Every CVE Search/ Get API key

CVE-2026-23074

net/sched: Enforce that teql can only be used as root qdisc

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Enforce that teql can only be used as root qdisc

Design intent of teql is that it is only supposed to be used as root qdisc. We need to check for that constraint.

Although not important, I will describe the scenario that unearthed this issue for the curious.

GangMin Kim [email protected] managed to concot a scenario as follows:

ROOT qdisc 1:0 (QFQ) ├── class 1:1 (weight=15, lmax=16384) netem with delay 6.4s └── class 1:2 (weight=1, lmax=1514) teql

GangMin sends a packet which is enqueued to 1:1 (netem). Any invocation of dequeue by QFQ from this class will not return a packet until after 6.4s. In the meantime, a second packet is sent and it lands on 1:2. teql's enqueue will return success and this will activate class 1:2. Main issue is that teql only updates the parent visible qlen (sch->q.qlen) at dequeue. Since QFQ will only call dequeue if peek succeeds (and teql's peek always returns NULL), dequeue will never be called and thus the qlen will remain as 0. With that in mind, when GangMin updates 1:2's lmax value, the qfq_change_class calls qfq_deact_rm_from_agg. Since the child qdisc's qlen was not incremented, qfq fails to deactivate the class, but still frees its pointers from the aggregate. So when the first packet is rescheduled after 6.4 seconds (netem's delay), a dangling pointer is accessed causing GangMin's causing a UAF.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.19%Up 0.2 points since Feb 5, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.8

net/sched: Enforce that teql can only be used as root qdisc

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Enforce that teql can only be used as root qdisc

Design intent of teql is that it is only supposed to be used as root qdisc. We need to check for that constraint.

Although not important, I will describe the scenario that unearthed this issue for the curious.

GangMin Kim [email protected] managed to concot a scenario as follows:

ROOT qdisc 1:0 (QFQ) ├── class 1:1 (weight=15, lmax=16384) netem with delay 6.4s └── class 1:2 (weight=1, lmax=1514) teql

GangMin sends a packet which is enqueued to 1:1 (netem). Any invocation of dequeue by QFQ from this class will not return a packet until after 6.4s. In the meantime, a second packet is sent and it lands on 1:2. teql's enqueue will return success and this will activate class 1:2. Main issue is that teql only updates the parent visible qlen (sch->q.qlen) at dequeue. Since QFQ will only call dequeue if peek succeeds (and teql's peek always returns NULL), dequeue will never be called and thus the qlen will remain as 0. With that in mind, when GangMin updates 1:2's lmax value, the qfq_change_class calls qfq_deact_rm_from_agg. Since the child qdisc's qlen was not incremented, qfq fails to deactivate the class, but still frees its pointers from the aggregate. So when the first packet is rescheduled after 6.4 seconds (netem's delay), a dangling pointer is accessed causing GangMin's causing a UAF.

Record
CVE-2026-23074
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416, CWE-825
Updated
2026-11-02
EUVDEUVD-2026-5470 7.8

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Enforce that teql can only be used as root qdisc

Design intent of teql is that it is only supposed to be used as root qdisc. We need to check for that constraint.

Although not important, I will describe the scenario that unearthed this issue for the curious.

GangMin Kim [email protected] managed to concot a scenario as follows:

ROOT qdisc 1:0 (QFQ) ├── class 1:1 (weight=15, lmax=16384) netem with delay 6.4s └── class 1:2 (weight=1, lmax=1514) teql

GangMin sends a packet which is enqueued to 1:1 (netem). Any invocation of dequeue by QFQ from this class will not return a packet until after 6.4s. In the meantime, a second packet is sent and it lands on 1:2. teql's enqueue will return success and this will activate class 1:2. Main issue is that teql only updates the parent visible qlen (sch->q.qlen) at dequeue. Since QFQ will only call dequeue if peek succeeds (and teql's peek always returns NULL), dequeue will never be called and thus the qlen will remain as 0. With that in mind, when GangMin updates 1:2's lmax value, the qfq_change_class calls qfq_deact_rm_from_agg. Since the child qdisc's qlen was not incremented, qfq fails to deactivate the class, but still frees its pointers from the aggregate. So when the first packet is rescheduled after 6.4 seconds (netem's delay), a dangling pointer is accessed causing GangMin's causing a UAF.

Record
EUVD-2026-5470
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-7cwq-2xv8-7cqw 7.8

In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql...

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Enforce that teql can only be used as root qdisc

Design intent of teql is that it is only supposed to be used as root qdisc. We need to check for that constraint.

Although not important, I will describe the scenario that unearthed this issue for the curious.

GangMin Kim [email protected] managed to concot a scenario as follows:

ROOT qdisc 1:0 (QFQ) ├── class 1:1 (weight=15, lmax=16384) netem with delay 6.4s └── class 1:2 (weight=1, lmax=1514) teql

GangMin sends a packet which is enqueued to 1:1 (netem). Any invocation of dequeue by QFQ from this class will not return a packet until after 6.4s. In the meantime, a second packet is sent and it lands on 1:2. teql's enqueue will return success and this will activate class 1:2. Main issue is that teql only updates the parent visible qlen (sch->q.qlen) at dequeue. Since QFQ will only call dequeue if peek succeeds (and teql's peek always returns NULL), dequeue will never be called and thus the qlen will remain as 0. With that in mind, when GangMin updates 1:2's lmax value, the qfq_change_class calls qfq_deact_rm_from_agg. Since the child qdisc's qlen was not incremented, qfq fails to deactivate the class, but still frees its pointers from the aggregate. So when the first packet is rescheduled after 6.4 seconds (netem's delay), a dangling pointer is accessed causing GangMin's causing a UAF.

Record
GHSA-7cwq-2xv8-7cqw
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416, CWE-825
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Enforce that teql can only be used as root qdisc

Design intent of teql is that it is only supposed to be used as root qdisc. We need to check for that constraint.

Although not important, I will describe the scenario that unearthed this issue for the curious.

GangMin Kim [email protected] managed to concot a scenario as follows:

ROOT qdisc 1:0 (QFQ) ├── class 1:1 (weight=15, lmax=16384) netem with delay 6.4s └── class 1:2 (weight=1, lmax=1514) teql

GangMin sends a packet which is enqueued to 1:1 (netem). Any invocation of dequeue by QFQ from this class will not return a packet until after 6.4s. In the meantime, a second packet is sent and it lands on 1:2. teql's enqueue will return success and this will activate class 1:2. Main issue is that teql only updates the parent visible qlen (sch->q.qlen) at dequeue. Since QFQ will only call dequeue if peek succeeds (and teql's peek always returns NULL), dequeue will never be called and thus the qlen will remain as 0. With that in mind, when GangMin updates 1:2's lmax value, the qfq_change_class calls qfq_deact_rm_from_agg. Since the child qdisc's qlen was not incremented, qfq fails to deactivate the class, but still frees its pointers from the aggregate. So when the first packet is rescheduled after 6.4 seconds (netem's delay), a dangling pointer is accessed causing GangMin's causing a UAF.

Record
CVE-2026-23074
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416, CWE-825
Updated
2026-11-02
OSVBELL-CVE-2026-23074 7.8
Record
BELL-CVE-2026-23074
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

net/sched: Enforce that teql can only be used as root qdisc

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Enforce that teql can only be used as root qdisc

Design intent of teql is that it is only supposed to be used as root qdisc. We need to check for that constraint.

Although not important, I will describe the scenario that unearthed this issue for the curious.

GangMin Kim [email protected] managed to concot a scenario as follows:

ROOT qdisc 1:0 (QFQ) ├── class 1:1 (weight=15, lmax=16384) netem with delay 6.4s └── class 1:2 (weight=1, lmax=1514) teql

GangMin sends a packet which is enqueued to 1:1 (netem). Any invocation of dequeue by QFQ from this class will not return a packet until after 6.4s. In the meantime, a second packet is sent and it lands on 1:2. teql's enqueue will return success and this will activate class 1:2. Main issue is that teql only updates the parent visible qlen (sch->q.qlen) at dequeue. Since QFQ will only call dequeue if peek succeeds (and teql's peek always returns NULL), dequeue will never be called and thus the qlen will remain as 0. With that in mind, when GangMin updates 1:2's lmax value, the qfq_change_class calls qfq_deact_rm_from_agg. Since the child qdisc's qlen was not incremented, qfq fails to deactivate the class, but still frees its pointers from the aggregate. So when the first packet is rescheduled after 6.4 seconds (netem's delay), a dangling pointer is accessed causing GangMin's causing a UAF.

Record
CVE-2026-23074
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 44 moreShow less
OSVDEBIAN-CVE-2026-23074 7.8

In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as root qdisc Design intent of teql is that it is only supposed to be used as root qdisc. We need to check for that constraint. Although not important, I will describe the scenario that unearthed this issue for the curious. GangMin Kim [email protected] managed to concot a scenario as follows: ROOT qdisc 1:0 (QFQ) ├── class 1:1 (weight=15, lmax=16384) netem with delay 6.4s └── class 1:2 (weight=1, lmax=1514) teql GangMin sends a packet which is enqueued to 1:1 (netem). Any invocation of dequeue by QFQ from this class will not return a packet until after 6.4s. In the meantime, a second packet is sent and it lands on 1:2. teql's enqueue will return success and this will activate class 1:2. Main issue is that teql only updates the parent visible qlen (sch->q.qlen) at dequeue. Since QFQ will only call dequeue if peek succeeds (and teql's peek always returns NULL), dequeue will never be called and thus the qlen will remain as 0. With that in mind, when GangMin updates 1:2's lmax value, the qfq_change_class calls qfq_deact_rm_from_agg. Since the child qdisc's qlen was not incremented, qfq fails to deactivate the class, but still frees its pointers from the aggregate. So when the first packet is rescheduled after 6.4 seconds (netem's delay), a dangling pointer is accessed causing GangMin's causing a UAF.

