabling SCAN log level (bsc#1254902).
  • CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255576).
  • CVE-2023-53454: HID: multitouch: Correct devm device reference for hidinput input_dev name (bsc#1250759).
  • CVE-2023-53718: ring-buffer: Do not swap cpu_buffer during resize process (bsc#1252564).
  • CVE-2023-53748: media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue_setup (bsc#1254907).
  • CVE-2023-53765: dm cache: free background tracker's queued work in btracker_destroy (bsc#1254912).
  • CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler() (bsc#1254751).
  • CVE-2023-53788: ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (bsc#1254917).
  • CVE-2023-53819: amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (bsc#1254712).
  • CVE-2023-53850: iavf: use internal state to free traffic IRQs (bsc#1254677).
  • CVE-2023-54120: Bluetooth: Fix race condition in hidp_session_thread (bsc#1256133).
  • CVE-2023-54214: Bluetooth: L2CAP: Fix potential user-after-free (bsc#1255954).
  • CVE-2023-54236: net/net_failover: fix txq exceeding warning (bsc#1255922).
  • CVE-2023-54286: wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (bsc#1255803).
  • CVE-2023-54300: wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (bsc#1255790).
  • CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431 bsc#1245499).
  • CVE-2025-38336: ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 (bsc#1246370).
  • CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
  • CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
  • CVE-2025-40035: Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak (bsc#1252866).
  • CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
  • CVE-2025-40064: smc: Fix use-after-free in __pnet_find_base_ndev() (bsc#1252845).
  • CVE-2025-40075: tcp_metrics: use dst_dev_net_rcu() (bsc#1252795).
  • CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
  • CVE-2025-40110: drm/vmwgfx: Fix a null-ptr access in the cursor snooper (bsc#1253275).
  • CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
  • CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
  • CVE-2025-40139: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set() (bsc#1253409).
  • CVE-2025-40149: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock() (bsc#1253355).
  • CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
  • CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40164: usbnet: Fix using smp_processor_id() in preemptible code warnings (bsc#1253407).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40168: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match() (bsc#1253427).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
  • CVE-2025-40198: ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() (bsc#1253453). -…
Record
SUSE-SU-2026:0316-1
Updated
2026-11-02
OSVSUSE-SU-2026:20207-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2025-39880: ceph: fix race condition validating r_parent before applying state (bsc#1250388).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
  • CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1254961).
  • CVE-2025-40215: xfrm: delete x->tunnel as we delete x (bsc#1254959).
  • CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (bsc#1254964).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156).
  • CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
  • CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
  • CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
  • CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
  • CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
  • CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (bsc#1254824).
  • CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
  • CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
  • CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
  • CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
  • CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
  • CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
  • CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
  • CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
  • CVE-2025-40330: bnxt_en: Shutdown FW…
Record
SUSE-SU-2026:20207-1
Updated
2026-11-02
OSVSUSE-SU-2026:20220-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2025-39880: ceph: fix race condition validating r_parent before applying state (bsc#1250388).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
  • CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1254961).
  • CVE-2025-40215: xfrm: delete x->tunnel as we delete x (bsc#1254959).
  • CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (bsc#1254964).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156).
  • CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
  • CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
  • CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
  • CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
  • CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
  • CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (bsc#1254824).
  • CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
  • CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
  • CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
  • CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
  • CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
  • CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
  • CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
  • CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
  • CVE-2025-40330: bnxt_en: Shutdown FW…
Record
SUSE-SU-2026:20220-1
Updated
2026-11-02
OSVSUSE-SU-2026:20228-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2025-39880: ceph: fix race condition validating r_parent before applying state (bsc#1250388).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
  • CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1254961).
  • CVE-2025-40215: xfrm: delete x->tunnel as we delete x (bsc#1254959).
  • CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (bsc#1254964).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156).
  • CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
  • CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
  • CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
  • CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
  • CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
  • CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (bsc#1254824).
  • CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
  • CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
  • CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
  • CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
  • CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
  • CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
  • CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
  • CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
  • CVE-2025-40330: bnxt_en: Shutdown FW…
Record
SUSE-SU-2026:20228-1
Updated
2026-11-02
OSVSUSE-SU-2026:20477-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
  • CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
  • CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
  • CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
  • CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
  • CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
  • CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
  • CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
  • CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
  • CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
  • CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
  • CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
  • CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
  • CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
  • CVE-2025-40271: fs/proc: fix uaf in…
Record
SUSE-SU-2026:20477-1
Updated
2026-11-02
OSVSUSE-SU-2026:20498-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280).
  • CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
  • CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
  • CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
  • CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
  • CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
  • CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
  • CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
  • CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
  • CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
  • CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
  • CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
  • CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
  • CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
  • CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839).
  • CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
  • CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
  • CVE-2025-40271: fs/proc: fix uaf in…
Record
SUSE-SU-2026:20498-1
Updated
2026-11-02
OSVSUSE-SU-2026:20564-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408).
  • CVE-2025-39880: ceph: fix race condition validating r_parent before applying state (bsc#1250388).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
  • CVE-2025-40130: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1254961).
  • CVE-2025-40215: xfrm: delete x->tunnel as we delete x (bsc#1254959).
  • CVE-2025-40218: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success (bsc#1254964).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40237: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40239: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40246: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40255: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156).
  • CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
  • CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
  • CVE-2025-40268: cifs: client: fix memory leak in smb3_fs_context_parse_param (bsc#1255082).
  • CVE-2025-40271: fs/proc: fix uaf in proc_readdir_de() (bsc#1255297).
  • CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
  • CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (bsc#1254824).
  • CVE-2025-40278: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (bsc#1254825).
  • CVE-2025-40279: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (bsc#1254846).
  • CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
  • CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
  • CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
  • CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
  • CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
  • CVE-2025-40328: smb: client: fix potential UAF in smb2_close_cached_fid() (bsc#1254624).
  • CVE-2025-40330: bnxt_en: Shutdown FW…
Record
SUSE-SU-2026:20564-1
Updated
2026-11-02
OSVSUSE-SU-2026:20845-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
  • CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
  • CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
  • CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
  • CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
  • CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
  • CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
  • CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
  • CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
  • CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
  • CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
  • CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
  • CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
  • CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
  • CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40192: Revert "ipmi: fix msg stack when IPMI is disconnected" (bsc#1253622).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer()…
Record
SUSE-SU-2026:20845-1
Updated
2026-11-02
OSVSUSE-SU-2026:20876-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
  • CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
  • CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
  • CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
  • CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
  • CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
  • CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
  • CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
  • CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
  • CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
  • CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
  • CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
  • CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
  • CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
  • CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
  • CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
  • CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
  • CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
  • CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
  • CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
  • CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
  • CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
  • CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
  • CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
  • CVE-2025-40192: Revert "ipmi: fix msg stack when IPMI is disconnected" (bsc#1253622).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
  • CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
  • CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
  • CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
  • CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
  • CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer()…
Record
SUSE-SU-2026:20876-1
Updated
2026-11-02
OSVUSN-8029-1 No score

