CVE-2025-71231

crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

7.1 HighFix available

What does this mean?

: 7.1v3.1, from NVD
: 0.14%3rd percentile
Fixed in: 6.12.73-r0linux-lts
Published: February 18, 2026
Modified: November 6, 2026
Weakness: CWE-125
Also known as: BELL-CVE-2025-71231CLSA-2026-1786352940DEBIAN-CVE-2025-71231DSA-6141-1EUVD-2025-207667GHSA-mx4x-pxgm-r77wROOT-OS-DEBIAN-11-CVE-2025-71231ROOT-OS-DEBIAN-12-CVE-2025-71231
Show 30 moreShow less
ROOT-OS-UBUNTU-2404-CVE-2025-71231SUSE-SU-2026:0962-1SUSE-SU-2026:1041-1SUSE-SU-2026:1081-1SUSE-SU-2026:1573-1SUSE-SU-2026:20667-1SUSE-SU-2026:20720-1SUSE-SU-2026:20838-1SUSE-SU-2026:20845-1SUSE-SU-2026:20873-1SUSE-SU-2026:20876-1SUSE-SU-2026:20931-1SUSE-SU-2026:21114-1SUSE-SU-2026:21123-1SUSE-SU-2026:21284-1UBUNTU-CVE-2025-71231USN-8492-1USN-8492-2USN-8492-3USN-8492-4USN-8492-5USN-8497-1USN-8498-1USN-8499-1USN-8606-1USN-8607-1USN-8609-1USN-8619-1openSUSE-SU-2026:10387-1openSUSE-SU-2026:20416-1

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

The local variable 'i' is initialized with -EINVAL, but the for loop immediately overwrites it and -EINVAL is never returned.

If no empty compression mode can be found, the function would return the out-of-bounds index IAA_COMP_MODES_MAX, which would cause an invalid array access in add_iaa_compression_mode().

Fix both issues by returning either a valid index or -EINVAL.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: High

Exploit likelihood

0.14%Up 0.1 points since Feb 19, 2026

What each source reports

NVD Score used 7.1

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

The local variable 'i' is initialized with -EINVAL, but the for loop immediately overwrites it and -EINVAL is never returned.

If no empty compression mode can be found, the function would return the out-of-bounds index IAA_COMP_MODES_MAX, which would cause an invalid array access in add_iaa_compression_mode().

Fix both issues by returning either a valid index or -EINVAL.

Record: CVE-2025-71231
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-05

CVE List No score

crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

The local variable 'i' is initialized with -EINVAL, but the for loop immediately overwrites it and -EINVAL is never returned.

If no empty compression mode can be found, the function would return the out-of-bounds index IAA_COMP_MODES_MAX, which would cause an invalid array access in add_iaa_compression_mode().

Fix both issues by returning either a valid index or -EINVAL.

Record: CVE-2025-71231
Updated: 2026-11-05

EUVDEUVD-2025-207667 No score

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

The local variable 'i' is initialized with -EINVAL, but the for loop immediately overwrites it and -EINVAL is never returned.

If no empty compression mode can be found, the function would return the out-of-bounds index IAA_COMP_MODES_MAX, which would cause an invalid array access in add_iaa_compression_mode().

Fix both issues by returning either a valid index or -EINVAL.

Record: EUVD-2025-207667
Updated: 2026-11-05

GitHub AdvisoriesGHSA-mx4x-pxgm-r77w 7.1

In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix out-of...

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

The local variable 'i' is initialized with -EINVAL, but the for loop immediately overwrites it and -EINVAL is never returned.

If no empty compression mode can be found, the function would return the out-of-bounds index IAA_COMP_MODES_MAX, which would cause an invalid array access in add_iaa_compression_mode().

Fix both issues by returning either a valid index or -EINVAL.

Record: GHSA-mx4x-pxgm-r77w
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

OSVBELL-CVE-2025-71231 7.1

Record: BELL-CVE-2025-71231
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2025-71231 7.1

In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode The local variable 'i' is initialized with -EINVAL, but the for loop immediately overwrites it and -EINVAL is never returned. If no empty compression mode can be found, the function would return the out-of-bounds index IAA_COMP_MODES_MAX, which would cause an invalid array access in add_iaa_compression_mode(). Fix both issues by returning either a valid index or -EINVAL.

Record: DEBIAN-CVE-2025-71231
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-06

Show 34 moreShow less

OSVROOT-OS-DEBIAN-11-CVE-2025-71231 6.6

CVE-2025-71231 in linux - Patched by Root

Root has patched CVE-2025-71231 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-11-CVE-2025-71231
CVSS 3.1: 6.6 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2025-71231 6.6

CVE-2025-71231 in linux - Patched by Root

Root has patched CVE-2025-71231 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2025-71231
CVSS 3.1: 6.6 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2404-CVE-2025-71231 6.6

CVE-2025-71231 in linux - Patched by Root

Root has patched CVE-2025-71231 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2025-71231
CVSS 3.1: 6.6 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Updated: 2026-11-06

OSVUBUNTU-CVE-2025-71231 7.1

Record: UBUNTU-CVE-2025-71231
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-04

OSVCLSA-2026-1786352940 No score

kernel: Fix of 148 CVEs

KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level {CVE-2026-63807}
KVM: x86: Check for invalid/obsolete root after making MMU pages available {CVE-2026-64561}
ubi: Fix use-after-free when volume resizing failed {CVE-2023-53271}
ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() {CVE-2025-37912}
wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_tx_check_aggr() {CVE-2026-53318}
dpll: Prevent duplicate registrations {CVE-2026-23129}
pinmux: fix race causing mux_owner NULL with active mux_usecount {CVE-2025-38632}
HID: apple: validate feature-report field count to prevent NULL pointer dereference {CVE-2025-38557}
thunderbolt: Limit XDomain response copy to actual frame size {CVE-2026-53146}
net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery {CVE-2026-43466}
virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false {CVE-2026-31469}
scsi: target: Reset t_task_cdb pointer in error case {CVE-2025-68782}
ubi: ubi_create_volume: Fix use-after-free when volume creation failed {CVE-2022-49388}
drm/xe/reg_sr: Fix leak on xa_store failure {CVE-2026-23418}
ASoC: soc-core: flush delayed work before removing DAIs and widgets {CVE-2026-43459}
md/raid10: wait barrier before returning discard request with REQ_NOWAIT {CVE-2025-40325}
nbd: defer config put in recv_work {CVE-2025-68372}
nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference {CVE-2026-23148}
net: hns3: using the num_tqps in the vf driver to apply for resources {CVE-2025-71064}
net/mlx5e: Disable MACsec offload for uplink representor profile {CVE-2025-38020}
serial: imx: fix tx statemachine deadlock {CVE-2023-52456}
dm-thin: fix metadata refcount underflow {CVE-2026-46107}
net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure {CVE-2026-53229}
drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
usbnet:fix NPE during rx_complete {CVE-2025-22050}
platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it {CVE-2025-21645}
driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() {CVE-2025-21810}
usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916}
ALSA: seq: dummy: fix UMP event stack overread {CVE-2026-53241}
pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled {CVE-2026-31655}
net/mlx5: Bridge, fix the crash caused by LAG state check {CVE-2025-21970}
ALSA: timer: Don't take register_mutex with copy_from/to_user() {CVE-2025-23134}
md/raid5: validate payload size before accessing journal metadata {CVE-2026-46070}
nvmet-fc: move lsop put work to nvmet_fc_ls_req_op {CVE-2025-40171}
iommu: Fix potential memory leak in iopf_queue_remove_device() {CVE-2025-21770}
Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak {CVE-2025-40035}
scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails {CVE-2026-45997}
can: dev: can_set_termination(): allow sleeping GPIOs {CVE-2024-56625}
nvme-tcp: fix the memleak while create new ctrl failed {CVE-2024-56632}
ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() {CVE-2026-46146}
pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains {CVE-2026-23187}
wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path {CVE-2025-22128}
octeon_ep: Fix memory leak in octep_device_setup() {CVE-2026-23160}
pinctrl: check the return value of pinmux_ops::get_function_name() {CVE-2025-40030}
net: tun: fix tun_napi_alloc_frags() {CVE-2024-56372}
wifi: iwlwifi: mvm: clean up ROC on failure {CVE-2025-21906}
ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd {CVE-2025-40275}
dpll: fix xa_alloc_cyclic() error handling {CVE-2025-22016}
usb: usbtmc: Flush anchored URBs in usbtmc_release {CVE-2026-31758}
RDMA/siw: Fix potential NULL pointer dereference in header processing…

Record: CLSA-2026-1786352940
Updated: 2026-11-02

OSV No score

crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode

The local variable 'i' is initialized with -EINVAL, but the for loop immediately overwrites it and -EINVAL is never returned.