Record
DEBIAN-CVE-2026-23074
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2580 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iomap: Fix possible overflow condition in iomap_write_delalloc_scan

folio_next_index() returns an unsigned long value which left shifted by PAGE_SHIFT could possibly cause an overflow on 32-bit system. Instead use folio_pos(folio) + folio_size(folio), which does this correctly.(CVE-2023-54285)

In the Linux kernel, the following vulnerability has been resolved:

bcache: fix NULL pointer in cache_set_flush()

  1. LINE#1794 - LINE#1887 is some codes about function of bch_cache_set_alloc().
  2. LINE#2078 - LINE#2142 is some codes about function of register_cache_set().
  3. register_cache_set() will call bch_cache_set_alloc() in LINE#2098.

1794 struct cache_set *bch_cache_set_alloc(struct cache_sb *sb) 1795 { ... 1860 if (!(c->devices = kcalloc(c->nr_uuids, sizeof(void *), GFP_KERNEL)) || 1861 mempool_init_slab_pool(&c->search, 32, bch_search_cache) || 1862 mempool_init_kmalloc_pool(&c->bio_meta, 2, 1863 sizeof(struct bbio) + sizeof(struct bio_vec) * 1864 bucket_pages(c)) || 1865 mempool_init_kmalloc_pool(&c->fill_iter, 1, iter_size) || 1866 bioset_init(&c->bio_split, 4, offsetof(struct bbio, bio), 1867 BIOSET_NEED_BVECS|BIOSET_NEED_RESCUER) || 1868 !(c->uuids = alloc_bucket_pages(GFP_KERNEL, c)) || 1869 !(c->moving_gc_wq = alloc_workqueue("bcache_gc", 1870 WQ_MEM_RECLAIM, 0)) || 1871 bch_journal_alloc(c) || 1872 bch_btree_cache_alloc(c) || 1873 bch_open_buckets_alloc(c) || 1874 bch_bset_sort_state_init(&c->sort, ilog2(c->btree_pages))) 1875 goto err; ^^^^^^^^ 1876 ... 1883 return c; 1884 err: 1885 bch_cache_set_unregister(c); ^^^^^^^^^^^^^^^^^^^^^^^^^^^ 1886 return NULL; 1887 } ... 2078 static const char *register_cache_set(struct cache *ca) 2079 { ... 2098 c = bch_cache_set_alloc(&ca->sb); 2099 if (!c) 2100 return err; ^^^^^^^^^^ ... 2128 ca->set = c; 2129 ca->set->cache[ca->sb.nr_this_dev] = ca; ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ... 2138 return NULL; 2139 err: 2140 bch_cache_set_unregister(c); 2141 return err; 2142 }

(1) If LINE#1860 - LINE#1874 is true, then do 'goto err'(LINE#1875) and call bch_cache_set_unregister()(LINE#1885). (2) As (1) return NULL(LINE#1886), LINE#2098 - LINE#2100 would return. (3) As (2) has returned, LINE#2128 - LINE#2129 would do not give the value to c->cache[], it means that c->cache[] is NULL.

LINE#1624 - LINE#1665 is some codes about function of cache_set_flush(). As (1), in LINE#1885 call bch_cache_set_unregister() ---> bch_cache_set_stop() ---> closure_queue() -.-> cache_set_flush() (as below LINE#1624)

1624 static void cache_set_flush(struct closure *cl) 1625 { ... 1654 for_each_cache(ca, c, i) 1655 if (ca->alloc_thread) ^^ 1656 kthread_stop(ca->alloc_thread); ... 1665 }

(4) In LINE#1655 ca is NULL(see (3)) in cache_set_flush() then the kernel crash occurred as below: [ 846.712887] bcache: register_cache() error drbd6: cannot allocate memory [ 846.713242] bcache: register_bcache() error : failed to register device [ 846.713336] bcache: cache_set_free() Cache set 2f84bdc1-498a-4f2f-98a7-01946bf54287 unregistered [ 846.713768] BUG: unable to handle kernel NULL pointer dereference at 00000000000009f8 [ 846.714790] PGD 0 P4D 0 [ 846.715129]…

Record
OESA-2026-2580
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2581 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: mvpp2: Prevent parser TCAM memory corruption

Protect the parser TCAM/SRAM memory, and the cached (shadow) SRAM information, from concurrent modifications.

Both the TCAM and SRAM tables are indirectly accessed by configuring an index register that selects the row to read or write to. This means that operations must be atomic in order to, e.g., avoid spreading writes across multiple rows. Since the shadow SRAM array is used to find free rows in the hardware table, it must also be protected in order to avoid TOCTOU errors where multiple cores allocate the same row.

This issue was detected in a situation where mvpp2_set_rx_mode() ran concurrently on two CPUs. In this particular case the MVPP2_PE_MAC_UC_PROMISCUOUS entry was corrupted, causing the classifier unit to drop all incoming unicast - indicated by the rx_classifier_drops counter.(CVE-2025-22060)

In the Linux kernel, the following vulnerability has been resolved:

mptcp: fix NULL pointer in can_accept_new_subflow

When testing valkey benchmark tool with MPTCP, the kernel panics in 'mptcp_can_accept_new_subflow' because subflow_req->msk is NULL.

Call trace:

mptcp_can_accept_new_subflow (./net/mptcp/subflow.c:63 (discriminator 4)) (P) subflow_syn_recv_sock (./net/mptcp/subflow.c:854) tcp_check_req (./net/ipv4/tcp_minisocks.c:863) tcp_v4_rcv (./net/ipv4/tcp_ipv4.c:2268) ip_protocol_deliver_rcu (./net/ipv4/ip_input.c:207) ip_local_deliver_finish (./net/ipv4/ip_input.c:234) ip_local_deliver (./net/ipv4/ip_input.c:254) ip_rcv_finish (./net/ipv4/ip_input.c:449) ...

According to the debug log, the same req received two SYN-ACK in a very short time, very likely because the client retransmits the syn ack due to multiple reasons.

Even if the packets are transmitted with a relevant time interval, they can be processed by the server on different CPUs concurrently). The 'subflow_req->msk' ownership is transferred to the subflow the first, and there will be a risk of a null pointer dereference here.

This patch fixes this issue by moving the 'subflow_req->msk' under the own_req == true conditional.

Note that the !msk check in subflow_hmac_valid() can be dropped, because the same check already exists under the own_req mpj branch where the code has been moved to.(CVE-2025-23145)

In the Linux kernel, the following vulnerability has been resolved:

mISDN: hfcpci: Fix warning when deleting uninitialized timer

With CONFIG_DEBUG_OBJECTS_TIMERS unloading hfcpci module leads to the following splat:

[ 250.215892] ODEBUG: assert_init not available (active state 0) object: ffffffffc01a3dc0 object type: timer_list hint: 0x0 [ 250.217520] WARNING: CPU: 0 PID: 233 at lib/debugobjects.c:612 debug_print_object+0x1b6/0x2c0 [ 250.218775] Modules linked in: hfcpci(-) mISDN_core [ 250.219537] CPU: 0 UID: 0 PID: 233 Comm: rmmod Not tainted 6.17.0-rc2-g6f713187ac98 #2 PREEMPT(voluntary) [ 250.220940] Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.222377] RIP: 0010:debug_print_object+0x1b6/0x2c0 [ 250.223131] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 41 56 48 8b 14 dd a0 4e 01 9f 48 89 ee 48 c7 c7 20 46 01 9f e8 cb 84d [ 250.225805] RSP: 0018:ffff888015ea7c08 EFLAGS: 00010286 [ 250.226608] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff9be93a95 [ 250.227708] RDX: 1ffff1100d945138 RSI: 0000000000000008 RDI: ffff88806ca289c0 [ 250.228993] RBP: ffffffff9f014a00 R08: 0000000000000001 R09: ffffed1002bd4f39 [ 250.230043] R10: ffff888015ea79cf R11: 0000000000000001 R12: 0000000000000001 [ 250.231185] R13: ffffffff9eea0520 R14: 0000000000000000 R15: ffff888015ea7cc8 [ 250.232454] FS: 00007f3208f01540(0000) GS:ffff8880caf5a000(0000) knlGS:0000000000000000 [ 250.233851] CS: 0010 DS: 0000 ES: 0000 CR0:…

Record
OESA-2026-2581
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2582 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

mISDN: hfcpci: Fix warning when deleting uninitialized timer

With CONFIG_DEBUG_OBJECTS_TIMERS unloading hfcpci module leads to the following splat:

[ 250.215892] ODEBUG: assert_init not available (active state 0) object: ffffffffc01a3dc0 object type: timer_list hint: 0x0 [ 250.217520] WARNING: CPU: 0 PID: 233 at lib/debugobjects.c:612 debug_print_object+0x1b6/0x2c0 [ 250.218775] Modules linked in: hfcpci(-) mISDN_core [ 250.219537] CPU: 0 UID: 0 PID: 233 Comm: rmmod Not tainted 6.17.0-rc2-g6f713187ac98 #2 PREEMPT(voluntary) [ 250.220940] Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.222377] RIP: 0010:debug_print_object+0x1b6/0x2c0 [ 250.223131] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 41 56 48 8b 14 dd a0 4e 01 9f 48 89 ee 48 c7 c7 20 46 01 9f e8 cb 84d [ 250.225805] RSP: 0018:ffff888015ea7c08 EFLAGS: 00010286 [ 250.226608] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff9be93a95 [ 250.227708] RDX: 1ffff1100d945138 RSI: 0000000000000008 RDI: ffff88806ca289c0 [ 250.228993] RBP: ffffffff9f014a00 R08: 0000000000000001 R09: ffffed1002bd4f39 [ 250.230043] R10: ffff888015ea79cf R11: 0000000000000001 R12: 0000000000000001 [ 250.231185] R13: ffffffff9eea0520 R14: 0000000000000000 R15: ffff888015ea7cc8 [ 250.232454] FS: 00007f3208f01540(0000) GS:ffff8880caf5a000(0000) knlGS:0000000000000000 [ 250.233851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.234856] CR2: 00007f32090a7421 CR3: 0000000004d63000 CR4: 00000000000006f0 [ 250.236117] Call Trace: [ 250.236599] <TASK> [ 250.236967] ? trace_irq_enable.constprop.0+0xd4/0x130 [ 250.237920] debug_object_assert_init+0x1f6/0x310 [ 250.238762] ? __pfx_debug_object_assert_init+0x10/0x10 [ 250.239658] ? __lock_acquire+0xdea/0x1c70 [ 250.240369] __try_to_del_timer_sync+0x69/0x140 [ 250.241172] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 250.242058] ? __timer_delete_sync+0xc6/0x120 [ 250.242842] ? lock_acquire+0x30/0x80 [ 250.243474] ? __timer_delete_sync+0xc6/0x120 [ 250.244262] __timer_delete_sync+0x98/0x120 [ 250.245015] HFC_cleanup+0x10/0x20 [hfcpci] [ 250.245704] __do_sys_delete_module+0x348/0x510 [ 250.246461] ? __pfx___do_sys_delete_module+0x10/0x10 [ 250.247338] do_syscall_64+0xc1/0x360 [ 250.247924] entry_SYSCALL_64_after_hwframe+0x77/0x7f