linux, linux-raspi, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Device frequency scaling framework;
  • ARM SCMI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • Hardware monitoring drivers;
  • HW tracing;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • PCI Endpoint Test driver;
  • VMware Balloon Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • Mellanox platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • SPI subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • BPF subsystem;
  • Mellanox drivers;
  • Memory management;
  • Virtio network driver;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • io_uring subsystem;
  • Kernel crash support code;
  • Perf events;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer subsystem;
  • Tracing infrastructure;
  • 9P file system network protocol;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • ALSA framework;
  • HD-audio driver;
  • AMD SoC Alsa drivers;
  • WCD audio codecs;
  • Intel ASoC drivers;
  • USB sound devices;
  • KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056, CVE-2025-40057,…
Record
USN-8029-1
Updated
2026-11-03
OSVUSN-8029-2 No score

linux-aws, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Device frequency scaling framework;
  • ARM SCMI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • Hardware monitoring drivers;
  • HW tracing;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • PCI Endpoint Test driver;
  • VMware Balloon Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • Mellanox platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • SPI subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • BPF subsystem;
  • Mellanox drivers;
  • Memory management;
  • Virtio network driver;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • io_uring subsystem;
  • Kernel crash support code;
  • Perf events;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer subsystem;
  • Tracing infrastructure;
  • 9P file system network protocol;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • ALSA framework;
  • HD-audio driver;
  • AMD SoC Alsa drivers;
  • WCD audio codecs;
  • Intel ASoC drivers;
  • USB sound devices;
  • KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056, CVE-2025-40057,…
Record
USN-8029-2
Updated
2026-11-03
OSVUSN-8029-3 No score

linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Device frequency scaling framework;
  • ARM SCMI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • Hardware monitoring drivers;
  • HW tracing;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • PCI Endpoint Test driver;
  • VMware Balloon Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • Mellanox platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • SPI subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • BPF subsystem;
  • Mellanox drivers;
  • Memory management;
  • Virtio network driver;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • io_uring subsystem;
  • Kernel crash support code;
  • Perf events;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer subsystem;
  • Tracing infrastructure;
  • 9P file system network protocol;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • ALSA framework;
  • HD-audio driver;
  • AMD SoC Alsa drivers;
  • WCD audio codecs;
  • Intel ASoC drivers;
  • USB sound devices;
  • KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056, CVE-2025-40057,…
Record
USN-8029-3
Updated
2026-11-03
OSVUSN-8030-1 No score

linux-gcp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Device frequency scaling framework;
  • ARM SCMI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • Hardware monitoring drivers;
  • HW tracing;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • PCI Endpoint Test driver;
  • VMware Balloon Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • Mellanox platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • SPI subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • BPF subsystem;
  • Mellanox drivers;
  • Memory management;
  • Virtio network driver;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • io_uring subsystem;
  • Kernel crash support code;
  • Perf events;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer subsystem;
  • Tracing infrastructure;
  • 9P file system network protocol;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • ALSA framework;
  • HD-audio driver;
  • AMD SoC Alsa drivers;
  • WCD audio codecs;
  • Intel ASoC drivers;
  • USB sound devices;
  • KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056, CVE-2025-40057,…
Record
USN-8030-1
Updated
2026-11-03
OSVUSN-8048-1 No score