If no empty compression mode can be found, the function would return the out-of-bounds index IAA_COMP_MODES_MAX, which would cause an invalid array access in add_iaa_compression_mode().

Fix both issues by returning either a valid index or -EINVAL.

Record: CVE-2025-71231
Updated: 2026-11-07

OSVopenSUSE-SU-2026:10387-1 No score

kernel-devel-6.19.8-1.1 on GA media

These are all security issues fixed in the kernel-devel-6.19.8-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2026:10387-1
Updated: 2026-11-02

OSVopenSUSE-SU-2026:20416-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues.

The following security issues were fixed:

CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40230: mm: prevent poison consumption when splitting THP (bsc#1254817).
CVE-2025-68173: ftrace: Fix softlockup in ftrace_module_enable (bsc#1255311).
CVE-2025-68186: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (bsc#1255144).
CVE-2025-68292: mm/memfd: fix information leak in hugetlb folios (bsc#1255148).
CVE-2025-68295: smb: client: fix memory leak in cifs_construct_tcon() (bsc#1255129).
CVE-2025-68329: tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (bsc#1255490).
CVE-2025-68371: scsi: smartpqi: Fix device resources accessed after device removal (bsc#1255572).
CVE-2025-68745: scsi: qla2xxx: Clear cmds after chip reset (bsc#1255721).
CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (bsc#1256679).
CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
CVE-2025-71134: mm/page_alloc: change all pageblocks migrate type on coalescing (bsc#1256732).
CVE-2025-71161: dm-verity: disable recursive forward error correction (bsc#1257174).
CVE-2025-71184: btrfs: tracepoints: use btrfs_root_id() to get the id of a root (bsc#1257635).
CVE-2025-71193: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend (bsc#1257686).
CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228).
CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209).
CVE-2026-23003: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (bsc#1257246).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).
CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
CVE-2026-23022: idpf: fix memory leak in idpf_vc_core_deinit() (bsc#1257581).
CVE-2026-23023: idpf: fix memory leak in idpf_vport_rel() (bsc#1257556).
CVE-2026-23024: idpf: fix memory leak of flow steer list on rmmod (bsc#1257572).
CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).
CVE-2026-23042: idpf: fix aux device unplugging when rdma is not supported by vport (bsc#1257705).
CVE-2026-23047: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682).
CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718).
CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
CVE-2026-23066: rxrpc: Fix recvmsg() unconditional requeue (bsc#1257726).
CVE-2026-23068: spi: spi-sprd-adi: Fix double free in probe error path (bsc#1257805).
CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
CVE-2026-23070: Octeontx2-af: Add proper checks for fwdata (bsc#1257709).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
CVE-2026-23083: tools: ynl-gen: use big-endian netlink attribute types (bsc#1257745).
CVE-2026-23084:…

Record: openSUSE-SU-2026:20416-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0962-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40201: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
CVE-2025-68283: libceph: replace BUG_ON with bounds check for map->max_osd (bsc#1255379).
CVE-2025-68295: smb: client: fix memory leak in cifs_construct_tcon() (bsc#1255129).
CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
CVE-2025-68736: landlock: Fix handling of disconnected directories (bsc#1255698).
CVE-2025-68778: btrfs: don't log conflicting inode if it's a dir moved in the current transaction (bsc#1256683).
CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (bsc#1256679).
CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
CVE-2025-71113: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (bsc#1256716).
CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
CVE-2025-71126: mptcp: reset fallback status gracefully at disconnect() time (bsc#1256755).
CVE-2025-71148: net/handshake: restore destructor on submit failure (bsc#1257159).
CVE-2025-71184: btrfs: fix NULL dereference on root when tracing inode eviction (bsc#1257635).
CVE-2025-71194: btrfs: fix deadlock in wait_current_trans() due to ignored transaction type (bsc#1257687).
CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228).
CVE-2026-22982: net: mscc: ocelot: Fix crash when adding interface under a lag (bsc#1257179).
CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209).
CVE-2026-23003: geneve: Fix incorrect inner network header offset when innerprotoinherit is set (bsc#1257246).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).
CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
CVE-2026-23023: idpf: fix memory leak in idpf_vport_rel() (bsc#1257556).
CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).
CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718).
CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
CVE-2026-23070: Octeontx2-af: Add proper checks for fwdata (bsc#1257709).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
CVE-2026-23083: fou: Don't allow 0 for FOU_ATTR_IPPROTO (bsc#1257745).
CVE-2026-23084: be2net: Fix NULL pointer…

Record: SUSE-SU-2026:0962-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1041-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
CVE-2025-71113: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (bsc#1256716).
CVE-2025-71231: crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode (bsc#1258424).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258181).
CVE-2026-23141: btrfs: send: check for inline extents in range_is_hole_in_parent() (bsc#1258377).
CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).
CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258518).
CVE-2026-23214: btrfs: reject new transactions if the fs is fully read-only (bsc#1258464).
CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1258850).
CVE-2026-23269: apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1259857).

The following non-security bugs were fixed:

Add bugnumber to existing mana change (bsc#1251971).
Drivers: hv: fix missing kernel-doc description for 'size' in request_arr_init() (git-fixes).
Drivers: hv: remove stale comment (git-fixes).
Drivers: hv: vmbus: Clean up sscanf format specifier in target_cpu_store() (git-fixes).
Drivers: hv: vmbus: Fix sysfs output format for ring buffer index (git-fixes).
Drivers: hv: vmbus: Fix typos in vmbus_drv.c (git-fixes).
PCI: hv: Correct a comment (git-fixes).
PCI: hv: Remove unnecessary flex array in struct pci_packet (git-fixes).
PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
RDMA/mana_ib: Access remote atomic for MRs (bsc#1251135).
RDMA/mana_ib: Add EQ creation for rnic adapter (git-fixes).
RDMA/mana_ib: Add device statistics support (git-fixes).
RDMA/mana_ib: Add device-memory support (git-fixes).
RDMA/mana_ib: Add port statistics support (git-fixes).
RDMA/mana_ib: Add support of 4M, 1G, and 2G pages (git-fixes).
RDMA/mana_ib: Add support of mana_ib for RNIC and ETH nic (git-fixes).
RDMA/mana_ib: Adding and deleting GIDs (git-fixes).
RDMA/mana_ib: Allow registration of DMA-mapped memory in PDs (git-fixes).
RDMA/mana_ib: Configure mac address in RNIC (git-fixes).
RDMA/mana_ib: Create and destroy RC QP (git-fixes).
RDMA/mana_ib: Create and destroy UD/GSI QP (git-fixes).
RDMA/mana_ib: Create and destroy rnic adapter (git-fixes).
RDMA/mana_ib: Drain send wrs of GSI QP (git-fixes).
RDMA/mana_ib: Enable RoCE on port 1 (git-fixes).
RDMA/mana_ib: Extend…