Fix this by initializing hfc_tl timer with DEFINE_TIMER macro. Also, use mod_timer instead of manual timeout update.(CVE-2025-39833)

In the Linux kernel, the following vulnerability has been resolved:

platform/x86/amd/pmc: Add support for Van Gogh SoC

The ROG Xbox Ally (non-X) SoC features a similar architecture to the Steam Deck. While the Steam Deck supports S3 (s2idle causes a crash), this support was dropped by the Xbox Ally which only S0ix suspend.

Since the handler is missing here, this causes the device to not suspend and the AMD GPU driver to crash while trying to resume afterwards due to a power hang.(CVE-2025-68334)

In the Linux kernel, the following vulnerability has been resolved:

team: Move team device type change at the end of team_port_add

Attempting to add a port device that is already up will expectedly fail, but not before modifying the team device header_ops.

In the case of the syzbot reproducer the gre0 device is already in state UP when it attempts to add it as a port device of team0, this fails but before that header_ops->create of team0 is changed from eth_header to ipgre_header in the call to team_dev_type_check_change.

Later when we end up in ipgre_header() struct ip_tunnel* points to nonsense as the private data of the device still holds a struct team.

Example sequence of iproute2 commands to reproduce the hang/BUG(): ip link add dev team0 type team ip link add dev gre0 type gre ip link set dev gre0 up ip link set dev gre0…

Record
OESA-2026-2582
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:3083 7.3

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:3083
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:3110 7.3

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:3110
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:3268 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:3268
CVSS 3.1
7.1 HighCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:3277 7.5

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:3277
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:3360 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:3360
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:3388 7.5

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:3388
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:3634 7.5

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:3634
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:3685 7.5

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:3685
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:3810 7.0

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:3810
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-23074 7.8

CVE-2026-23074 in linux - Patched by Root

Root has patched CVE-2026-23074 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-23074
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-23074 7.8

CVE-2026-23074 in linux - Patched by Root

Root has patched CVE-2026-23074 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-23074
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-23074 7.8

CVE-2026-23074 in linux - Patched by Root

Root has patched CVE-2026-23074 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-23074
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVROOT-OS-UBUNTU-2204-CVE-2026-23074 7.8

CVE-2026-23074 in linux - Patched by Root

Root has patched CVE-2026-23074 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-23074
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-23074 7.8

CVE-2026-23074 in linux - Patched by Root

Root has patched CVE-2026-23074 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-23074
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2026-23074 8.5

In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as root qdisc Design intent of teql is that it is only supposed to be used as root qdisc. We need to check for that constraint. Although not important, I will describe the scenario that unearthed this issue for the curious. GangMin Kim [email protected] managed to concot a scenario as follows: ROOT qdisc 1:0 (QFQ) ├── class 1:1 (weight=15, lmax=16384) netem with delay 6.4s └── class 1:2 (weight=1, lmax=1514) teql GangMin sends a packet which is enqueued to 1:1 (netem). Any invocation of dequeue by QFQ from this class will not return a packet until after 6.4s. In the meantime, a second packet is sent and it lands on 1:2. teql's enqueue will return success and this will activate class 1:2. Main issue is that teql only updates the parent visible qlen (sch->q.qlen) at dequeue. Since QFQ will only call dequeue if peek succeeds (and teql's peek always returns NULL), dequeue will never be called and thus the qlen will remain as 0. With that in mind, when GangMin updates 1:2's lmax value, the qfq_change_class calls qfq_deact_rm_from_agg. Since the child qdisc's qlen was not incremented, qfq fails to deactivate the class, but still frees its pointers from the aggregate. So when the first packet is rescheduled after 6.4 seconds (netem's delay), a dangling pointer is accessed causing GangMin's causing a UAF.

Record
UBUNTU-CVE-2026-23074
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:3083 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129)
  • kernel: Linux kernel:A use-after-free in bridge multicast in br_multicast_port_ctx_init (CVE-2025-38248)
  • kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
  • kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800)
  • kernel: Linux kernel: Use-after-free in teql queueing discipline can lead to privilege escalation (CVE-2026-23074)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:3083
Updated
2026-11-02
OSVALSA-2026:3110 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: page_pool: Fix use-after-free in page_pool_recycle_in_ring (CVE-2025-38129)
  • kernel: Linux kernel:A use-after-free in bridge multicast in br_multicast_port_ctx_init (CVE-2025-38248)
  • kernel: smc: Fix use-after-free in __pnet_find_base_ndev() (CVE-2025-40064)
  • kernel: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CVE-2025-68800)
  • kernel: Linux kernel: Use-after-free in teql queueing discipline can lead to privilege escalation (CVE-2026-23074)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:3110
Updated
2026-11-02
OSVAZL-77238 No score

CVE-2026-23074 affecting package kernel for versions less than 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Enforce that teql can only be used as root qdisc

Design intent of teql is that it is only supposed to be used as root qdisc. We need to check for that constraint.

Although not important, I will describe the scenario that unearthed this issue for the curious.

GangMin Kim [email protected] managed to concot a scenario as follows:

ROOT qdisc 1:0 (QFQ) ├── class 1:1 (weight=15, lmax=16384) netem with delay 6.4s └── class 1:2 (weight=1, lmax=1514) teql

GangMin sends a packet which is enqueued to 1:1 (netem). Any invocation of dequeue by QFQ from this class will not return a packet until after 6.4s. In the meantime, a second packet is sent and it lands on 1:2. teql's enqueue will return success and this will activate class 1:2. Main issue is that teql only updates the parent visible qlen (sch->q.qlen) at dequeue. Since QFQ will only call dequeue if peek succeeds (and teql's peek always returns NULL), dequeue will never be called and thus the qlen will remain as 0. With that in mind, when GangMin updates 1:2's lmax value, the qfq_change_class calls qfq_deact_rm_from_agg. Since the child qdisc's qlen was not incremented, qfq fails to deactivate the class, but still frees its pointers from the aggregate. So when the first packet is rescheduled after 6.4 seconds (netem's delay), a dangling pointer is accessed causing GangMin's causing a UAF.

Record
AZL-77238
Updated
2026-11-02
OSVCLSA-2026-1773046198 No score

kernel: Fix of 31 CVEs

  • smb3: fix for slab out of bounds on mount to ksmbd {CVE-2025-38728}
  • netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX {CVE-2025-38201}
  • ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729}
  • net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
  • tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. {CVE-2025-39913}
  • fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866}
  • KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration {CVE-2023-54296}
  • mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats {CVE-2025-68800}
  • net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
  • net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() {CVE-2023-54114}
  • isofs: Prevent the use of too small fid {CVE-2025-37780}
  • media: dvb-frontends: avoid stack overflow warnings with clang {CVE-2024-27075}
  • ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886}
  • HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494}
  • fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304}
  • HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824}
  • cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945}
  • ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269}
  • NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349}
  • pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574}
  • ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572}
  • fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702}
  • i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911}
  • wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891}
  • i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853}
  • media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680}
  • fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691}
  • fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322}
  • usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
  • mptcp: fix race condition in mptcp_schedule_work() {CVE-2025-40258}
  • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
Record
CLSA-2026-1773046198
Updated
2026-11-02
OSVCLSA-2026-1773047921 No score

kernel: Fix of 70 CVEs

  • wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
  • ASoC: topology: Fix references to freed memory {CVE-2024-41069}
  • net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739}
  • drivers: base: Free devm resources when unregistering a device {CVE-2023-53596}
  • usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
  • fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685}
  • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • ext4: fix use-after-free in ext4_orphan_cleanup {CVE-2022-50673}
  • xfrm: fix slab-use-after-free in decode_session6 {CVE-2023-53500}
  • net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538}
  • NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL {CVE-2023-53680}
  • perf/core: Exit early on perf_mmap() fail {CVE-2025-38565}
  • i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911}
  • fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271}
  • virtio_net: fix xdp_rxq_info bug after suspend/resume {CVE-2022-49687}
  • NFSD: Fix the behavior of READ near OFFSET_MAX {CVE-2022-48827}
  • usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022}
  • Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
  • Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
  • Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35967}
  • netfilter: nf_tables: prefer nft_chain_validate {CVE-2024-41042}
  • netfilter: validate user input for expected length {CVE-2024-35896}
  • erspan: do not use skb_mac_header() in ndo_start_xmit() {CVE-2023-53053}
  • scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
  • i40e: remove read access to debugfs files {CVE-2025-39901}
  • wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937}
  • Bluetooth: hci_sock: Prevent race in socket write iter and sock bind {CVE-2025-68305}
  • RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem {CVE-2025-38022}
  • netfilter: allow exp not to be removed in nf_ct_find_expectation {CVE-2023-52927}
  • dm-bufio: don't schedule in atomic context {CVE-2025-37928}
  • HID: multitouch: Add NULL check in mt_input_configured {CVE-2024-58020}
  • netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX {CVE-2025-38201}
  • fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866}
  • tracing/histograms: Add histograms to hist_vars if they have referenced variables {CVE-2023-53560}
  • netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619}
  • drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
  • KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() {CVE-2024-35791}
  • scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521}
  • dm cache: Fix UAF in destroy() {CVE-2022-50496}
  • xhci: Remove device endpoints from bandwidth list when freeing the device {CVE-2022-50470}
  • Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386}
  • mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats {CVE-2025-68800}
  • net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
  • igb: Do not bring the device up after non-fatal error {CVE-2024-50040}
  • wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891}
  • HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824}
  • fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304}
  • HID: multitouch: Correct devm device reference for hidinput input_dev name {CVE-2023-53454}
  • udf: Do not bother merging very long extents {CVE-2023-53506}
  • wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() {CVE-2022-50551}
  • ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587}
  • dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path…
Record
CLSA-2026-1773047921
Updated
2026-11-02
OSVCLSA-2026-1773048865 No score