linux-oem-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • CXL (Compute Express Link) drivers;
  • Device frequency scaling framework;
  • ARM SCMI message protocol;
  • GPIO subsystem;
  • GPU drivers;
  • Hardware monitoring drivers;
  • HW tracing;
  • InfiniBand drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • PCI Endpoint Test driver;
  • VMware Balloon Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVME drivers;
  • PCI subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • Mellanox platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • SCSI subsystem;
  • SPI subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • vDPA drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • BPF subsystem;
  • Mellanox drivers;
  • Memory management;
  • Virtio network driver;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • io_uring subsystem;
  • Kernel crash support code;
  • Perf events;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer subsystem;
  • Tracing infrastructure;
  • 9P file system network protocol;
  • Ethernet bridge;
  • Networking core;
  • IPv4 networking;
  • IPv6 networking;
  • Multipath TCP;
  • Netfilter;
  • NFC subsystem;
  • Network traffic control;
  • SCTP protocol;
  • SMC sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • TLS protocol;
  • VMware vSockets driver;
  • eXpress Data Path;
  • XFRM subsystem;
  • Integrity Measurement Architecture(IMA) framework;
  • ALSA framework;
  • HD-audio driver;
  • AMD SoC Alsa drivers;
  • WCD audio codecs;
  • Intel ASoC drivers;
  • USB sound devices;
  • KVM subsystem; (CVE-2025-40001, CVE-2025-40002, CVE-2025-40003, CVE-2025-40004, CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033, CVE-2025-40034, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038, CVE-2025-40039, CVE-2025-40040, CVE-2025-40041, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40045, CVE-2025-40046, CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40050, CVE-2025-40051, CVE-2025-40052, CVE-2025-40053, CVE-2025-40054, CVE-2025-40055, CVE-2025-40056,…
Record
USN-8048-1
Updated
2026-11-03
OSVUSN-8095-1 No score

linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-1
Updated
2026-11-03
OSVUSN-8095-2 No score

linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-2
Updated
2026-11-03
OSVUSN-8095-3 No score

linux-realtime, linux-realtime-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-3
Updated
2026-11-03
OSVUSN-8095-4 No score

linux-aws-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-4
Updated
2026-11-03
OSVUSN-8095-5 No score

linux-raspi, linux-raspi-realtime vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation;
  • Timer…
Record
USN-8095-5
Updated
2026-11-03
OSVUSN-8096-1 No score

linux, linux-aws, linux-gcp, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-xilinx-zynqmp vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Tablet) drivers;
  • ISDN/mISDN subsystem;
  • Macintosh device drivers;
  • Media drivers;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVME drivers;
  • PA-RISC drivers;
  • PCI subsystem;
  • Chrome hardware platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Watchdog drivers;
  • BFS file system;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • SMB network file system;
  • XFS file system;
  • BPF subsystem;
  • Ethernet bridge;
  • Memory management;
  • Network traffic control;
  • io_uring subsystem;
  • Locking primitives;
  • Scheduler infrastructure;
  • Shadow Call Stack mechanism;
  • Tracing infrastructure;
  • Bluetooth subsystem;
  • CAIF protocol;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • Ethtool driver;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • SCTP protocol;
  • Network sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • Wireless networking;
  • Rust bindings mechanism;
  • Integrity Measurement Architecture(IMA) framework;
  • Key management;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • Turtle Beach Wavefront ALSA driver;
  • STMicroelectronics SoC drivers;
  • USB sound devices; (CVE-2022-49465, CVE-2024-36903, CVE-2024-36927, CVE-2024-37354, CVE-2024-41014, CVE-2024-46830, CVE-2024-47666, CVE-2024-49968, CVE-2025-22022, CVE-2025-22111, CVE-2025-22121, CVE-2025-38022, CVE-2025-38129, CVE-2025-38556, CVE-2025-40040, CVE-2025-40083, CVE-2025-40110, CVE-2025-40211, CVE-2025-40248, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40261, CVE-2025-40262,…
Record
USN-8096-1
Updated
2026-11-04
OSVUSN-8096-2 No score

linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Tablet) drivers;
  • ISDN/mISDN subsystem;
  • Macintosh device drivers;
  • Media drivers;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVME drivers;
  • PA-RISC drivers;
  • PCI subsystem;
  • Chrome hardware platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Watchdog drivers;
  • BFS file system;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • SMB network file system;
  • XFS file system;
  • BPF subsystem;
  • Ethernet bridge;
  • Memory management;
  • Network traffic control;
  • io_uring subsystem;
  • Locking primitives;
  • Scheduler infrastructure;
  • Shadow Call Stack mechanism;
  • Tracing infrastructure;
  • Bluetooth subsystem;
  • CAIF protocol;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • Ethtool driver;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • SCTP protocol;
  • Network sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • Wireless networking;
  • Rust bindings mechanism;
  • Integrity Measurement Architecture(IMA) framework;
  • Key management;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • Turtle Beach Wavefront ALSA driver;
  • STMicroelectronics SoC drivers;
  • USB sound devices; (CVE-2022-49465, CVE-2024-36903, CVE-2024-36927, CVE-2024-37354, CVE-2024-41014, CVE-2024-46830, CVE-2024-47666, CVE-2024-49968, CVE-2025-22022, CVE-2025-22111, CVE-2025-22121, CVE-2025-38022, CVE-2025-38129, CVE-2025-38556, CVE-2025-40040, CVE-2025-40083, CVE-2025-40110, CVE-2025-40211, CVE-2025-40248, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40261, CVE-2025-40262,…
Record
USN-8096-2
Updated
2026-11-04
OSVUSN-8096-3 No score

linux-aws-5.15, linux-gcp-5.15, linux-gke, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Tablet) drivers;
  • ISDN/mISDN subsystem;
  • Macintosh device drivers;
  • Media drivers;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVME drivers;
  • PA-RISC drivers;
  • PCI subsystem;
  • Chrome hardware platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Watchdog drivers;
  • BFS file system;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • SMB network file system;
  • XFS file system;
  • BPF subsystem;
  • Ethernet bridge;
  • Memory management;
  • Network traffic control;
  • io_uring subsystem;
  • Locking primitives;
  • Scheduler infrastructure;
  • Shadow Call Stack mechanism;
  • Tracing infrastructure;
  • Bluetooth subsystem;
  • CAIF protocol;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • Ethtool driver;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • SCTP protocol;
  • Network sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • Wireless networking;
  • Rust bindings mechanism;
  • Integrity Measurement Architecture(IMA) framework;
  • Key management;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • Turtle Beach Wavefront ALSA driver;
  • STMicroelectronics SoC drivers;
  • USB sound devices; (CVE-2022-49465, CVE-2024-36903, CVE-2024-36927, CVE-2024-37354, CVE-2024-41014, CVE-2024-46830, CVE-2024-47666, CVE-2024-49968, CVE-2025-22022, CVE-2025-22111, CVE-2025-22121, CVE-2025-38022, CVE-2025-38129, CVE-2025-38556, CVE-2025-40040, CVE-2025-40083, CVE-2025-40110, CVE-2025-40211, CVE-2025-40248, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40261, CVE-2025-40262,…
Record
USN-8096-3
Updated
2026-11-04
OSVUSN-8096-4 No score