Record: SUSE-SU-2026:1041-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1081-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40201: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths (bsc#1253455).
CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
CVE-2025-68283: libceph: replace BUG_ON with bounds check for map->max_osd (bsc#1255379).
CVE-2025-68295: smb: client: fix memory leak in cifs_construct_tcon() (bsc#1255129).
CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
CVE-2025-68736: landlock: Fix handling of disconnected directories (bsc#1255698).
CVE-2025-68778: btrfs: don't log conflicting inode if it's a dir moved in the current transaction (bsc#1256683).
CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (bsc#1256679).
CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
CVE-2025-71113: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (bsc#1256716).
CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
CVE-2025-71126: mptcp: reset fallback status gracefully at disconnect() time (bsc#1256755).
CVE-2025-71148: net/handshake: restore destructor on submit failure (bsc#1257159).
CVE-2025-71184: btrfs: fix NULL dereference on root when tracing inode eviction (bsc#1257635).
CVE-2025-71194: btrfs: fix deadlock in wait_current_trans() due to ignored transaction type (bsc#1257687).
CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228).
CVE-2026-22982: net: mscc: ocelot: Fix crash when adding interface under a lag (bsc#1257179).
CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209).
CVE-2026-23003: geneve: Fix incorrect inner network header offset when innerprotoinherit is set (bsc#1257246).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).
CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
CVE-2026-23023: idpf: fix memory leak in idpf_vport_rel() (bsc#1257556).
CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).
CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718).
CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
CVE-2026-23070: Octeontx2-af: Add proper…

Record: SUSE-SU-2026:1081-1
Updated: 2026-11-02

OSVSUSE-SU-2026:1573-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073).
CVE-2025-68794: iomap: adjust read range correctly for non-block-aligned positions (bsc#1256647).
CVE-2025-71268: btrfs: fix reservation leak in some error paths when inserting inline extent (bsc#1259865).
CVE-2025-71269: btrfs: do not free data reservation in fallback from inline due to -ENOSPC (bsc#1259889).
CVE-2026-23030: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() (bsc#1257561).
CVE-2026-23047: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682).
CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).
CVE-2026-23120: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280).
CVE-2026-23136: libceph: reset sparse-read state in osd_fault() (bsc#1258303).
CVE-2026-23140: bpf, test_run: Subtract size of xdp_frame from allowed metadata size (bsc#1258305).
CVE-2026-23187: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330).
CVE-2026-23193: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).
CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).
CVE-2026-23215: x86/vmware: Fix hypercall clobbers (bsc#1258476).
CVE-2026-23216: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (bsc#1258447).
CVE-2026-23231: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (bsc#1259188).
CVE-2026-23242: RDMA/siw: Fix potential NULL pointer dereference in header processing (bsc#1259795).
CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (bsc#1259797).
CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype (bsc#1259891).
CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
CVE-2026-23270: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).
CVE-2026-23272: netfilter: nf_tables: unconditionally bump set->nelems before insertion (bsc#1260009).
CVE-2026-23274: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (bsc#1260005).
CVE-2026-23277: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (bsc#1259997).
CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1259998).
CVE-2026-23281: wifi: libertas: fix use-after-free in lbs_free_adapter() (bsc#1260464).
CVE-2026-23292: scsi: target: Fix recursive locking in __configfs_open_file() (bsc#1260500).
CVE-2026-23293: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260486).
CVE-2026-23317: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions (bsc#1260562).
CVE-2026-23319: bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim (bsc#1260735).
CVE-2026-23361: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry (bsc#1260732).
CVE-2026-23379: net/sched: ets: fix divide by zero in the offload path (bsc#1260481).
CVE-2026-23381: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260471).
CVE-2026-23386: gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (bsc#1260799).
CVE-2026-23398: icmp: fix NULL pointer dereference in icmp_tag_validation() (bsc#1260730).
CVE-2026-23413: clsact: Fix use-after-free in init/destroy rollback asymmetry (bsc#1261498).
CVE-2026-23414: tls: Purge async_hold in tls_decrypt_async_wait() (bsc#1261496).
CVE-2026-31788: xen/privcmd: restrict usage in unprivileged domU (bsc#1259707).

The following non-security bugs were fixed:

ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() (git-fixes).
ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (stable-fixes). -…

Record: SUSE-SU-2026:1573-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20667-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-68283: libceph: replace BUG_ON with bounds check for map->max_osd (bsc#1255379).
CVE-2025-68295: smb: client: fix memory leak in cifs_construct_tcon() (bsc#1255129).
CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
CVE-2025-68736: landlock: Fix handling of disconnected directories (bsc#1255698).
CVE-2025-68778: btrfs: don't log conflicting inode if it's a dir moved in the current transaction (bsc#1256683).
CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (bsc#1256679).
CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
CVE-2025-71113: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (bsc#1256716).
CVE-2025-71126: mptcp: reset fallback status gracefully at disconnect() time (bsc#1256755).
CVE-2025-71148: net/handshake: restore destructor on submit failure (bsc#1257159).
CVE-2025-71184: btrfs: fix NULL dereference on root when tracing inode eviction (bsc#1257635).
CVE-2025-71194: btrfs: fix deadlock in wait_current_trans() due to ignored transaction type (bsc#1257687).
CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228).
CVE-2026-22982: net: mscc: ocelot: Fix crash when adding interface under a lag (bsc#1257179).
CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209).
CVE-2026-23003: geneve: Fix incorrect inner network header offset when innerprotoinherit is set (bsc#1257246).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).
CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718).
CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
CVE-2026-23083: fou: Don't allow 0 for FOU_ATTR_IPPROTO (bsc#1257745).
CVE-2026-23084: be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list (bsc#1257830).
CVE-2026-23085: irqchip/gic-v3-its: Avoid truncating memory addresses (bsc#1257758).
CVE-2026-23086: vsock/virtio: cap TX credit to local buffer size (bsc#1257757).
CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
CVE-2026-23095: gue: Fix skb memleak with inner IP protocol 0 (bsc#1257808).
CVE-2026-23099: bonding: limit BOND_MODE_8023AD to Ethernet devices (bsc#1257816).
CVE-2026-23102: arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state (bsc#1257772).
CVE-2026-23104: ice: fix devlink reload call trace…

Record: SUSE-SU-2026:20667-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20720-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-68283: libceph: replace BUG_ON with bounds check for map->max_osd (bsc#1255379).
CVE-2025-68295: smb: client: fix memory leak in cifs_construct_tcon() (bsc#1255129).
CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
CVE-2025-68736: landlock: Fix handling of disconnected directories (bsc#1255698).
CVE-2025-68778: btrfs: don't log conflicting inode if it's a dir moved in the current transaction (bsc#1256683).
CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (bsc#1256679).
CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
CVE-2025-71113: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (bsc#1256716).
CVE-2025-71126: mptcp: reset fallback status gracefully at disconnect() time (bsc#1256755).
CVE-2025-71148: net/handshake: restore destructor on submit failure (bsc#1257159).
CVE-2025-71184: btrfs: fix NULL dereference on root when tracing inode eviction (bsc#1257635).
CVE-2025-71194: btrfs: fix deadlock in wait_current_trans() due to ignored transaction type (bsc#1257687).
CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228).
CVE-2026-22982: net: mscc: ocelot: Fix crash when adding interface under a lag (bsc#1257179).
CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209).
CVE-2026-23003: geneve: Fix incorrect inner network header offset when innerprotoinherit is set (bsc#1257246).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).
CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718).
CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
CVE-2026-23083: fou: Don't allow 0 for FOU_ATTR_IPPROTO (bsc#1257745).
CVE-2026-23084: be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list (bsc#1257830).
CVE-2026-23085: irqchip/gic-v3-its: Avoid truncating memory addresses (bsc#1257758).
CVE-2026-23086: vsock/virtio: cap TX credit to local buffer size (bsc#1257757).
CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
CVE-2026-23095: gue: Fix skb memleak with inner IP protocol 0 (bsc#1257808).
CVE-2026-23099: bonding: limit BOND_MODE_8023AD to Ethernet devices (bsc#1257816).
CVE-2026-23102: arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state (bsc#1257772).
CVE-2026-23104: ice: fix devlink reload call trace…

Record: SUSE-SU-2026:20720-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20838-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues.