kernel: Fix of 53 CVEs

  • xhci: Remove device endpoints from bandwidth list when freeing the device {CVE-2022-50470}
  • HID: multitouch: Add NULL check in mt_input_configured {CVE-2024-58020}
  • netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX {CVE-2025-38201}
  • fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866}
  • tracing/histograms: Add histograms to hist_vars if they have referenced variables {CVE-2023-53560}
  • netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619}
  • scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521}
  • dm cache: Fix UAF in destroy() {CVE-2022-50496}
  • Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386}
  • VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102}
  • sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240}
  • wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf {CVE-2023-53524}
  • xfrm: fix slab-use-after-free in decode_session6 {CVE-2023-53500}
  • ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587}
  • Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
  • Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
  • Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35967}
  • NFSD: Fix the behavior of READ near OFFSET_MAX {CVE-2022-48827}
  • NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL {CVE-2023-53680}
  • mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory {CVE-2025-39883}
  • fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685}
  • erspan: do not use skb_mac_header() in ndo_start_xmit() {CVE-2023-53053}
  • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
  • i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911}
  • scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
  • i40e: remove read access to debugfs files {CVE-2025-39901}
  • Bluetooth: hci_sock: Prevent race in socket write iter and sock bind {CVE-2025-68305}
  • RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem {CVE-2025-38022}
  • usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022}
  • netfilter: allow exp not to be removed in nf_ct_find_expectation {CVE-2023-52927}
  • dm-bufio: don't schedule in atomic context {CVE-2025-37928}
  • ACPI: EC: Fix oops when removing custom query handlers {CVE-2023-54244}
  • mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats {CVE-2025-68800}
  • net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
  • net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() {CVE-2023-54114}
  • igb: Do not bring the device up after non-fatal error {CVE-2024-50040}
  • HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494}
  • drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras {CVE-2023-53471}
  • wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891}
  • HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824}
  • fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304}
  • HID: multitouch: Correct devm device reference for hidinput input_dev name {CVE-2023-53454}
  • udf: Do not bother merging very long extents {CVE-2023-53506}
  • wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() {CVE-2022-50551}
  • dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path {CVE-2023-53604}
  • gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622}
  • iavf: Fix use-after-free in free_netdev {CVE-2023-53556}
  • cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945}
  • kernfs: fix use-after-free in __kernfs_remove {CVE-2022-50432}
  • net/sched: act_mirred: don't override retval if we already lost the skb…
Record
CLSA-2026-1773048865
Updated
2026-11-02
OSVCLSA-2026-1775224807 No score

Fix of 95 CVEs

  • CVE-2025-39683
    • tracing: Remove unneeded goto out logic {CVE-2025-39683}
    • tracing: Limit access to parser->buffer when trace_get_user failed {CVE-2025-39683}
  • CVE-2025-38079
    • crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
  • CVE-2025-38159
    • wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
  • CVE-2025-38211
    • RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
  • CVE-2025-38024
    • RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024}
  • CVE-2025-38103
    • HID: hyperv: Correctly access fields declared as __le16 {CVE-2025-38103}
    • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • CVE-2025-38157
    • wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}
  • CVE-2025-38230
    • jfs: add sanity check for agwidth in dbMount {CVE-2025-38230}
    • fs/jfs: consolidate sanity checking in dbMount {CVE-2025-38230}
    • jfs: validate AG parameters in dbMount() to prevent crashes {CVE-2025-38230}
  • CVE-2025-39955
    • tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-39955}
  • CVE-2025-38680
    • media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680}
  • CVE-2025-38708
    • drbd: add missing kref_get in handle_write_conflicts {CVE-2025-38708}
  • CVE-2025-39759
    • btrfs: qgroup: introduce quota mode {CVE-2025-39759}
    • btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
  • CVE-2025-38666
    • net: appletalk: Fix use-after-free in AARP proxy probe {CVE-2025-38666}
  • CVE-2025-40269
    • ALSA: usb-audio: Improve frames size computation {CVE-2025-40269}
    • ALSA: usb-audio: Replace s/frame/packet/ where appropriate {CVE-2025-40269}
    • ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269}
  • CVE-2025-40149
    • net: netdevice: Add operation ndo_sk_get_lower_dev {CVE-2025-40149}
    • net/tls: Device offload to use lowest netdevice in chain {CVE-2025-40149}
    • tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). {CVE-2025-40149}
  • CVE-2025-71089
    • iommu: disable SVA when CONFIG_X86 is set {CVE-2025-71089}
  • CVE-2026-23234
    • f2fs: fix to avoid UAF in f2fs_write_end_io() {CVE-2026-23234}
  • CVE-2026-23089
    • ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
  • CVE-2026-23074
    • net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
  • CVE-2026-23061
    • can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061}
  • CVE-2026-23060
    • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060}
  • CVE-2026-22997
    • net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts {CVE-2026-22997}
  • CVE-2026-22991
    • libceph: make free_choose_arg_map() resilient to partial allocation {CVE-2026-22991}
  • CVE-2026-22990
    • libceph: replace overzealous BUG_ON in osdmap_apply_incremental() {CVE-2026-22990}
  • CVE-2026-22978
    • wifi: avoid kernel-infoleak from struct iw_point {CVE-2026-22978}
  • CVE-2026-22977
    • net: sock: fix hardened usercopy panic in sock_recv_errqueue {CVE-2026-22977}
  • CVE-2025-71154
    • net: usb: rtl8150: fix memory leak on usb_submit_urb() failure {CVE-2025-71154}
  • CVE-2025-71085
    • ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() {CVE-2025-71085}
  • CVE-2025-68734
    • isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() {CVE-2025-68734}
  • CVE-2025-68349
    • NFSv4/pNFS: Clear…
Record
CLSA-2026-1775224807
Updated
2026-11-02
OSVCLSA-2026-1775655363 No score

kernel: Fix of 9 CVEs

  • ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570}
  • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • media: imon: reorganize serialization {CVE-2025-39993}
  • usb: xhci: Fix inverted ring_xrun_event check in handle_tx_event() {CVE-2025-37882}
  • Revert "VFS: Impose ordering on accesses of d_inode and d_flags"
  • Revert "VFS: Combine inode checks with d_is_negative() and d_is_positive() in pathwalk"
  • Revert "namei: d_is_negative() should be checked before ->d_seq validation"
  • Revert "namei: results of d_is_negative() should be checked after dentry revalidation"
  • Revert "namei: ->d_inode of a pinned dentry is stable only for positives"
  • scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193}
  • net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204}
  • net: add skb_header_pointer_careful() helper {CVE-2026-23204}
  • ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
  • NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349}
  • net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
Record
CLSA-2026-1775655363
Updated
2026-11-02
OSVCLSA-2026-1775657177 No score

kernel: Fix of 9 CVEs

  • ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570}
  • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • media: imon: reorganize serialization {CVE-2025-39993}
  • usb: xhci: Fix inverted ring_xrun_event check in handle_tx_event() {CVE-2025-37882}
  • Revert "VFS: Impose ordering on accesses of d_inode and d_flags"
  • Revert "VFS: Combine inode checks with d_is_negative() and d_is_positive() in pathwalk"
  • Revert "namei: d_is_negative() should be checked before ->d_seq validation"
  • Revert "namei: results of d_is_negative() should be checked after dentry revalidation"
  • Revert "namei: ->d_inode of a pinned dentry is stable only for positives"
  • scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193}
  • net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204}
  • net: add skb_header_pointer_careful() helper {CVE-2026-23204}
  • ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
  • NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349}
  • net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
Record
CLSA-2026-1775657177
Updated
2026-11-02
OSVCLSA-2026-1775657929 No score

kernel: Fix of 9 CVEs

  • ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570}
  • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • media: imon: reorganize serialization {CVE-2025-39993}
  • usb: xhci: Fix inverted ring_xrun_event check in handle_tx_event() {CVE-2025-37882}
  • Revert "VFS: Impose ordering on accesses of d_inode and d_flags"
  • Revert "VFS: Combine inode checks with d_is_negative() and d_is_positive() in pathwalk"
  • Revert "namei: d_is_negative() should be checked before ->d_seq validation"
  • Revert "namei: results of d_is_negative() should be checked after dentry revalidation"
  • Revert "namei: ->d_inode of a pinned dentry is stable only for positives"
  • scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193}
  • net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204}
  • net: add skb_header_pointer_careful() helper {CVE-2026-23204}
  • ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
  • NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349}
  • net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
Record
CLSA-2026-1775657929
Updated
2026-11-02
OSVCLSA-2026-1775745222 No score

kernel: Fix of 5 CVEs

  • net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve {CVE-2023-4623}
  • net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
  • ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
  • atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). {CVE-2025-39828}
  • net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
  • wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() {CVE-2025-38348}
Record
CLSA-2026-1775745222
Updated
2026-11-02
OSVCLSA-2026-1775745943 No score

kernel: Fix of 5 CVEs

  • net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve {CVE-2023-4623}
  • net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
  • ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
  • atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). {CVE-2025-39828}
  • net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
  • wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() {CVE-2025-38348}
Record
CLSA-2026-1775745943
Updated
2026-11-02
OSVCLSA-2026-1777637310 No score