linux-realtime vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Tablet) drivers;
  • ISDN/mISDN subsystem;
  • Macintosh device drivers;
  • Media drivers;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVME drivers;
  • PA-RISC drivers;
  • PCI subsystem;
  • Chrome hardware platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Watchdog drivers;
  • BFS file system;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • SMB network file system;
  • XFS file system;
  • BPF subsystem;
  • Ethernet bridge;
  • Memory management;
  • Network traffic control;
  • io_uring subsystem;
  • Locking primitives;
  • Scheduler infrastructure;
  • Shadow Call Stack mechanism;
  • Tracing infrastructure;
  • Bluetooth subsystem;
  • CAIF protocol;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • Ethtool driver;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • SCTP protocol;
  • Network sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • Wireless networking;
  • Rust bindings mechanism;
  • Integrity Measurement Architecture(IMA) framework;
  • Key management;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • Turtle Beach Wavefront ALSA driver;
  • STMicroelectronics SoC drivers;
  • USB sound devices; (CVE-2022-49465, CVE-2024-36903, CVE-2024-36927, CVE-2024-37354, CVE-2024-41014, CVE-2024-46830, CVE-2024-47666, CVE-2024-49968, CVE-2025-22022, CVE-2025-22111, CVE-2025-22121, CVE-2025-38022, CVE-2025-38129, CVE-2025-38556, CVE-2025-40040, CVE-2025-40083, CVE-2025-40110, CVE-2025-40211, CVE-2025-40248, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40261, CVE-2025-40262,…
Record
USN-8096-4
Updated
2026-11-04
OSVUSN-8096-5 No score

linux-nvidia-tegra-igx vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Tablet) drivers;
  • ISDN/mISDN subsystem;
  • Macintosh device drivers;
  • Media drivers;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVME drivers;
  • PA-RISC drivers;
  • PCI subsystem;
  • Chrome hardware platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Watchdog drivers;
  • BFS file system;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • SMB network file system;
  • XFS file system;
  • BPF subsystem;
  • Ethernet bridge;
  • Memory management;
  • Network traffic control;
  • io_uring subsystem;
  • Locking primitives;
  • Scheduler infrastructure;
  • Shadow Call Stack mechanism;
  • Tracing infrastructure;
  • Bluetooth subsystem;
  • CAIF protocol;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • Ethtool driver;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • SCTP protocol;
  • Network sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • Wireless networking;
  • Rust bindings mechanism;
  • Integrity Measurement Architecture(IMA) framework;
  • Key management;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • Turtle Beach Wavefront ALSA driver;
  • STMicroelectronics SoC drivers;
  • USB sound devices; (CVE-2022-49465, CVE-2024-36903, CVE-2024-36927, CVE-2024-37354, CVE-2024-41014, CVE-2024-46830, CVE-2024-47666, CVE-2024-49968, CVE-2025-22022, CVE-2025-22111, CVE-2025-22121, CVE-2025-38022, CVE-2025-38129, CVE-2025-38556, CVE-2025-40040, CVE-2025-40083, CVE-2025-40110, CVE-2025-40211, CVE-2025-40248, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40261, CVE-2025-40262,…
Record
USN-8096-5
Updated
2026-11-04
OSVUSN-8100-1 No score

linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM64 architecture;
  • MIPS architecture;
  • Nios II architecture;
  • PA-RISC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • Sun Sparc architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Xtensa architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Block device driver;
  • Network block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Hardware random number generator core;
  • Character device driver;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • DMA engine subsystem;
  • ARM SCMI message protocol;
  • EFI core;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • CoreSight HW tracing drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • Input Device (Tablet) drivers;
  • IOMMU subsystem;
  • ISDN/mISDN subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • NVME drivers;
  • PCI subsystem;
  • PCCARD (PCMCIA/CardBus) bus subsystem;
  • Performance monitor drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • ARM PM domains;
  • PPS (Pulse Per Second) driver;
  • PTP clock framework;
  • PWM drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • Virtio Host (VHOST) subsystem;
  • Framebuffer layer;
  • Xen hypervisor drivers;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • File systems infrastructure;
  • EFI Variable file system;
  • exFAT file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS file system;
  • HFS+ file system;
  • HugeTLB file system;
  • JFS file system;
  • KERNFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • Diskquota system;
  • SMB network file system;
  • SquashFS file system;
  • UDF file system;
  • XFS file system;
  • Asynchronous Transfer Mode (ATM) subsystem;
  • BPF subsystem;
  • Mellanox drivers;
  • NFS page cache wrapper;
  • Memory management;
  • Memory Management;
  • Media input infrastructure;
  • Bluetooth subsystem;
  • IP tunnels definitions;
  • Network traffic control;
  • Rose network layer;
  • Network sockets;
  • io_uring subsystem;
  • Control group (cgroup);
  • Kernel crash support code;
  • Kernel futex primitives;
  • PID allocator;
  • Scheduler infrastructure;
  • Syscalls implementation; …
Record
USN-8100-1
Updated
2026-11-04
OSVUSN-8116-1 No score