The following security issues were fixed:

CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40230: mm: prevent poison consumption when splitting THP (bsc#1254817).
CVE-2025-68173: ftrace: Fix softlockup in ftrace_module_enable (bsc#1255311).
CVE-2025-68186: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (bsc#1255144).
CVE-2025-68292: mm/memfd: fix information leak in hugetlb folios (bsc#1255148).
CVE-2025-68295: smb: client: fix memory leak in cifs_construct_tcon() (bsc#1255129).
CVE-2025-68329: tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (bsc#1255490).
CVE-2025-68371: scsi: smartpqi: Fix device resources accessed after device removal (bsc#1255572).
CVE-2025-68745: scsi: qla2xxx: Clear cmds after chip reset (bsc#1255721).
CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (bsc#1256679).
CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
CVE-2025-71134: mm/page_alloc: change all pageblocks migrate type on coalescing (bsc#1256732).
CVE-2025-71161: dm-verity: disable recursive forward error correction (bsc#1257174).
CVE-2025-71184: btrfs: tracepoints: use btrfs_root_id() to get the id of a root (bsc#1257635).
CVE-2025-71193: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend (bsc#1257686).
CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228).
CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209).
CVE-2026-23003: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (bsc#1257246).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).
CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
CVE-2026-23022: idpf: fix memory leak in idpf_vc_core_deinit() (bsc#1257581).
CVE-2026-23023: idpf: fix memory leak in idpf_vport_rel() (bsc#1257556).
CVE-2026-23024: idpf: fix memory leak of flow steer list on rmmod (bsc#1257572).
CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).
CVE-2026-23042: idpf: fix aux device unplugging when rdma is not supported by vport (bsc#1257705).
CVE-2026-23047: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682).
CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718).
CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
CVE-2026-23066: rxrpc: Fix recvmsg() unconditional requeue (bsc#1257726).
CVE-2026-23068: spi: spi-sprd-adi: Fix double free in probe error path (bsc#1257805).
CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
CVE-2026-23070: Octeontx2-af: Add proper checks for fwdata (bsc#1257709).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
CVE-2026-23083: tools: ynl-gen: use big-endian netlink attribute types (bsc#1257745).
CVE-2026-23084:…

Record: SUSE-SU-2026:20838-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20845-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40192: Revert "ipmi: fix msg stack when IPMI is disconnected" (bsc#1253622).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer()…

Record: SUSE-SU-2026:20845-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20873-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues.

The following security issues were fixed:

CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40230: mm: prevent poison consumption when splitting THP (bsc#1254817).
CVE-2025-68173: ftrace: Fix softlockup in ftrace_module_enable (bsc#1255311).
CVE-2025-68186: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (bsc#1255144).
CVE-2025-68292: mm/memfd: fix information leak in hugetlb folios (bsc#1255148).
CVE-2025-68295: smb: client: fix memory leak in cifs_construct_tcon() (bsc#1255129).
CVE-2025-68329: tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (bsc#1255490).
CVE-2025-68371: scsi: smartpqi: Fix device resources accessed after device removal (bsc#1255572).
CVE-2025-68745: scsi: qla2xxx: Clear cmds after chip reset (bsc#1255721).
CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (bsc#1256679).
CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
CVE-2025-71134: mm/page_alloc: change all pageblocks migrate type on coalescing (bsc#1256732).
CVE-2025-71161: dm-verity: disable recursive forward error correction (bsc#1257174).
CVE-2025-71184: btrfs: tracepoints: use btrfs_root_id() to get the id of a root (bsc#1257635).
CVE-2025-71193: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend (bsc#1257686).
CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228).
CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209).
CVE-2026-23003: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (bsc#1257246).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).
CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
CVE-2026-23022: idpf: fix memory leak in idpf_vc_core_deinit() (bsc#1257581).
CVE-2026-23023: idpf: fix memory leak in idpf_vport_rel() (bsc#1257556).
CVE-2026-23024: idpf: fix memory leak of flow steer list on rmmod (bsc#1257572).
CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).
CVE-2026-23042: idpf: fix aux device unplugging when rdma is not supported by vport (bsc#1257705).
CVE-2026-23047: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682).
CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718).
CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
CVE-2026-23066: rxrpc: Fix recvmsg() unconditional requeue (bsc#1257726).
CVE-2026-23068: spi: spi-sprd-adi: Fix double free in probe error path (bsc#1257805).
CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
CVE-2026-23070: Octeontx2-af: Add proper checks for fwdata (bsc#1257709).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
CVE-2026-23083: tools: ynl-gen: use big-endian netlink attribute types (bsc#1257745).
CVE-2026-23084:…

Record: SUSE-SU-2026:20873-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20876-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-38321: smb: Log an error when close_all_cached_dirs fails (bsc#1246328).
CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
CVE-2025-39880: libceph: fix invalid accesses to ceph_connection_v1_info (bsc#1250388).
CVE-2025-39890: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (bsc#1250334).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1252824).
CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
CVE-2025-40081: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (bsc#1252776).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40123: bpf: Enforce expected_attach_type for tailcall compatibility (bsc#1253365).
CVE-2025-40134: dm: fix NULL pointer dereference in __dm_suspend() (bsc#1253386).
CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
CVE-2025-40170: net: use dst_dev_rcu() in sk_setup_caps() (bsc#1253413).
CVE-2025-40178: pid: Add a judgment for ns null in pid_nr_ns (bsc#1253463).
CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
CVE-2025-40187: net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (bsc#1253647).
CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
CVE-2025-40192: Revert "ipmi: fix msg stack when IPMI is disconnected" (bsc#1253622).
CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
CVE-2025-40231: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815).
CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
CVE-2025-40251: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (bsc#1254856).
CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (bsc#1254849).
CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer()…

Record: SUSE-SU-2026:20876-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20931-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues.

The following security issues were fixed:

CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40230: mm: prevent poison consumption when splitting THP (bsc#1254817).
CVE-2025-68173: ftrace: Fix softlockup in ftrace_module_enable (bsc#1255311).
CVE-2025-68186: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (bsc#1255144).
CVE-2025-68292: mm/memfd: fix information leak in hugetlb folios (bsc#1255148).
CVE-2025-68295: smb: client: fix memory leak in cifs_construct_tcon() (bsc#1255129).
CVE-2025-68329: tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (bsc#1255490).
CVE-2025-68371: scsi: smartpqi: Fix device resources accessed after device removal (bsc#1255572).
CVE-2025-68745: scsi: qla2xxx: Clear cmds after chip reset (bsc#1255721).
CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (bsc#1256679).
CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
CVE-2025-71134: mm/page_alloc: change all pageblocks migrate type on coalescing (bsc#1256732).
CVE-2025-71161: dm-verity: disable recursive forward error correction (bsc#1257174).
CVE-2025-71184: btrfs: tracepoints: use btrfs_root_id() to get the id of a root (bsc#1257635).
CVE-2025-71193: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend (bsc#1257686).
CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228).
CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209).
CVE-2026-23003: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (bsc#1257246).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).
CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
CVE-2026-23022: idpf: fix memory leak in idpf_vc_core_deinit() (bsc#1257581).
CVE-2026-23023: idpf: fix memory leak in idpf_vport_rel() (bsc#1257556).
CVE-2026-23024: idpf: fix memory leak of flow steer list on rmmod (bsc#1257572).
CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).
CVE-2026-23042: idpf: fix aux device unplugging when rdma is not supported by vport (bsc#1257705).
CVE-2026-23047: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682).
CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718).
CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
CVE-2026-23066: rxrpc: Fix recvmsg() unconditional requeue (bsc#1257726).
CVE-2026-23068: spi: spi-sprd-adi: Fix double free in probe error path (bsc#1257805).
CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
CVE-2026-23070: Octeontx2-af: Add proper checks for fwdata (bsc#1257709).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
CVE-2026-23083: tools: ynl-gen: use big-endian netlink attribute types (bsc#1257745).
CVE-2026-23084:…