Fix of 13 CVEs

  • CVE-2026-31431
    • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431}
    • crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431}
    • crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431}
    • crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431}
    • crypto: aead - prevent using AEADs without setting key
    • crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
    • crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431}
    • crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431}
    • crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
    • crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431}
    • crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431}
  • CVE-2022-49267
    • mmc: core: Do not export MMC_NAME= and MODALIAS=mmc:block for SDIO cards {CVE-2022-49267}
    • mmc: core: Export device/vendor ids from Common CIS for SDIO cards {CVE-2022-49267}
    • mmc: sdio: Extend sdio_config_attr macro and use it also for modalias {CVE-2022-49267}
    • mmc: sdio: Parse CISTPL_VERS_1 major and minor revision numbers {CVE-2022-49267}
  • CVE-2026-23089
    • ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
  • CVE-2026-23074
    • net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
  • CVE-2025-39853
    • i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853}
  • CVE-2025-38677
    • f2fs: fix to avoid out-of-boundary access in dnode page {CVE-2025-38677}
  • CVE-2025-38652
    • f2fs: fix to avoid out-of-boundary access in devs.path {CVE-2025-38652}
  • CVE-2025-38415
    • Squashfs: check return result of sb_min_blocksize {CVE-2025-38415}
  • CVE-2025-38226
    • media: vivid: Change the siize of the composing {CVE-2025-38226}
  • CVE-2025-38211
    • RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
  • CVE-2023-53075
    • ftrace: Fix invalid address access in lookup_rec() when index >= FTRACE_MAX_RECORDS {CVE-2023-53075}
  • CVE-2023-53322
    • scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
  • CVE-2025-71162
    • dmaengine: tegra-adma: Fix use-after-free {CVE-2025-71162}
  • Miscellaneous upstream changes
    • tuxcare: update version
Record
CLSA-2026-1777637310
Updated
2026-11-02
OSVCLSA-2026-1777643521 No score

Fix of 13 CVEs

[ Ubuntu: 4.15.0-255.266 ]

  • CVE-2026-31431
    • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431}
    • crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431}
    • crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431}
    • crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431}
    • crypto: aead - prevent using AEADs without setting key
    • crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
    • crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431}
    • crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431}
    • crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
    • crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431}
    • crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431}
  • CVE-2022-49267
    • mmc: core: Do not export MMC_NAME= and MODALIAS=mmc:block for SDIO cards {CVE-2022-49267}
    • mmc: core: Export device/vendor ids from Common CIS for SDIO cards {CVE-2022-49267}
    • mmc: sdio: Extend sdio_config_attr macro and use it also for modalias {CVE-2022-49267}
    • mmc: sdio: Parse CISTPL_VERS_1 major and minor revision numbers {CVE-2022-49267}
  • CVE-2026-23089
    • ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
  • CVE-2026-23074
    • net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
  • CVE-2025-39853
    • i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853}
  • CVE-2025-38677
    • f2fs: fix to avoid out-of-boundary access in dnode page {CVE-2025-38677}
  • CVE-2025-38652
    • f2fs: fix to avoid out-of-boundary access in devs.path {CVE-2025-38652}
  • CVE-2025-38415
    • Squashfs: check return result of sb_min_blocksize {CVE-2025-38415}
  • CVE-2025-38226
    • media: vivid: Change the siize of the composing {CVE-2025-38226}
  • CVE-2025-38211
    • RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
  • CVE-2023-53075
    • ftrace: Fix invalid address access in lookup_rec() when index >= FTRACE_MAX_RECORDS {CVE-2023-53075}
  • CVE-2023-53322
    • scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
  • CVE-2025-71162
    • dmaengine: tegra-adma: Fix use-after-free {CVE-2025-71162}
  • Miscellaneous upstream changes
    • tuxcare: update version
Record
CLSA-2026-1777643521
Updated
2026-11-02
OSVCLSA-2026-1787304608 No score

kernel-uek: Fix of 34 CVEs

  • Rebased onto Oracle UEK base 5.4.17-2136.357.2.el7uek
  • sctp: don't free the ASCONF's own transport in DEL-IP processing {CVE-2026-64564}
  • ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison {CVE-2026-53309}
  • ocfs2/dlm: validate qr_numregions in dlm_match_regions() {CVE-2026-53043}
  • ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
  • ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
  • NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
  • fuse: re-lock request before returning from fuse_ref_folio() {CVE-2026-64266}
  • scsi: isci: Fix use-after-free in device removal path {CVE-2026-64103}
  • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060}
  • futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock {CVE-2026-53166}
  • net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
  • scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}
  • i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
  • Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532}
  • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY {CVE-2026-31597}
  • netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • xfrm_user: fix info leak in build_mapping() {CVE-2026-43089}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116}
  • e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093}
  • ALSA: usb-audio: Use correct version for UAC3 header validation {CVE-2026-23318}
  • nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}
  • Squashfs: check metadata block offset is within range {CVE-2026-23388}
  • net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled {CVE-2026-23381}
  • wifi: mac80211: fix NULL deref in mesh_matches_local() {CVE-2026-23396}
  • icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398}
  • HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them {CVE-2026-23382}
  • net: usb: kalmia: validate USB endpoints {CVE-2026-23365}
  • wifi: radiotap: reject radiotap with unknown bits {CVE-2026-23367}
  • drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() {CVE-2026-23356}
  • batman-adv: reject oversized global TT response buffers {CVE-2026-31659}
  • drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206}
  • net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040}
  • ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602}
  • nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405}
  • sysctl: Fix data races in proc_douintvec(). {CVE-2022-49641}
  • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778}
  • atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}
  • fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866}
  • usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
  • crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
  • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint {CVE-2025-22083}
  • mm:…
Record
CLSA-2026-1787304608
Updated
2026-11-02
OSVLSN-0122-1 No score

Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix use after free in midcomms commit While working on processing dlm message in softirq context I experienced the following KASAN use-after-free warning: .

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() This patch fixes a NULL pointer dereference bug in brcmfmac that occurs when a high 'sd_sgentry_align' value applies (e.g. 512) and a lot of queued SKBs are sent from the pkt queue.

In the Linux kernel, the following vulnerability has been resolved: padata: fix UAF in padata_reorder A bug was found when run ltp test: BUG: KASAN: slab-use-after-free in padata_find_next+0x29/0x1a0 Read of size 4 at addr ffff88bbfe003524 by task kworker/u113:2/3039206 CPU: 0 PID: 3039206 Comm: kworker/u113:2 Kdump: loaded Not tainted 6.6.0+ Workqueue: pdecrypt_parallel padata_parallel_worker Call Trace: <TASK> dump_stack_lvl+0x32/0x50 print_address_description.constprop.0+0x6b/0x3d0 print_report+0xdd/0x2c0 kasan_report+0xa5/0xd0 padata_find_next+0x29/0x1a0 padata_reorder+0x131/0x220 padata_parallel_worker+0x3d/0xc0 process_one_work+0x2ec/0x5a0 If 'mdelay(10)' is added before calling 'padata_find_next' in the 'padata_reorder' function, this issue could be reproduced easily with ltp test (pcrypt_aead01).

In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev().

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_deregister() In multichannel mode, UAF issue can occur in session_deregister when the second channel sets up a session through the connection of the first channel.

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix geneve_opt type confusion addition When handling multiple NFTA_TUNNEL_KEY_OPTS_GENEVE attributes, the parsing logic should place every geneve_opt structure one by one compactly.

In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past the 'end' entry.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __smb2_lease_break_noti() Move tcp_transport free to ksmbd_conn_free.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krb_authenticate krb_authenticate frees sess->user and does not set the pointer to NULL.

In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer.)(CVE-2025-37823).

In the Linux kernel, the following vulnerability has been resolved: jbd2: remove wrong sb->s_sequence check Journal emptiness is not determined by sb->s_sequence .

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mode1 reset crash issue If HW scheduler hangs and mode1 reset is used to recover GPU, KFD signal user space to abort the processes.

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xe_migrate_clear The intent of the error path in xe_migrate_clear is to wait on locally generated fence and then return.

In the Linux kernel, the following vulnerability has been resolved: net_sched: qfq: Fix double list add in class with netem as child qdisc As described in Gerrard's report .

In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As described in Gerrard's report .

In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: Fix unlocked deletion of default FDB entry When a VNI is deleted…

Record
LSN-0122-1
Updated
2026-11-03
OSVMGASA-2026-0097 No score

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.130 fixes bugs and vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel.

Record
MGASA-2026-0097
Updated
2026-11-02
OSVMGASA-2026-0098 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.130 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2026-0098
Updated
2026-11-02
OSVopenSUSE-SU-2026:20416-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues.