linux-intel-iot-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • PowerPC architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • ACPI drivers;
  • ATM drivers;
  • Drivers core;
  • Network block device driver;
  • Bluetooth drivers;
  • Character device driver;
  • TPM device driver;
  • Data acquisition framework and drivers;
  • Counter interface drivers;
  • CPU frequency scaling framework;
  • Intel Stratix 10 firmware drivers;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Tablet) drivers;
  • ISDN/mISDN subsystem;
  • Macintosh device drivers;
  • Media drivers;
  • MOST (Media Oriented Systems Transport) drivers;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • Texas Instruments network drivers;
  • Ethernet team driver;
  • MediaTek network drivers;
  • NVME drivers;
  • PA-RISC drivers;
  • PCI subsystem;
  • Chrome hardware platform drivers;
  • x86 platform drivers;
  • ARM PM domains;
  • Voltage and Current Regulator drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • Texas Instruments SoC drivers;
  • SPI subsystem;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Cadence USB3 driver;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Mass Storage drivers;
  • USB Type-C Connector System Software Interface driver;
  • Backlight driver;
  • Framebuffer layer;
  • Watchdog drivers;
  • BFS file system;
  • BTRFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • HFS+ file system;
  • Journaling layer for block devices (JBD2);
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • OrangeFS file system;
  • Proc file system;
  • SMB network file system;
  • XFS file system;
  • BPF subsystem;
  • Ethernet bridge;
  • Memory management;
  • Network traffic control;
  • io_uring subsystem;
  • Locking primitives;
  • Scheduler infrastructure;
  • Shadow Call Stack mechanism;
  • Tracing infrastructure;
  • Bluetooth subsystem;
  • CAIF protocol;
  • CAN network layer;
  • Ceph Core library;
  • Networking core;
  • Ethtool driver;
  • HSR network protocol;
  • IPv4 networking;
  • IPv6 networking;
  • MAC80211 subsystem;
  • Multipath TCP;
  • Netfilter;
  • NET/ROM layer;
  • NFC subsystem;
  • Open vSwitch;
  • Rose network layer;
  • SCTP protocol;
  • Network sockets;
  • Sun RPC protocol;
  • TIPC protocol;
  • VMware vSockets driver;
  • Wireless networking;
  • Rust bindings mechanism;
  • Integrity Measurement Architecture(IMA) framework;
  • Key management;
  • Simplified Mandatory Access Control Kernel framework;
  • FireWire sound drivers;
  • Turtle Beach Wavefront ALSA driver;
  • STMicroelectronics SoC drivers;
  • USB sound devices; (CVE-2022-49465, CVE-2024-36903, CVE-2024-36927, CVE-2024-37354, CVE-2024-41014, CVE-2024-46830, CVE-2024-47666, CVE-2024-49968, CVE-2025-22022, CVE-2025-22111, CVE-2025-22121, CVE-2025-38022, CVE-2025-38129, CVE-2025-38556, CVE-2025-40040, CVE-2025-40083, CVE-2025-40110, CVE-2025-40211, CVE-2025-40248, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40261, CVE-2025-40262, CVE-2025-40263, CVE-2025-40264, CVE-2025-40269, CVE-2025-40271, CVE-2025-40272, CVE-2025-40273, CVE-2025-40275, CVE-2025-40277, CVE-2025-40278, CVE-2025-40279, CVE-2025-40280, CVE-2025-40281, CVE-2025-40282, CVE-2025-40283, CVE-2025-40304, CVE-2025-40306, CVE-2025-40308, CVE-2025-40309, CVE-2025-40312, CVE-2025-40313, CVE-2025-40314, CVE-2025-40315, CVE-2025-40317,…
Record
USN-8116-1
Updated
2026-11-04