Record: SUSE-SU-2026:20931-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21114-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591).
CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998).
CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073).
CVE-2025-40201: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths (bsc#1253455).
CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
CVE-2025-68794: iomap: adjust read range correctly for non-block-aligned positions (bsc#1256647).
CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
CVE-2025-71268: btrfs: fix reservation leak in some error paths when inserting inline extent (bsc#1259865).
CVE-2025-71269: btrfs: do not free data reservation in fallback from inline due to -ENOSPC (bsc#1259889).
CVE-2026-23030: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() (bsc#1257561).
CVE-2026-23047: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682).
CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
CVE-2026-23088: tracing: Fix crash on synthetic stacktrace field usage (bsc#1257814).
CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).
CVE-2026-23120: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280).
CVE-2026-23125: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (bsc#1258293).
CVE-2026-23136: libceph: reset sparse-read state in osd_fault() (bsc#1258303).
CVE-2026-23140: bpf, test_run: Subtract size of xdp_frame from allowed metadata size (bsc#1258305).
CVE-2026-23154: net: fix segmentation of forwarding fraglist GRO (bsc#1258286).
CVE-2026-23169: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() (bsc#1258389).
CVE-2026-23187: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330).
CVE-2026-23193: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).
CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).
CVE-2026-23216: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (bsc#1258447).
CVE-2026-23231: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (bsc#1259188).
CVE-2026-23242: RDMA/siw: Fix potential NULL pointer dereference in header processing (bsc#1259795).
CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (bsc#1259797).
CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype (bsc#1259891).
CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
CVE-2026-23270: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).
CVE-2026-23272: netfilter: nf_tables: unconditionally bump set->nelems before insertion (bsc#1260009).
CVE-2026-23274: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (bsc#1260005).
CVE-2026-23277: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (bsc#1259997).
CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1259998).
CVE-2026-23281: wifi: libertas: fix use-after-free in lbs_free_adapter() (bsc#1260464).
CVE-2026-23292: scsi: target: Fix recursive locking in __configfs_open_file() (bsc#1260500).
CVE-2026-23293: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260486).
CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
CVE-2026-23317: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions (bsc#1260562).
CVE-2026-23319: bpf:…

Record: SUSE-SU-2026:21114-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21123-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591).
CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998).
CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073).
CVE-2025-40201: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths (bsc#1253455).
CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
CVE-2025-68794: iomap: adjust read range correctly for non-block-aligned positions (bsc#1256647).
CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
CVE-2025-71268: btrfs: fix reservation leak in some error paths when inserting inline extent (bsc#1259865).
CVE-2025-71269: btrfs: do not free data reservation in fallback from inline due to -ENOSPC (bsc#1259889).
CVE-2026-23030: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() (bsc#1257561).
CVE-2026-23047: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682).
CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
CVE-2026-23088: tracing: Fix crash on synthetic stacktrace field usage (bsc#1257814).
CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).
CVE-2026-23120: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280).
CVE-2026-23125: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (bsc#1258293).
CVE-2026-23136: libceph: reset sparse-read state in osd_fault() (bsc#1258303).
CVE-2026-23140: bpf, test_run: Subtract size of xdp_frame from allowed metadata size (bsc#1258305).
CVE-2026-23154: net: fix segmentation of forwarding fraglist GRO (bsc#1258286).
CVE-2026-23169: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() (bsc#1258389).
CVE-2026-23187: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330).
CVE-2026-23193: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).
CVE-2026-23201: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).
CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).
CVE-2026-23216: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (bsc#1258447).
CVE-2026-23231: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (bsc#1259188).
CVE-2026-23242: RDMA/siw: Fix potential NULL pointer dereference in header processing (bsc#1259795).
CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (bsc#1259797).
CVE-2026-23255: net: add proper RCU protection to /proc/net/ptype (bsc#1259891).
CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).
CVE-2026-23270: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).
CVE-2026-23272: netfilter: nf_tables: unconditionally bump set->nelems before insertion (bsc#1260009).
CVE-2026-23274: netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (bsc#1260005).
CVE-2026-23277: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (bsc#1259997).
CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1259998).
CVE-2026-23281: wifi: libertas: fix use-after-free in lbs_free_adapter() (bsc#1260464).
CVE-2026-23292: scsi: target: Fix recursive locking in __configfs_open_file() (bsc#1260500).
CVE-2026-23293: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1260486).
CVE-2026-23304: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() (bsc#1260544).
CVE-2026-23317: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions (bsc#1260562).
CVE-2026-23319: bpf:…

Record: SUSE-SU-2026:21123-1
Updated: 2026-11-02

OSVSUSE-SU-2026:21284-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues.

The following security issues were fixed:

CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590).
CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
CVE-2025-40230: mm: prevent poison consumption when splitting THP (bsc#1254817).
CVE-2025-68173: ftrace: Fix softlockup in ftrace_module_enable (bsc#1255311).
CVE-2025-68186: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (bsc#1255144).
CVE-2025-68292: mm/memfd: fix information leak in hugetlb folios (bsc#1255148).
CVE-2025-68295: smb: client: fix memory leak in cifs_construct_tcon() (bsc#1255129).
CVE-2025-68329: tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (bsc#1255490).
CVE-2025-68371: scsi: smartpqi: Fix device resources accessed after device removal (bsc#1255572).
CVE-2025-68745: scsi: qla2xxx: Clear cmds after chip reset (bsc#1255721).
CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (bsc#1256679).
CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
CVE-2025-71134: mm/page_alloc: change all pageblocks migrate type on coalescing (bsc#1256732).
CVE-2025-71161: dm-verity: disable recursive forward error correction (bsc#1257174).
CVE-2025-71184: btrfs: tracepoints: use btrfs_root_id() to get the id of a root (bsc#1257635).
CVE-2025-71193: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend (bsc#1257686).
CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228).
CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209).
CVE-2026-23003: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (bsc#1257246).
CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).
CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
CVE-2026-23022: idpf: fix memory leak in idpf_vc_core_deinit() (bsc#1257581).
CVE-2026-23023: idpf: fix memory leak in idpf_vport_rel() (bsc#1257556).
CVE-2026-23024: idpf: fix memory leak of flow steer list on rmmod (bsc#1257572).
CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).
CVE-2026-23042: idpf: fix aux device unplugging when rdma is not supported by vport (bsc#1257705).
CVE-2026-23047: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682).
CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718).
CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
CVE-2026-23066: rxrpc: Fix recvmsg() unconditional requeue (bsc#1257726).
CVE-2026-23068: spi: spi-sprd-adi: Fix double free in probe error path (bsc#1257805).
CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
CVE-2026-23070: Octeontx2-af: Add proper checks for fwdata (bsc#1257709).
CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
CVE-2026-23083: tools: ynl-gen: use big-endian netlink attribute types (bsc#1257745).
CVE-2026-23084:…

Record: SUSE-SU-2026:21284-1
Updated: 2026-11-02

OSVUSN-8492-1 No score

linux, linux-aws, linux-aws-fips, linux-gcp, linux-gcp-fips, linux-ibm, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-realtime, linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-1
Updated: 2026-11-06

OSVUSN-8492-2 No score

linux-aws-6.8, linux-gcp-6.8, linux-gke, linux-gkeop, linux-ibm-6.8, linux-nvidia-lowlatency, linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-2
Updated: 2026-11-06

OSVUSN-8492-3 No score

linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-3
Updated: 2026-11-06

OSVUSN-8492-4 No score

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-4
Updated: 2026-11-06

OSVUSN-8492-5 No score

linux-azure-fips, linux-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607,…