The following security issues were fixed:

  • CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
  • CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
  • CVE-2025-40230: mm: prevent poison consumption when splitting THP (bsc#1254817).
  • CVE-2025-68173: ftrace: Fix softlockup in ftrace_module_enable (bsc#1255311).
  • CVE-2025-68186: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (bsc#1255144).
  • CVE-2025-68292: mm/memfd: fix information leak in hugetlb folios (bsc#1255148).
  • CVE-2025-68295: smb: client: fix memory leak in cifs_construct_tcon() (bsc#1255129).
  • CVE-2025-68329: tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (bsc#1255490).
  • CVE-2025-68371: scsi: smartpqi: Fix device resources accessed after device removal (bsc#1255572).
  • CVE-2025-68745: scsi: qla2xxx: Clear cmds after chip reset (bsc#1255721).
  • CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
  • CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (bsc#1256679).
  • CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
  • CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
  • CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
  • CVE-2025-71134: mm/page_alloc: change all pageblocks migrate type on coalescing (bsc#1256732).
  • CVE-2025-71161: dm-verity: disable recursive forward error correction (bsc#1257174).
  • CVE-2025-71184: btrfs: tracepoints: use btrfs_root_id() to get the id of a root (bsc#1257635).
  • CVE-2025-71193: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend (bsc#1257686).
  • CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
  • CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228).
  • CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209).
  • CVE-2026-23003: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (bsc#1257246).
  • CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
  • CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).
  • CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
  • CVE-2026-23022: idpf: fix memory leak in idpf_vc_core_deinit() (bsc#1257581).
  • CVE-2026-23023: idpf: fix memory leak in idpf_vport_rel() (bsc#1257556).
  • CVE-2026-23024: idpf: fix memory leak of flow steer list on rmmod (bsc#1257572).
  • CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).
  • CVE-2026-23042: idpf: fix aux device unplugging when rdma is not supported by vport (bsc#1257705).
  • CVE-2026-23047: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682).
  • CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718).
  • CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
  • CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
  • CVE-2026-23066: rxrpc: Fix recvmsg() unconditional requeue (bsc#1257726).
  • CVE-2026-23068: spi: spi-sprd-adi: Fix double free in probe error path (bsc#1257805).
  • CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
  • CVE-2026-23070: Octeontx2-af: Add proper checks for fwdata (bsc#1257709).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
  • CVE-2026-23083: tools: ynl-gen: use big-endian netlink attribute types (bsc#1257745).
  • CVE-2026-23084:…
Record
openSUSE-SU-2026:20416-1
Updated
2026-11-02
OSVSUSE-SU-2026:0617-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785).
  • CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594).
  • CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255576).
  • CVE-2023-53215: sched/fair: Don't balance task to its current running CPU (bsc#1250397).
  • CVE-2023-53254: cacheinfo: Fix shared_cpu_map to handle shared caches at different levels (bsc#1249871).
  • CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler() (bsc#1254751).
  • CVE-2023-54142: gtp: Fix use-after-free in __gtp_encap_destroy() (bsc#1256095).
  • CVE-2023-54243: netfilter: ebtables: fix table blob use-after-free (bsc#1255908).
  • CVE-2024-28956: x86/its: Enumerate Indirect Target Selection (ITS) bug (bsc#1242006).
  • CVE-2024-36348: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
  • CVE-2024-36349: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
  • CVE-2024-36350: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
  • CVE-2024-36357: x86/bugs: Add a Transient Scheduler Attacks mitigation (bsc#1238896).
  • CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185).
  • CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
  • CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
  • CVE-2025-38068: crypto: lzo - Fix compression buffer overrun (bsc#1245210).
  • CVE-2025-38129: page_pool: fix inconsistency for page_pool_ring_lock() (bsc#1245723).
  • CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1245751).
  • CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
  • CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
  • CVE-2025-40019: crypto: essiv - Check ssize for decryption and in-place encryption (bsc#1252678).
  • CVE-2025-40139: net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (bsc#1253409).
  • CVE-2025-40215: kABI: xfrm: delete x->tunnel as we delete x (bsc#1254959).
  • CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
  • CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
  • CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842).
  • CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1254843).
  • CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894).
  • CVE-2025-40280: tipc: Fix use-after-free in tipc_mon_reinit_self() (bsc#1254847).
  • CVE-2025-40300: Documentation/hw-vuln: Add VMSCAPE documentation (bsc#1247483).
  • CVE-2025-40331: sctp: Prevent TOCTOU out-of-bounds write (bsc#1254615).
  • CVE-2025-68183: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (bsc#1255251).
  • CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255377).
  • CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
  • CVE-2025-68312: usbnet: Prevents free active kevent (bsc#1255171).
  • CVE-2025-68732: gpu: host1x: Fix race in syncpt alloc/free (bsc#1255688).
  • CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
  • CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).
  • CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
  • CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
  • CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744).
  • CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779).
  • CVE-2026-22999: net/sched: sch_qfq: do not free…
Record
SUSE-SU-2026:0617-1
Updated
2026-11-02
OSVSUSE-SU-2026:0928-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255163).
  • CVE-2023-53827: Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (bsc#1255049).
  • CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
  • CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
  • CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
  • CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
  • CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
  • CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
  • CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
  • CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
  • CVE-2026-23204: net: add skb_header_pointer_careful() helper (bsc#1258340).

The following non security issues were fixed:

  • apparmor: fix differential encoding verification (bsc#1258849).
  • apparmor: Fix double free of ns_name in aa_replace_profiles() (bsc#1258849).
  • apparmor: fix memory leak in verify_header (bsc#1258849).
  • apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (bsc#1258849).
  • apparmor: fix side-effect bug in match_char() macro usage (bsc#1258849).
  • apparmor: fix unprivileged local user can do privileged policy management (bsc#1258849).
  • apparmor: fix: limit the number of levels of policy namespaces (bsc#1258849).
  • apparmor: replace recursive profile removal with iterative approach (bsc#1258849).
  • apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1258849).
Record
SUSE-SU-2026:0928-1
Updated
2026-11-02
OSVSUSE-SU-2026:0961-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255163).
  • CVE-2023-53827: Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (bsc#1255049).
  • CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
  • CVE-2025-38224: can: kvaser_pciefd: refine error prone echo_skb_max handling logic (bsc#1246166).
  • CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size (bsc#1247177).
  • CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255401).
  • CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
  • CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
  • CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
  • CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
  • CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
  • CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).
  • CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management
  • CVE-2026-23269: apparmor: validate DFA start states are in bounds in unpack_pdb

The following non-security bugs were fixed:

  • Disable CONFIG_NET_SCH_ATM (jsc#PED-12836).
  • apparmor: Fix double free of ns_name in aa_replace_profiles() (bsc#1258849).
  • apparmor: fix differential encoding verification (bsc#1258849).
  • apparmor: fix memory leak in verify_header (bsc#1258849).
  • apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (bsc#1258849).
  • apparmor: fix side-effect bug in match_char() macro usage (bsc#1258849).
  • apparmor: fix unprivileged local user can do privileged policy management (bsc#1258849).
  • apparmor: fix: limit the number of levels of policy namespaces (bsc#1258849).
  • apparmor: replace recursive profile removal with iterative approach (bsc#1258849).
  • apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1258849).
Record
SUSE-SU-2026:0961-1
Updated
2026-11-02
OSVSUSE-SU-2026:0962-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
  • CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
  • CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
  • CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
  • CVE-2025-40201: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
  • CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
  • CVE-2025-68283: libceph: replace BUG_ON with bounds check for map->max_osd (bsc#1255379).
  • CVE-2025-68295: smb: client: fix memory leak in cifs_construct_tcon() (bsc#1255129).
  • CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530).
  • CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811).
  • CVE-2025-68736: landlock: Fix handling of disconnected directories (bsc#1255698).
  • CVE-2025-68778: btrfs: don't log conflicting inode if it's a dir moved in the current transaction (bsc#1256683).
  • CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
  • CVE-2025-68810: KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (bsc#1256679).
  • CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
  • CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
  • CVE-2025-71113: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (bsc#1256716).
  • CVE-2025-71125: tracing: Do not register unsupported perf events (bsc#1256784).
  • CVE-2025-71126: mptcp: reset fallback status gracefully at disconnect() time (bsc#1256755).
  • CVE-2025-71148: net/handshake: restore destructor on submit failure (bsc#1257159).
  • CVE-2025-71184: btrfs: fix NULL dereference on root when tracing inode eviction (bsc#1257635).
  • CVE-2025-71194: btrfs: fix deadlock in wait_current_trans() due to ignored transaction type (bsc#1257687).
  • CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
  • CVE-2026-22979: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228).
  • CVE-2026-22982: net: mscc: ocelot: Fix crash when adding interface under a lag (bsc#1257179).
  • CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209).
  • CVE-2026-23003: geneve: Fix incorrect inner network header offset when innerprotoinherit is set (bsc#1257246).
  • CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
  • CVE-2026-23010: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).
  • CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
  • CVE-2026-23023: idpf: fix memory leak in idpf_vport_rel() (bsc#1257556).
  • CVE-2026-23035: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559).
  • CVE-2026-23053: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718).
  • CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
  • CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
  • CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
  • CVE-2026-23069: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755).
  • CVE-2026-23070: Octeontx2-af: Add proper checks for fwdata (bsc#1257709).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
  • CVE-2026-23083: fou: Don't allow 0 for FOU_ATTR_IPPROTO (bsc#1257745).
  • CVE-2026-23084: be2net: Fix NULL pointer…
Record
SUSE-SU-2026:0962-1
Updated
2026-11-02
OSVSUSE-SU-2026:1003-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer (bsc#1238917).
  • CVE-2025-40242: gfs2: Fix unlikely race in gdlm_put_lock (bsc#1255075).
  • CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
  • CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
  • CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
  • CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
  • CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
  • CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258518).
  • CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1258850).
  • CVE-2026-23269: apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1259857).