Affected products

Affected packages

Affected packages
PackageAffectedFixed
linux-lts
Alpaquita:23
 6.1.158-r0 up to 6.1.159-r0
6.1.159-r0
linux-lts
Alpaquita:25
 6.12.57-r0 up to 6.12.58-r0
6.12.58-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
kernel-uek
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
kernel-uek-container
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
kernel-uek-container-debug
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
kernel-uek-debug
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
kernel-uek-debug-devel
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
kernel-uek-devel
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-uek-headers
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
kernel-uek-tools
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
perf
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
python-perf
TuxCare:OracleLinux:7
From an advisory covering 43 CVEs
 before 5.4.17-2136.352.5.el7uek.tuxcare.els1
5.4.17-2136.352.5.el7uek.tuxcare.els1
linux-buildinfo-5.4.0-226-tuxcare.els8-generic
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-buildinfo-5.4.0-226-tuxcare.els8-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-cloud-tools-5.4.0-226-tuxcare.els8
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-cloud-tools-5.4.0-226-tuxcare.els8-generic
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-cloud-tools-5.4.0-226-tuxcare.els8-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-cloud-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-doc
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-headers-5.4.0-226-tuxcare.els8
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-headers-5.4.0-226-tuxcare.els8-generic
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-headers-5.4.0-226-tuxcare.els8-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-image-unsigned-5.4.0-226-tuxcare.els8-generic
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-image-unsigned-5.4.0-226-tuxcare.els8-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-libc-dev
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-modules-5.4.0-226-tuxcare.els8-generic
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-modules-5.4.0-226-tuxcare.els8-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-modules-extra-5.4.0-226-tuxcare.els8-generic
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-source-5.4.0
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-tools-5.4.0-226-tuxcare.els8
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-tools-5.4.0-226-tuxcare.els8-generic
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-tools-5.4.0-226-tuxcare.els8-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
linux-tools-host
TuxCare:Ubuntu:20.04
From an advisory covering 95 CVEs
 before 5.4.0-226.246
5.4.0-226.246
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-abi-stablelists
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-cross-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-debug-uki-virt-addons
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-doc
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
kernel-rt-64k-debug-kvm
TuxCare:AlmaLinux:9.6
From an advisory covering 141 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els5
5.14.0-570.62.1.el9_6.tuxcare.5.els5
Kernel
Linux
 before 5.4.302, 5.5.0 up to 5.10.247, 5.11.0 up to 5.15.197, 5.16.0 up to 6.1.159, 6.2.0 up to 6.6.117, 6.7.0 up to 6.12.58, 6.13.0 up to 6.17.8
5.4.3025.10.2475.15.1976.1.1596.6.1176.12.586.17.8
linux
Debian:12
 before 6.1.159-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 40 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.159-1
linux
Debian:13
 before 6.12.63-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-1~bpo12+1
6.12.63-1
linux
Debian:14
 before 6.17.8-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp16.14.5-1~exp1
6.17.8-1
linux
Debian:11
From an advisory covering 135 CVEs
 before 5.10.247-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 42 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.234-15.10.237-15.10.244-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.247-1
linux-6.1
Debian:11
From an advisory covering 114 CVEs
 before 6.1.159-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1
Show 8 moreShow less
6.1.128-1~deb11u16.1.129-1~deb11u16.1.137-1~deb11u16.1.140-1~deb11u16.1.147-1~deb11u16.1.148-1~deb11u16.1.153-1~deb11u16.1.158-1~deb11u1
6.1.159-1~deb11u1
kernel
Mageia:9
From an advisory covering 236 CVEs
 before 6.6.120-1.mga9
6.6.120-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 236 CVEs
 before 7.1.14-14.mga9
7.1.14-14.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 236 CVEs
 before 3.24-88.mga9
3.24-88.mga9
kernel-linus
Mageia:9
From an advisory covering 236 CVEs
 before 6.6.120-1.mga9
6.6.120-1.mga9
kernel
openEuler:24.03-LTS
From an advisory covering 85 CVEs
 before 6.6.0-144.0.0.127.oe2403
6.6.0-144.0.0.127.oe2403
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 122 CVEs
 before 6.6.0-144.0.0.139.oe2403sp1
6.6.0-144.0.0.139.oe2403sp1
kernel
openEuler:24.03-LTS-SP2
From an advisory covering 85 CVEs
 before 6.6.0-144.0.0.140.oe2403sp2
6.6.0-144.0.0.140.oe2403sp2
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
rootio-linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-livepatch-SLE15-SP7-RT_Update_8
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 395 CVEs
 before 1-150700.1.3.1
1-150700.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.7.28.1
6.4.0-150700.7.28.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.7.28.1
6.4.0-150700.7.28.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.7.28.1
6.4.0-150700.7.28.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.20.24.1
6.4.0-150700.20.24.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.20.24.1
6.4.0-150700.20.24.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.20.24.1
6.4.0-150700.20.24.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-livepatch-SLE15-SP6_Update_19
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 334 CVEs
 before 1-150600.13.3.1
1-150600.13.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-default
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1.150600.12.38.1
6.4.0-150600.23.84.1.150600.12.38.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-source
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1.150600.12.38.1
6.4.0-150600.23.84.1.150600.12.38.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1.150600.12.38.1
6.4.0-150600.23.84.1.150600.12.38.1
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 334 CVEs
 before 6.4.0-150600.23.84.1
6.4.0-150600.23.84.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.53.28.1
6.4.0-150700.53.28.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.53.28.1
6.4.0-150700.53.28.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.53.28.1.150700.17.19.1
6.4.0-150700.53.28.1.150700.17.19.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.53.28.1