Record: USN-8492-5
Updated: 2026-11-06

OSVUSN-8497-1 No score

linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300)

Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to be processed. (CVE-2026-47329)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 contained a use- after-free (UAF) bug. A local attacker could use this to cause memory corruption and, theoretically, arbitrary code execution. (CVE-2026-47331)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333)

Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 contained a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel panic. (CVE-2026-47335)

Tristan Madani discovered that Ubuntu Linux kernel 6.8 used an uninitialized variable when handling AppArmor AF_INET/AF_INET6 socket mediation. A local attacker could use this to influence processing of fine- grained network socket mediation. (CVE-2026-47336)

Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture; …

Record: USN-8497-1
Updated: 2026-11-07

OSVUSN-8498-1 No score

linux-nvidia-tegra vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
ATM drivers;
RNBD block device driver;
Ublk userspace block driver;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU idle management framework;
Hardware crypto device drivers;
DMA engine subsystem;
EFI core;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
IIO subsystem;
InfiniBand drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Broadcom VK accelerator driver;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
STMicroelectronics network drivers;
NTB driver;
NVME drivers;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
MediaTek SoC drivers;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Realtek RTL8723BS SDIO drivers;
UFS subsystem;
ChipIdea USB driver;
DesignWare USB3 driver;
USB over IP driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
BTRFS file system;
File systems infrastructure;
Ceph distributed file system;
Ext4 file system;
F2FS file system;
FAT file system;
GFS2 file system;
HFS+ file system;
JFS file system;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
OCFS2 file system;
Proc file system;
Pstore file system;
Diskquota system;
SMB network file system;
XFS file system;
Audit subsystem;
Memory Management;
IPv6 networking;
Netfilter;
Tracing infrastructure;
Kernel kexec() syscall;
RCU subsystem;
Scheduler infrastructure;
Scatterlist API;
9P file system network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
Networking core;
IPv4 networking;
KCM (Kernel Connection Multiplexor) sockets driver;
Multipath TCP;
NFC subsystem;
RDS protocol;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
X.25 network layer;
XFRM subsystem;
AppArmor security module;
Simplified Mandatory Access Control Kernel framework;
SOF drivers;
USB sound devices; (CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274, CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294, CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305, CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221, CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230, CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267, CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411, CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478, CVE-2026-31607, CVE-2026-31637,…

Record: USN-8498-1
Updated: 2026-11-06

OSVUSN-8499-1 No score

linux-xilinx vulnerabilities

It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431)

Record: USN-8499-1
Updated: 2026-11-07

OSVUSN-8606-1 No score

linux-azure, linux-azure-6.8 vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8606-1
Updated: 2026-11-07

OSVUSN-8607-1 No score

linux-azure-fde vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8607-1
Updated: 2026-11-07

OSVUSN-8609-1 No score

linux-azure-fde-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8609-1
Updated: 2026-11-07

OSVUSN-8619-1 No score

linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
ATM drivers;
Drivers core;
Power management core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
RNBD block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
Counter interface drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DMA engine subsystem;
EDAC drivers;
EFI core;
GPIO subsystem;
GPU drivers;
Greybus drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device (Miscellaneous) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Mailbox framework;
Multiple devices driver;
Media drivers;
MediaTek SMI driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
Broadcom VK accelerator driver;
Fastrpc Driver;
IBM Advanced System Management driver;
MMC subsystem;
MOST (Media Oriented Systems Transport) drivers;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Ethernet team driver;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PCI subsystem;
Performance monitor drivers;
Pin controllers subsystem;
x86 platform drivers;
Broadcom BCM2835 power domain driver;
Generic PM domains;
i.MX PM domains;
Power supply drivers;
RapidIO drivers;
RAS (Reliability, Availability, Serviceability) subsystem;
Remote Processor subsystem;
RPMSG subsystem;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
Freescale SoC drivers;
MediaTek SoC drivers;
Microchip PolarFire SoC system controller driver;
Texas Instruments SoC drivers;
SPI subsystem;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
SM750 framebuffer staging driver;
TCM subsystem;
Thermal drivers;
TTY drivers;
UFS subsystem;
Cadence USB3 driver;
ChipIdea USB driver;
USB Device Class drivers;
ULPI bus;
USB core drivers;
DesignWare…