The following non-security bugs were fixed:

  • Disable CONFIG_NET_SCH_ATM (jsc#PED-12836).
  • apparmor: Fix double free of ns_name in aa_replace_profiles() (bsc#1258849).
  • apparmor: fix differential encoding verification (bsc#1258849).
  • apparmor: fix memory leak in verify_header (bsc#1258849).
  • apparmor: fix missing bounds check on DEFAULT table in verify_dfa() (bsc#1258849).
  • apparmor: fix race between freeing data and fs accessing it (bsc#1258849).
  • apparmor: fix race on rawdata dereference (bsc#1258849).
  • apparmor: fix side-effect bug in match_char() macro usage (bsc#1258849).
  • apparmor: fix unprivileged local user can do privileged policy management (bsc#1258849).
  • apparmor: fix: limit the number of levels of policy namespaces (bsc#1258849).
  • apparmor: replace recursive profile removal with iterative approach (bsc#1258849).
  • apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1258849).
Record
SUSE-SU-2026:1003-1
Updated
2026-11-02
OSVSUSE-SU-2026:1041-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992).
  • CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998).
  • CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966).
  • CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911).
  • CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924).
  • CVE-2025-40253: s390/ctcm: Fix double-kfree (bsc#1255084).
  • CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645).
  • CVE-2025-71113: crypto: af_alg - zero initialize memory allocated via sock_kmalloc (bsc#1256716).
  • CVE-2025-71231: crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode (bsc#1258424).
  • CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231).
  • CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
  • CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
  • CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790).
  • CVE-2026-23111: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258181).
  • CVE-2026-23141: btrfs: send: check for inline extents in range_is_hole_in_parent() (bsc#1258377).
  • CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
  • CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).
  • CVE-2026-23209: macvlan: fix error recovery in macvlan_common_newlink() (bsc#1258518).
  • CVE-2026-23214: btrfs: reject new transactions if the fs is fully read-only (bsc#1258464).
  • CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1258850).
  • CVE-2026-23269: apparmor: validate DFA start states are in bounds in unpack_pdb (bsc#1259857).

The following non-security bugs were fixed:

  • Add bugnumber to existing mana change (bsc#1251971).
  • Drivers: hv: fix missing kernel-doc description for 'size' in request_arr_init() (git-fixes).
  • Drivers: hv: remove stale comment (git-fixes).
  • Drivers: hv: vmbus: Clean up sscanf format specifier in target_cpu_store() (git-fixes).
  • Drivers: hv: vmbus: Fix sysfs output format for ring buffer index (git-fixes).
  • Drivers: hv: vmbus: Fix typos in vmbus_drv.c (git-fixes).
  • PCI: hv: Correct a comment (git-fixes).
  • PCI: hv: Remove unnecessary flex array in struct pci_packet (git-fixes).
  • PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
  • PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
  • RDMA/mana_ib: Access remote atomic for MRs (bsc#1251135).
  • RDMA/mana_ib: Add EQ creation for rnic adapter (git-fixes).
  • RDMA/mana_ib: Add device statistics support (git-fixes).
  • RDMA/mana_ib: Add device-memory support (git-fixes).
  • RDMA/mana_ib: Add port statistics support (git-fixes).
  • RDMA/mana_ib: Add support of 4M, 1G, and 2G pages (git-fixes).
  • RDMA/mana_ib: Add support of mana_ib for RNIC and ETH nic (git-fixes).
  • RDMA/mana_ib: Adding and deleting GIDs (git-fixes).
  • RDMA/mana_ib: Allow registration of DMA-mapped memory in PDs (git-fixes).
  • RDMA/mana_ib: Configure mac address in RNIC (git-fixes).
  • RDMA/mana_ib: Create and destroy RC QP (git-fixes).
  • RDMA/mana_ib: Create and destroy UD/GSI QP (git-fixes).
  • RDMA/mana_ib: Create and destroy rnic adapter (git-fixes).
  • RDMA/mana_ib: Drain send wrs of GSI QP (git-fixes).
  • RDMA/mana_ib: Enable RoCE on port 1 (git-fixes).
  • RDMA/mana_ib: Extend…
Record
SUSE-SU-2026:1041-1
Updated
2026-11-02