6.4.0-150700.53.28.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.53.28.1
6.4.0-150700.53.28.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.53.28.1
6.4.0-150700.53.28.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.53.28.1
6.4.0-150700.53.28.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.53.28.1
6.4.0-150700.53.28.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.53.28.1
6.4.0-150700.53.28.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.53.28.1
6.4.0-150700.53.28.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.53.28.1
6.4.0-150700.53.28.1
kernel-livepatch-SLE15-SP7_Update_8
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 395 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.53.28.1
6.4.0-150700.53.28.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 395 CVEs
 before 6.4.0-150700.53.28.1
6.4.0-150700.53.28.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 143 CVEs
 before 4.12.14-122.290.1
4.12.14-122.290.1
kgraft-patch-SLE12-SP5_Update_76
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 143 CVEs
 before 1-8.7.1
1-8.7.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 143 CVEs
 before 4.12.14-122.290.1
4.12.14-122.290.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 143 CVEs
 before 4.12.14-122.290.1
4.12.14-122.290.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 143 CVEs
 before 4.12.14-122.290.1
4.12.14-122.290.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 143 CVEs
 before 4.12.14-122.290.1
4.12.14-122.290.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 143 CVEs
 before 4.12.14-122.290.1
4.12.14-122.290.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 143 CVEs
 before 4.12.14-122.290.1
4.12.14-122.290.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1.160000.2.6
6.12.0-160000.9.1.160000.2.6
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1.160000.2.6
6.12.0-160000.9.1.160000.2.6
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1.160000.2.6
6.12.0-160000.9.1.160000.2.6
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 524 CVEs
 before 6.4.0-39.1
6.4.0-39.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 524 CVEs
 before 6.4.0-39.1.21.16
6.4.0-39.1.21.16
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 524 CVEs
 before 6.4.0-39.1
6.4.0-39.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 524 CVEs
 before 6.4.0-39.1
6.4.0-39.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 524 CVEs
 before 6.4.0-39.1
6.4.0-39.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 524 CVEs
 before 6.4.0-39.1.21.16
6.4.0-39.1.21.16
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 524 CVEs
 before 6.4.0-39.1
6.4.0-39.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 524 CVEs
 before 6.4.0-39.1
6.4.0-39.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 655 CVEs
 before 6.4.0-40.1
6.4.0-40.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 655 CVEs
 before 6.4.0-40.1
6.4.0-40.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1103.110~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1103.110~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1110.119~20.04.1, plus listed versions
5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1
5.15.0-1110.119~20.04.1
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1103.112~20.04.1, plus listed versions
5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2
Show 45 moreShow less
5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1
5.15.0-1103.112~20.04.1
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-173.183~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-173.183~20.04.1
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-ibm-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1097.100~20.04.1, plus listed versions
5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1
Show 45 moreShow less
5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1
5.15.0-1097.100~20.04.1
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-intel-iotg-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1098.104~20.04.1, plus listed versions
5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1
Show 45 moreShow less
5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1
5.15.0-1098.104~20.04.1
linux-lowlatency-hwe-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-173.183~20.04.1, plus listed versions
5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1
Show 45 moreShow less
5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1
5.15.0-173.183~20.04.1
linux-nvidia-tegra-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1055.55~20.04.1, plus listed versions
5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1
Show 25 moreShow less
5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.1
5.15.0-1055.55~20.04.1
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1100.106~20.04.1, plus listed versions
5.15.0-1007.9~20.04.15.15.0-1013.17~20.04.15.15.0-1016.20~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.1
Show 45 moreShow less
5.15.0-1019.24~20.04.15.15.0-1021.27~20.04.15.15.0-1022.28~20.04.15.15.0-1025.31~20.04.25.15.0-1027.33~20.04.15.15.0-1029.35~20.04.15.15.0-1030.36~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1041.47~20.04.15.15.0-1042.48~20.04.15.15.0-1044.50~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1047.53~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1053.59~20.04.15.15.0-1054.60~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1074.80~20.04.1
5.15.0-1100.106~20.04.1
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1097.101~20.04.1, plus listed versions
5.15.0-1015.17~20.04.15.15.0-1017.19~20.04.15.15.0-1018.21~20.04.15.15.0-1019.22~20.04.15.15.0-1022.26~20.04.1
Show 45 moreShow less
5.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1029.33~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1032.36~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.25.15.0-1037.41~20.04.25.15.0-1038.42~20.04.25.15.0-1039.43~20.04.25.15.0-1040.44~20.04.35.15.0-1041.45~20.04.15.15.0-1043.47~20.04.15.15.0-1044.48~20.04.15.15.0-1045.49~20.04.15.15.0-1046.50~20.04.15.15.0-1047.51~20.04.15.15.0-1048.52~20.04.15.15.0-1049.53~20.04.25.15.0-1050.54~20.04.15.15.0-1051.55~20.04.15.15.0-1052.56~20.04.15.15.0-1053.57~20.04.15.15.0-1056.60~20.04.15.15.0-1057.61~20.04.15.15.0-1058.62~20.04.15.15.0-1059.63~20.04.15.15.0-1060.64~20.04.15.15.0-1061.65~20.04.15.15.0-1062.66~20.04.15.15.0-1063.67~20.04.15.15.0-1064.68~20.04.15.15.0-1065.69~20.04.15.15.0-1066.70~20.04.15.15.0-1067.71~20.04.15.15.0-1068.72~20.04.15.15.0-1069.73~20.04.15.15.0-1070.74~20.04.15.15.0-1071.75~20.04.15.15.0-1072.76~20.04.1
5.15.0-1097.101~20.04.1
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux
Ubuntu:22.04:LTS
 before 5.15.0-173.183, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
5.15.0-173.183
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws
Ubuntu:22.04:LTS
 before 5.15.0-1103.110, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71