Record: USN-8619-1
Updated: 2026-11-07

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`linux-lts` Alpaquita:25	6.12.66-r0 up to 6.12.73-r0	6.12.73-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`kernel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-64k-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-64k-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-cross-headers` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-debug-uki-virt-addons` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-doc` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-headers` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-kvm` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-kvm` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-64k-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-debug` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-debug-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-debug-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-debug-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-debug-kvm` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-debug-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-debug-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-debug-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-debug-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-debug-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-devel-matched` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-kvm` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-modules` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-modules-core` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-modules-extra` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-modules-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-rt-modules-partner` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-selftests-internal` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-tools` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-tools-libs` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`kernel-uki-virt` TuxCare:AlmaLinux:9.6 From an advisory covering 147 CVEs	before 5.14.0-570.62.1.el9_6.tuxcare.5.els10	5.14.0-570.62.1.el9_6.tuxcare.5.els10
`Kernel` Linux	6.8.0 up to 6.12.72, 6.13.0 up to 6.18.11, 6.19.0 up to 6.19.1	6.12.726.18.116.19.1
`linux` Debian:13	before 6.12.73-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1 Show 7 moreShow less 6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-1~bpo12+1	6.12.73-1
`linux` Debian:14	before 6.18.12-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.113-16.12.115-16.12.115-26.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp1	6.18.12-1
`linux` Debian:13 From an advisory covering 53 CVEs	before 6.12.73-1, plus listed versions 6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1 Show 7 moreShow less 6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-1~bpo12+1	6.12.73-1
`linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`rootio-linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`rootio-linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`kernel-livepatch-SLE15-SP7-RT_Update_10` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 153 CVEs	before 1-150700.1.3.1	1-150700.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 153 CVEs	before 6.4.0-150700.7.34.1	6.4.0-150700.7.34.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 153 CVEs	before 6.4.0-150700.7.34.1	6.4.0-150700.7.34.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 153 CVEs	before 6.4.0-150700.7.34.1	6.4.0-150700.7.34.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-livepatch-SLE15-SP6_Update_21` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 27 CVEs	before 1-150600.13.5.1	1-150600.13.5.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1.150600.12.42.2	6.4.0-150600.23.92.1.150600.12.42.2
`kernel-docs` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1.150600.12.42.2	6.4.0-150600.23.92.1.150600.12.42.2
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1.150600.12.42.2	6.4.0-150600.23.92.1.150600.12.42.2
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 27 CVEs	before 6.4.0-150600.23.92.1	6.4.0-150600.23.92.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 155 CVEs	before 6.4.0-150700.53.34.1	6.4.0-150700.53.34.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 155 CVEs	before 6.4.0-150700.53.34.1	6.4.0-150700.53.34.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 155 CVEs	before 6.4.0-150700.53.34.1.150700.17.23.1	6.4.0-150700.53.34.1.150700.17.23.1
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 155 CVEs	before 6.4.0-150700.53.34.1	6.4.0-150700.53.34.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 155 CVEs	before 6.4.0-150700.53.34.1	6.4.0-150700.53.34.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 155 CVEs	before 6.4.0-150700.53.34.1	6.4.0-150700.53.34.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 155 CVEs	before 6.4.0-150700.53.34.1	6.4.0-150700.53.34.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 155 CVEs	before 6.4.0-150700.53.34.1	6.4.0-150700.53.34.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 155 CVEs	before 6.4.0-150700.53.34.1	6.4.0-150700.53.34.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 155 CVEs	before 6.4.0-150700.53.34.1	6.4.0-150700.53.34.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 155 CVEs	before 6.4.0-150700.53.34.1	6.4.0-150700.53.34.1
`kernel-livepatch-SLE15-SP7_Update_10` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 155 CVEs	before 1-150700.15.3.1	1-150700.15.3.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 155 CVEs	before 6.4.0-150700.53.34.1	6.4.0-150700.53.34.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 155 CVEs	before 6.4.0-150700.53.34.1	6.4.0-150700.53.34.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 155 CVEs	before 6.4.0-150700.53.34.1	6.4.0-150700.53.34.1
`kernel-livepatch-SLE15-SP7-RT_Update_11` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 40 CVEs	before 1-150700.1.3.1	1-150700.1.3.1
`kernel-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 40 CVEs	before 6.4.0-150700.7.37.2	6.4.0-150700.7.37.2
`kernel-source-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 40 CVEs	before 6.4.0-150700.7.37.2	6.4.0-150700.7.37.2
`kernel-syms-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 40 CVEs	before 6.4.0-150700.7.37.1	6.4.0-150700.7.37.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 129 CVEs	before 6.4.0-40.1	6.4.0-40.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 129 CVEs	before 6.4.0-40.1.21.17	6.4.0-40.1.21.17
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 129 CVEs	before 6.4.0-40.1	6.4.0-40.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 129 CVEs	before 6.4.0-40.1	6.4.0-40.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 129 CVEs	before 6.4.0-40.1	6.4.0-40.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 129 CVEs	before 6.4.0-40.1.21.17	6.4.0-40.1.21.17
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 129 CVEs	before 6.4.0-40.1	6.4.0-40.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 129 CVEs	before 6.4.0-40.1	6.4.0-40.1
`kernel-64kb` SUSE:Linux Micro 6.2 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-default` SUSE:Linux Micro 6.2 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-default-base` SUSE:Linux Micro 6.2 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1.160000.2.8	6.12.0-160000.27.1.160000.2.8
`kernel-rt` SUSE:Linux Micro 6.2 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-source` SUSE:Linux Micro 6.2 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 655 CVEs	before 6.4.0-40.1	6.4.0-40.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 655 CVEs	before 6.4.0-40.1	6.4.0-40.1
`kernel-obs-build` SUSE:Linux Micro Extras 6.2 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-syms` SUSE:Linux Micro Extras 6.2 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-rt` SUSE:Linux Micro 6.1 From an advisory covering 655 CVEs	before 6.4.0-40.1	6.4.0-40.1
`kernel-source-rt` SUSE:Linux Micro 6.1 From an advisory covering 655 CVEs	before 6.4.0-40.1	6.4.0-40.1
`kernel-64kb` SUSE:Linux Enterprise Server 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-azure` SUSE:Linux Enterprise Server 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-default` SUSE:Linux Enterprise Server 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-default-base` SUSE:Linux Enterprise Server 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1.160000.2.8	6.12.0-160000.27.1.160000.2.8
`kernel-docs` SUSE:Linux Enterprise Server 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-obs-qa` SUSE:Linux Enterprise Server 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-source` SUSE:Linux Enterprise Server 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-syms` SUSE:Linux Enterprise Server 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-64kb` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-default` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1.160000.2.8	6.12.0-160000.27.1.160000.2.8
`kernel-docs` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-obs-qa` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-source` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 61 CVEs	before 6.4.0-41.1	6.4.0-41.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 61 CVEs	before 6.4.0-41.1.21.18	6.4.0-41.1.21.18
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 61 CVEs	before 6.4.0-41.1	6.4.0-41.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 61 CVEs	before 6.4.0-41.1	6.4.0-41.1
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 61 CVEs	before 6.4.0-41.1	6.4.0-41.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 61 CVEs	before 6.4.0-41.1.21.18	6.4.0-41.1.21.18
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 61 CVEs	before 6.4.0-41.1	6.4.0-41.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 61 CVEs	before 6.4.0-41.1	6.4.0-41.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-aws-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1 Show 9 moreShow less 6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1	None known
`linux-aws-6.8` Ubuntu:22.04:LTS	before 6.8.0-1060.63~22.04.1, plus listed versions 6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1 Show 33 moreShow less 6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.1	6.8.0-1060.63~22.04.1
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1 Show 9 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1	None known
`linux-azure-6.8` Ubuntu:22.04:LTS	before 6.8.0-1063.71~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1012.14~22.04.16.8.0-1013.15~22.04.1 Show 22 moreShow less 6.8.0-1014.16~22.04.16.8.0-1015.17~22.04.26.8.0-1017.20~22.04.16.8.0-1018.21~22.04.16.8.0-1020.23~22.04.16.8.0-1021.25~22.04.16.8.0-1025.30~22.04.16.8.0-1026.31~22.04.16.8.0-1027.32~22.04.16.8.0-1028.33~22.04.16.8.0-1029.34~22.04.16.8.0-1030.35~22.04.16.8.0-1031.36~22.04.16.8.0-1034.39~22.04.16.8.0-1036.42~22.04.16.8.0-1040.46~22.04.16.8.0-1041.47~22.04.16.8.0-1044.50~22.04.16.8.0-1051.57~22.04.16.8.0-1052.58~22.04.16.8.0-1059.65~22.04.16.8.0-1062.69~22.04.1	6.8.0-1063.71~22.04.1
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-azure-fde-6.8` Ubuntu:22.04:LTS	before 6.8.0-1062.69~22.04.1, plus listed versions 6.8.0-1041.48~22.04.16.8.0-1042.49~22.04.16.8.0-1044.51~22.04.16.8.0-1046.53~22.04.16.8.0-1053.60~22.04.16.8.0-1058.65~22.04.16.8.0-1061.68~22.04.1	6.8.0-1062.69~22.04.1
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-gcp-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1 Show 8 moreShow less 6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1	None known
`linux-gcp-6.8` Ubuntu:22.04:LTS	before 6.8.0-1063.69~22.04.1, plus listed versions 6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1 Show 34 moreShow less 6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1054.57~22.04.16.8.0-1058.61~22.04.16.8.0-1060.63~22.04.1	6.8.0-1063.69~22.04.1
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1 Show 8 moreShow less 6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1	None known
`linux-hwe-6.8` Ubuntu:22.04:LTS	before 6.8.0-136.136~22.04.1, plus listed versions 6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1 Show 30 moreShow less 6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.16.8.0-106.106~22.04.16.8.0-107.107~22.04.16.8.0-110.110~22.04.16.8.0-111.111~22.04.16.8.0-117.117~22.04.16.8.0-124.124~22.04.16.8.0-134.134~22.04.1	6.8.0-136.136~22.04.1
`linux-ibm-6.8` Ubuntu:22.04:LTS	before 6.8.0-1060.61~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1 Show 31 moreShow less 6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.16.8.0-1049.49~22.04.16.8.0-1050.50~22.04.16.8.0-1051.51~22.04.16.8.0-1052.52~22.04.16.8.0-1055.56~22.04.16.8.0-1057.58~22.04.1	6.8.0-1060.61~22.04.1
`linux-intel-iot-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1073.75	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-lowlatency-hwe-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-14.14.1~22.04.16.5.0-15.15.1.1~22.04.16.5.0-17.17.1.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.1 Show 8 moreShow less 6.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.16.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-41.41.1~22.04.16.5.0-42.42.1~22.04.16.5.0-44.44.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-lowlatency-hwe-6.8` Ubuntu:22.04:LTS	before 6.8.0-134.134.1~22.04.1, plus listed versions 6.8.0-38.38.1~22.04.26.8.0-40.40.1~22.04.16.8.0-44.44.1~22.04.16.8.0-45.45.1~22.04.16.8.0-47.47.1~22.04.1 Show 33 moreShow less 6.8.0-48.48.3~22.04.16.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-54.56.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.16.8.0-60.63.1~22.04.16.8.0-62.65.1~22.04.16.8.0-63.66.1~22.04.16.8.0-64.67.1~22.04.16.8.0-65.68.1~22.04.16.8.0-78.78.1~22.04.16.8.0-79.79.1~22.04.16.8.0-83.83.1~22.04.16.8.0-84.84.1~22.04.16.8.0-85.85.1~22.04.16.8.0-86.87.1~22.04.16.8.0-87.88.1~22.04.16.8.0-88.89.1~22.04.16.8.0-90.91.1~22.04.16.8.0-94.96.1~22.04.16.8.0-100.100.1~22.04.16.8.0-101.101.1~22.04.16.8.0-106.106.1~22.04.16.8.0-107.107.1~22.04.16.8.0-110.110.1~22.04.16.8.0-111.111.1~22.04.16.8.0-117.117.1~22.04.1	6.8.0-134.134.1~22.04.1
`linux-nvidia-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15	None known
`linux-nvidia-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1004.46.5.0-1007.76.5.0-1013.136.5.0-1014.146.5.0-1015.15 Show 6 moreShow less 6.5.0-1018.186.5.0-1019.196.5.0-1021.226.5.0-1022.236.5.0-1023.246.5.0-1024.25	None known
`linux-nvidia-6.8` Ubuntu:22.04:LTS	before 6.8.0-1058.61~22.04.1, plus listed versions 6.8.0-1008.8~22.04.16.8.0-1009.9~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1 Show 37 moreShow less 6.8.0-1013.14~22.04.16.8.0-1014.15~22.04.16.8.0-1015.16~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1022.25~22.04.26.8.0-1023.26~22.04.16.8.0-1024.27~22.04.16.8.0-1025.28~22.04.16.8.0-1026.29~22.04.16.8.0-1027.30~22.04.16.8.0-1028.31~22.04.16.8.0-1029.32~22.04.16.8.0-1030.33~22.04.16.8.0-1031.34~22.04.16.8.0-1032.35~22.04.16.8.0-1035.38~22.04.16.8.0-1036.39~22.04.16.8.0-1038.41~22.04.16.8.0-1039.42~22.04.16.8.0-1040.43~22.04.16.8.0-1041.44~22.04.26.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1049.52~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1054.57~22.04.16.8.0-1055.58~22.04.1	6.8.0-1058.61~22.04.1
`linux-oem-5.17` Ubuntu:22.04:LTS	All versions, plus listed versions 5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13 Show 21 moreShow less 5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36	None known
`linux-oem-6.0` Ubuntu:22.04:LTS	All versions, plus listed versions 6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10 Show 11 moreShow less 6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21	None known
`linux-oem-6.1` Ubuntu:22.04:LTS	All versions, plus listed versions 6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9 Show 22 moreShow less 6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36	None known
`linux-oem-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1003.36.5.0-1004.46.5.0-1006.66.5.0-1007.76.5.0-1008.8 Show 14 moreShow less 6.5.0-1009.106.5.0-1011.126.5.0-1013.146.5.0-1014.156.5.0-1015.166.5.0-1016.176.5.0-1018.196.5.0-1019.206.5.0-1020.216.5.0-1022.236.5.0-1023.246.5.0-1024.256.5.0-1025.266.5.0-1027.28	None known
`linux-oracle-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-1013.13~22.04.46.5.0-1014.14~22.04.16.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1018.18~22.04.1 Show 8 moreShow less 6.5.0-1019.19~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.16.5.0-1025.25~22.04.16.5.0-1026.26~22.04.16.5.0-1027.27~22.04.1	None known
`linux-oracle-6.8` Ubuntu:22.04:LTS	before 6.8.0-1057.58~22.04.1, plus listed versions 6.8.0-1006.6~22.04.36.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.1 Show 34 moreShow less 6.8.0-1013.13~22.04.16.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.17~22.04.16.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.20~22.04.16.8.0-1020.21~22.04.16.8.0-1021.22~22.04.16.8.0-1022.23~22.04.16.8.0-1023.24~22.04.16.8.0-1024.25~22.04.16.8.0-1025.26~22.04.16.8.0-1026.27~22.04.16.8.0-1027.28~22.04.16.8.0-1028.29~22.04.16.8.0-1029.30~22.04.16.8.0-1030.31~22.04.16.8.0-1032.33~22.04.16.8.0-1033.34~22.04.16.8.0-1035.36~22.04.16.8.0-1037.38~22.04.16.8.0-1038.39~22.04.16.8.0-1039.40~22.04.16.8.0-1040.41~22.04.16.8.0-1041.42~22.04.16.8.0-1042.43~22.04.16.8.0-1043.44~22.04.16.8.0-1044.45~22.04.16.8.0-1047.48~22.04.16.8.0-1049.50~22.04.16.8.0-1050.51~22.04.16.8.0-1052.53~22.04.16.8.0-1054.55~22.04.1	6.8.0-1057.58~22.04.1
`linux-realtime` Ubuntu:22.04:LTS	All versions, plus listed versions 5.15.0-1032.35	None known
`linux-riscv` Ubuntu:22.04:LTS	All versions, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4 Show 18 moreShow less 5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32	None known
`linux-riscv-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1	None known
`linux-riscv-6.5` Ubuntu:22.04:LTS	All versions, plus listed versions 6.5.0-17.17.1.1~22.04.16.5.0-21.21.1~22.04.16.5.0-25.25.1~22.04.16.5.0-26.26.1~22.04.16.5.0-27.28.1~22.04.1 Show 5 moreShow less 6.5.0-28.29.1~22.04.16.5.0-35.35.1~22.04.16.5.0-40.40.1~22.04.16.5.0-42.42.1~22.04.16.5.0-45.45.1~22.04.1	None known
`linux-riscv-6.8` Ubuntu:22.04:LTS	before 6.8.0-134.134~22.04.1, plus listed versions 6.8.0-38.38.1~22.04.16.8.0-39.39.1~22.04.16.8.0-40.40.1~22.04.16.8.0-41.41.1~22.04.16.8.0-44.44.1~22.04.1 Show 33 moreShow less 6.8.0-47.47.1~22.04.16.8.0-48.48.1~22.04.26.8.0-49.49.1~22.04.16.8.0-50.51.1~22.04.16.8.0-51.52.1~22.04.16.8.0-52.53.1~22.04.16.8.0-53.55.1~22.04.16.8.0-55.57.1~22.04.16.8.0-56.58.1~22.04.16.8.0-57.59.1~22.04.16.8.0-58.60.1~22.04.16.8.0-59.61.1~22.04.16.8.0-62.65~22.04.16.8.0-63.66~22.04.16.8.0-64.67~22.04.16.8.0-71.71~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.16.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.16.8.0-106.106~22.04.16.8.0-107.107~22.04.16.8.0-110.110~22.04.16.8.0-111.111~22.04.16.8.0-117.117~22.04.16.8.0-124.124~22.04.1	6.8.0-134.134~22.04.1
`linux-starfive-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1	None known
`linux-starfive-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1	None known
`kernel-source` openSUSE:Tumbleweed From an advisory covering 29 CVEs	before 6.19.8-1.1	6.19.8-1.1
`dtb-aarch64` openSUSE:Leap 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-64kb` openSUSE:Leap 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-azure` openSUSE:Leap 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-default` openSUSE:Leap 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-default-base` openSUSE:Leap 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1.160000.2.8	6.12.0-160000.27.1.160000.2.8
`kernel-docs` openSUSE:Leap 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-kvmsmall` openSUSE:Leap 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-obs-build` openSUSE:Leap 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-obs-qa` openSUSE:Leap 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-rt` openSUSE:Leap 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-source` openSUSE:Leap 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-syms` openSUSE:Leap 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1
`kernel-zfcpdump` openSUSE:Leap 16.0 From an advisory covering 176 CVEs	before 6.12.0-160000.27.1	6.12.0-160000.27.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	CVE List, EUVD, NVD, OSV
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-71231 is a high vulnerability (CVSS 7.1) in Linux, published February 18, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. Fixed in linux-lts 6.12.73-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 101 package rows, 84 versions, 3,065 references and the rest of 28 source descriptions. The JSON record has them.