5.15.0-1103.110
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-aws-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1050.53~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 27 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.1
6.8.0-1050.53~22.04.1
linux-azure
Ubuntu:22.04:LTS
 before 5.15.0-1109.118, plus listed versions
5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6
Show 45 moreShow less
5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1056.645.15.0-1057.655.15.0-1058.665.15.0-1059.675.15.0-1060.695.15.0-1061.705.15.0-1063.725.15.0-1064.735.15.0-1066.75
5.15.0-1109.118
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-fde
Ubuntu:22.04:LTS
 before 5.15.0-1109.118.1, plus listed versions
5.15.0-1019.24.15.15.0-1024.30.15.15.0-1029.36.15.15.0-1030.37.15.15.0-1031.38.1
Show 45 moreShow less
5.15.0-1033.40.15.15.0-1034.41.15.15.0-1035.42.15.15.0-1036.43.15.15.0-1037.44.15.15.0-1038.45.15.15.0-1039.46.15.15.0-1041.48.15.15.0-1042.49.15.15.0-1044.51.15.15.0-1045.52.15.15.0-1046.53.15.15.0-1047.54.15.15.0-1049.56.15.15.0-1050.57.15.15.0-1051.59.15.15.0-1052.60.15.15.0-1053.61.15.15.0-1054.62.15.15.0-1056.64.15.15.0-1057.65.15.15.0-1058.66.15.15.0-1059.67.15.15.0-1060.69.15.15.0-1061.70.15.15.0-1063.72.15.15.0-1064.73.15.15.0-1065.74.15.15.0-1067.76.15.15.0-1068.77.15.15.0-1070.79.15.15.0-1071.80.15.15.0-1072.81.15.15.0-1073.82.15.15.0-1076.85.15.15.0-1078.87.15.15.0-1081.90.15.15.0-1082.91.15.15.0-1084.93.15.15.0-1086.95.15.15.0-1087.96.15.15.0-1088.97.15.15.0-1089.98.15.15.0-1090.99.15.15.0-1091.100.1
5.15.0-1109.118.1
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
 None known
linux-azure-fde-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1058.65~22.04.1, plus listed versions
6.8.0-1041.48~22.04.16.8.0-1042.49~22.04.16.8.0-1044.51~22.04.16.8.0-1046.53~22.04.16.8.0-1053.60~22.04.1
6.8.0-1058.65~22.04.1
linux-gcp
Ubuntu:22.04:LTS
 before 5.15.0-1103.112, plus listed versions
5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7
Show 45 moreShow less
5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.245.15.0-1019.255.15.0-1021.285.15.0-1022.295.15.0-1025.325.15.0-1026.335.15.0-1027.345.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1032.405.15.0-1034.425.15.0-1035.435.15.0-1036.445.15.0-1037.455.15.0-1038.465.15.0-1039.475.15.0-1040.485.15.0-1041.495.15.0-1042.505.15.0-1044.525.15.0-1045.535.15.0-1046.545.15.0-1047.555.15.0-1048.565.15.0-1049.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1055.635.15.0-1058.665.15.0-1059.675.15.0-1060.685.15.0-1062.705.15.0-1063.715.15.0-1064.725.15.0-1065.73
5.15.0-1103.112
linux-gcp-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
 None known
linux-gcp-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
 None known
linux-gcp-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1
Show 8 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1
 None known
linux-gcp-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1052.55~22.04.1, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1
Show 29 moreShow less
6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.1
6.8.0-1052.55~22.04.1
linux-gke
Ubuntu:22.04:LTS
 before 5.15.0-1099.105, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.55.15.0-1005.65.15.0-1006.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1010.135.15.0-1011.145.15.0-1014.175.15.0-1015.185.15.0-1016.195.15.0-1017.205.15.0-1019.235.15.0-1020.255.15.0-1023.285.15.0-1024.295.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1036.415.15.0-1037.425.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1041.465.15.0-1042.475.15.0-1044.495.15.0-1045.505.15.0-1046.515.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1054.595.15.0-1057.625.15.0-1058.635.15.0-1059.645.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70
5.15.0-1099.105
linux-gkeop
Ubuntu:22.04:LTS
 before 5.15.0-1086.94, plus listed versions
5.15.0-1001.25.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 45 moreShow less
5.15.0-1007.105.15.0-1008.125.15.0-1011.155.15.0-1012.165.15.0-1013.175.15.0-1015.195.15.0-1016.215.15.0-1017.225.15.0-1018.235.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.285.15.0-1024.295.15.0-1025.305.15.0-1026.315.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.375.15.0-1032.385.15.0-1033.395.15.0-1034.405.15.0-1035.415.15.0-1036.425.15.0-1037.435.15.0-1038.445.15.0-1039.455.15.0-1040.465.15.0-1043.505.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1048.555.15.0-1049.565.15.0-1050.575.15.0-1051.585.15.0-1052.595.15.0-1053.605.15.0-1054.615.15.0-1055.625.15.0-1056.635.15.0-1057.64
5.15.0-1086.94
linux-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
 None known
linux-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1
Show 5 moreShow less
6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1
 None known
linux-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1
Show 8 moreShow less
6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1
 None known
linux-hwe-6.8
Ubuntu:22.04:LTS
 before 6.8.0-106.106~22.04.1, plus listed versions
6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1
Show 23 moreShow less
6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.1
6.8.0-106.106~22.04.1
linux-ibm
Ubuntu:22.04:LTS
 before 5.15.0-1097.100, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.45.15.0-1005.55.15.0-1007.8
Show 45 moreShow less
5.15.0-1009.115.15.0-1010.125.15.0-1012.145.15.0-1013.155.15.0-1015.175.15.0-1017.205.15.0-1018.215.15.0-1021.245.15.0-1022.255.15.0-1023.265.15.0-1025.285.15.0-1026.295.15.0-1027.305.15.0-1028.315.15.0-1029.325.15.0-1030.335.15.0-1031.345.15.0-1032.355.15.0-1033.365.15.0-1034.375.15.0-1035.385.15.0-1036.395.15.0-1037.405.15.0-1038.415.15.0-1040.435.15.0-1041.445.15.0-1042.455.15.0-1043.465.15.0-1044.475.15.0-1045.485.15.0-1046.495.15.0-1047.505.15.0-1048.515.15.0-1049.525.15.0-1050.535.15.0-1053.565.15.0-1054.575.15.0-1055.585.15.0-1056.595.15.0-1057.605.15.0-1058.615.15.0-1059.625.15.0-1060.635.15.0-1061.645.15.0-1062.65
5.15.0-1097.100
linux-ibm-6.8
Ubuntu:22.04:LTS
 before 6.8.0-1049.49~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1
Show 25 moreShow less
6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.1
6.8.0-1049.49~22.04.1
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1.160000.2.6
6.12.0-160000.9.1.160000.2.6
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 215 CVEs
 before 6.12.0-160000.9.1
6.12.0-160000.9.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
factsOSV
affected, severityOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-40308 is a medium vulnerability (CVSS 5.6) in Linux, published December 8, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 9th percentile. Fixed in linux-lts 6.1.159-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 262 package rows, 444 versions, 3,549 references and the rest of 38 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 8 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open