Affected products

Show 3 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-core
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-cross-headers
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-debug
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-debug-core
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-debug-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-debug-modules
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-doc
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-headers
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-modules
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-modules-extra
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-tools
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-tools-libs
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-zfcpdump
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
perf
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
python3-perf
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.el8_10
4.18.0-553.107.1.el8_10
kernel-rt
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.rt7.448.el8_10
4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-core
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.rt7.448.el8_10
4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-debug
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.rt7.448.el8_10
4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-debug-core
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.rt7.448.el8_10
4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-debug-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.rt7.448.el8_10
4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-debug-modules
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.rt7.448.el8_10
4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.rt7.448.el8_10
4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.rt7.448.el8_10
4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-modules
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.rt7.448.el8_10
4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-modules-extra
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.18.0-553.107.1.rt7.448.el8_10
4.18.0-553.107.1.rt7.448.el8_10
kernel
Azure Linux:3
 before 6.6.126.1-1
6.6.126.1-1
linux-lts
Alpaquita:23
 6.1.161-r0 up to 6.1.163-r0
6.1.163-r0
linux-lts
Alpaquita:25
 6.12.66-r0 up to 6.12.73-r0
6.12.73-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-core
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-cross-headers
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-debug
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-debug-core
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-debug-devel
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-debug-modules
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-debug-modules-extra
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-debug-modules-internal
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-devel
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-headers
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-ipaclones-internal
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-modules
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-modules-extra
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-modules-internal
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-selftests-internal
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-tools
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-tools-libs
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
kernel-tools-libs-devel
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
perf
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
python3-perf
TuxCare:CentOS-Stream:8
From an advisory covering 31 CVEs
 before 4.18.0-553.6.1.el8_10.tuxcare.els16
4.18.0-553.6.1.el8_10.tuxcare.els16
bpftool
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-core
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-cross-headers
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-debug
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-debug-core
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-debug-devel
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-debug-modules
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-debug-modules-extra
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-debug-modules-internal
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-devel
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-headers
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-ipaclones-internal
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-modules
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-modules-extra
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-modules-internal
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-selftests-internal
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-tools
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-tools-libs
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
kernel-tools-libs-devel
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
perf
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
python3-perf
TuxCare:CentOS:8.5
From an advisory covering 70 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els35
4.18.0-348.7.1.el8_5.tuxcare.els35
bpftool
TuxCare:CentOS:8.4
From an advisory covering 53 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els35
4.18.0-305.25.1.el8_4.tuxcare.els35
kernel
TuxCare:CentOS:8.4
From an advisory covering 53 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els35
4.18.0-305.25.1.el8_4.tuxcare.els35
kernel-core
TuxCare:CentOS:8.4
From an advisory covering 53 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els35
4.18.0-305.25.1.el8_4.tuxcare.els35
kernel-cross-headers
TuxCare:CentOS:8.4
From an advisory covering 53 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els35
4.18.0-305.25.1.el8_4.tuxcare.els35
kernel-debug
TuxCare:CentOS:8.4
From an advisory covering 53 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els35
4.18.0-305.25.1.el8_4.tuxcare.els35
kernel-debug-core
TuxCare:CentOS:8.4
From an advisory covering 53 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els35
4.18.0-305.25.1.el8_4.tuxcare.els35
kernel-debug-devel
TuxCare:CentOS:8.4
From an advisory covering 53 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els35
4.18.0-305.25.1.el8_4.tuxcare.els35
kernel-debug-modules
TuxCare:CentOS:8.4
From an advisory covering 53 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els35
4.18.0-305.25.1.el8_4.tuxcare.els35
kernel-debug-modules-extra
TuxCare:CentOS:8.4
From an advisory covering 53 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els35
4.18.0-305.25.1.el8_4.tuxcare.els35
Kernel
Linux
 2.6.12 up to 5.10.249, 5.11.0 up to 5.15.199, 5.16.0 up to 6.1.162, 6.2.0 up to 6.6.122, 6.7.0 up to 6.12.68, 6.13.0 up to 6.18.8
5.10.2495.15.1996.1.1626.6.1226.12.686.18.8
linux
Debian:12
 before 6.1.162-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 41 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.162-1
linux
Debian:13
 before 6.12.69-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 5 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-1~bpo12+1
6.12.69-1
linux
Debian:14
 before 6.18.8-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
6.18.8-1
linux
Debian:11
From an advisory covering 165 CVEs
 before 5.10.249-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 43 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.234-15.10.237-15.10.244-15.10.247-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.249-1
linux-6.1
Debian:11
From an advisory covering 252 CVEs
 before 6.1.162-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1
Show 9 moreShow less
6.1.128-1~deb11u16.1.129-1~deb11u16.1.137-1~deb11u16.1.140-1~deb11u16.1.147-1~deb11u16.1.148-1~deb11u16.1.153-1~deb11u16.1.158-1~deb11u16.1.159-1~deb11u1
6.1.162-1~deb11u1
linux
Debian:13
From an advisory covering 251 CVEs
 before 6.12.69-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 5 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-1~bpo12+1
6.12.69-1
linux
Debian:12
From an advisory covering 252 CVEs
 before 6.1.162-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 41 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.162-1
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1197.210~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1197.210~16.04.1
linux-aws
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.4.0-1197.212, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
4.4.0-1197.212
linux-azure
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1208.223~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1208.223~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1190.207~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1190.207~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-260.272~16.04.2, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-260.272~16.04.2
linux
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.4.0-288.322, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-288.322
linux-aws
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1197.210, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1197.210
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1207.222, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
4.15.0-1207.222
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1190.207, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
4.15.0-1190.207
linux
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-260.272, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-260.272
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 5.4.0-244.264~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-244.264~18.04.1
linux-oracle
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1160.171, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
4.15.0-1160.171
linux
Ubuntu:Pro:20.04:LTS
From an advisory covering 150 CVEs
 before 5.4.0-244.264, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-244.264
linux-aws
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-1119.126, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71
5.15.0-1119.126
linux-aws-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1065.68~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 38 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.16.8.0-1060.63~22.04.16.8.0-1061.64~22.04.16.8.0-1062.65~22.04.26.8.0-1063.66~22.04.16.8.0-1064.67~22.04.1
6.8.0-1065.68~22.04.1
linux-azure
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-1125.134, plus listed versions
5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6
Show 45 moreShow less
5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1056.645.15.0-1057.655.15.0-1058.665.15.0-1059.675.15.0-1060.695.15.0-1061.705.15.0-1063.725.15.0-1064.735.15.0-1066.75
5.15.0-1125.134
linux-gcp
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-1120.130, plus listed versions
5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7
Show 45 moreShow less
5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.245.15.0-1019.255.15.0-1021.285.15.0-1022.295.15.0-1025.325.15.0-1026.335.15.0-1027.345.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1032.405.15.0-1034.425.15.0-1035.435.15.0-1036.445.15.0-1037.455.15.0-1038.465.15.0-1039.475.15.0-1040.485.15.0-1041.495.15.0-1042.505.15.0-1044.525.15.0-1045.535.15.0-1046.545.15.0-1047.555.15.0-1048.565.15.0-1049.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1055.635.15.0-1058.665.15.0-1059.675.15.0-1060.685.15.0-1062.705.15.0-1063.715.15.0-1064.725.15.0-1065.73
5.15.0-1120.130
linux-gcp-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1069.77~22.04.1, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1
Show 39 moreShow less
6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1054.57~22.04.16.8.0-1058.61~22.04.16.8.0-1060.63~22.04.16.8.0-1063.69~22.04.16.8.0-1064.72~22.04.16.8.0-1065.73~22.04.16.8.0-1066.74~22.04.16.8.0-1067.75~22.04.1
6.8.0-1069.77~22.04.1
linux
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-202.212, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
5.15.0-202.212
linux-hwe-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-138.138~22.04.1, plus listed versions
6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1
Show 31 moreShow less
6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.16.8.0-106.106~22.04.16.8.0-107.107~22.04.16.8.0-110.110~22.04.16.8.0-111.111~22.04.16.8.0-117.117~22.04.16.8.0-124.124~22.04.16.8.0-134.134~22.04.16.8.0-136.136~22.04.1
6.8.0-138.138~22.04.1
linux-gke
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-1115.121, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.55.15.0-1005.65.15.0-1006.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1010.135.15.0-1011.145.15.0-1014.175.15.0-1015.185.15.0-1016.195.15.0-1017.205.15.0-1019.235.15.0-1020.255.15.0-1023.285.15.0-1024.295.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1036.415.15.0-1037.425.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1041.465.15.0-1042.475.15.0-1044.495.15.0-1045.505.15.0-1046.515.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1054.595.15.0-1057.625.15.0-1058.635.15.0-1059.645.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70
5.15.0-1115.121
linux-ibm
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-1113.117, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.45.15.0-1005.55.15.0-1007.8
Show 45 moreShow less
5.15.0-1009.115.15.0-1010.125.15.0-1012.145.15.0-1013.155.15.0-1015.175.15.0-1017.205.15.0-1018.215.15.0-1021.245.15.0-1022.255.15.0-1023.265.15.0-1025.285.15.0-1026.295.15.0-1027.305.15.0-1028.315.15.0-1029.325.15.0-1030.335.15.0-1031.345.15.0-1032.355.15.0-1033.365.15.0-1034.375.15.0-1035.385.15.0-1036.395.15.0-1037.405.15.0-1038.415.15.0-1040.435.15.0-1041.445.15.0-1042.455.15.0-1043.465.15.0-1044.475.15.0-1045.485.15.0-1046.495.15.0-1047.505.15.0-1048.515.15.0-1049.525.15.0-1050.535.15.0-1053.565.15.0-1054.575.15.0-1055.585.15.0-1056.595.15.0-1057.605.15.0-1058.615.15.0-1059.625.15.0-1060.635.15.0-1061.645.15.0-1062.65
5.15.0-1113.117
linux-ibm-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1066.67~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1
Show 35 moreShow less
6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.16.8.0-1049.49~22.04.16.8.0-1050.50~22.04.16.8.0-1051.51~22.04.16.8.0-1052.52~22.04.16.8.0-1055.56~22.04.16.8.0-1057.58~22.04.16.8.0-1060.61~22.04.16.8.0-1061.62~22.04.16.8.0-1062.63~22.04.16.8.0-1063.64~22.04.1
6.8.0-1066.67~22.04.1
linux-lowlatency
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-197.207, plus listed versions
5.15.0-22.225.15.0-23.235.15.0-24.245.15.0-27.285.15.0-30.31
Show 45 moreShow less
5.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.535.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.885.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.955.15.0-87.965.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.1155.15.0-106.1165.15.0-107.1175.15.0-110.120
5.15.0-197.207
linux-aws
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1065.68, plus listed versions
6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8
Show 45 moreShow less
6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1023.256.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1035.376.8.0-1036.386.8.0-1038.406.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.446.8.0-1043.456.8.0-1044.466.8.0-1045.476.8.0-1046.496.8.0-1047.506.8.0-1050.536.8.0-1051.546.8.0-1052.556.8.0-1053.566.8.0-1055.586.8.0-1057.606.8.0-1060.636.8.0-1061.646.8.0-1062.65
6.8.0-1065.68
linux-azure
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1068.76, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6
Show 38 moreShow less
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.206.8.0-1018.216.8.0-1020.236.8.0-1021.256.8.0-1025.306.8.0-1026.316.8.0-1027.326.8.0-1028.336.8.0-1029.346.8.0-1030.356.8.0-1031.366.8.0-1034.396.8.0-1038.446.8.0-1040.466.8.0-1041.476.8.0-1042.486.8.0-1044.506.8.0-1046.526.8.0-1051.576.8.0-1052.586.8.0-1054.606.8.0-1056.626.8.0-1058.646.8.0-1059.656.8.0-1062.696.8.0-1063.716.8.0-1064.726.8.0-1065.736.8.0-1067.75
6.8.0-1068.76
linux-gcp
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1069.77, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6
Show 45 moreShow less
6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1034.366.8.0-1036.386.8.0-1037.396.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.456.8.0-1043.466.8.0-1044.476.8.0-1045.486.8.0-1046.496.8.0-1047.506.8.0-1048.516.8.0-1052.556.8.0-1053.566.8.0-1054.576.8.0-1055.586.8.0-1058.616.8.0-1060.636.8.0-1063.69
6.8.0-1069.77
linux
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-142.142, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 45 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.476.8.0-48.486.8.0-49.496.8.0-50.516.8.0-51.526.8.0-52.536.8.0-53.556.8.0-54.566.8.0-55.576.8.0-56.586.8.0-57.596.8.0-58.606.8.0-59.616.8.0-60.636.8.0-62.656.8.0-63.666.8.0-64.676.8.0-71.716.8.0-78.786.8.0-79.796.8.0-83.836.8.0-84.846.8.0-85.856.8.0-86.876.8.0-87.886.8.0-88.896.8.0-90.916.8.0-94.966.8.0-100.1006.8.0-101.1016.8.0-106.1066.8.0-107.1076.8.0-110.1106.8.0-111.1116.8.0-117.117
6.8.0-142.142
linux-gke
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1064.72, plus listed versions
6.8.0-1003.56.8.0-1004.76.8.0-1005.86.8.0-1006.96.8.0-1007.10
Show 44 moreShow less
6.8.0-1008.116.8.0-1009.126.8.0-1010.136.8.0-1011.146.8.0-1012.156.8.0-1013.176.8.0-1014.186.8.0-1015.196.8.0-1016.206.8.0-1017.216.8.0-1019.236.8.0-1020.246.8.0-1021.256.8.0-1022.266.8.0-1023.276.8.0-1024.286.8.0-1025.296.8.0-1026.306.8.0-1027.316.8.0-1028.326.8.0-1029.336.8.0-1032.366.8.0-1033.376.8.0-1035.396.8.0-1036.406.8.0-1037.416.8.0-1038.436.8.0-1039.446.8.0-1040.456.8.0-1041.466.8.0-1042.476.8.0-1043.486.8.0-1044.496.8.0-1048.536.8.0-1049.546.8.0-1050.566.8.0-1051.576.8.0-1054.606.8.0-1055.616.8.0-1058.646.8.0-1059.676.8.0-1060.686.8.0-1061.696.8.0-1062.70
6.8.0-1064.72
linux-ibm
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1065.66, plus listed versions
6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5
Show 45 moreShow less
6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.156.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1022.226.8.0-1023.236.8.0-1024.246.8.0-1025.256.8.0-1026.266.8.0-1027.276.8.0-1028.286.8.0-1029.296.8.0-1030.306.8.0-1033.336.8.0-1036.366.8.0-1037.376.8.0-1038.386.8.0-1039.396.8.0-1040.406.8.0-1041.416.8.0-1042.426.8.0-1043.436.8.0-1044.446.8.0-1045.456.8.0-1049.496.8.0-1050.506.8.0-1051.516.8.0-1052.526.8.0-1055.566.8.0-1057.586.8.0-1060.616.8.0-1061.626.8.0-1062.636.8.0-1063.646.8.0-1064.65
6.8.0-1065.66
linux-oracle
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1062.65, plus listed versions
6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.5
Show 44 moreShow less
6.8.0-1006.66.8.0-1008.86.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.196.8.0-1019.206.8.0-1020.216.8.0-1021.226.8.0-1022.236.8.0-1023.246.8.0-1024.256.8.0-1025.266.8.0-1026.276.8.0-1027.286.8.0-1028.296.8.0-1029.306.8.0-1030.316.8.0-1032.336.8.0-1033.346.8.0-1035.366.8.0-1037.386.8.0-1038.396.8.0-1039.406.8.0-1040.416.8.0-1041.426.8.0-1042.436.8.0-1043.446.8.0-1044.456.8.0-1047.486.8.0-1049.506.8.0-1050.516.8.0-1052.536.8.0-1054.556.8.0-1057.586.8.0-1058.616.8.0-1059.626.8.0-1060.636.8.0-1061.64
6.8.0-1062.65
linux-aws
Ubuntu:Pro:26.04:LTS
From an advisory covering 150 CVEs
 before 7.0.0-1011.11, plus listed versions
6.17.0-1002.26.17.0-1003.36.19.0-1002.26.19.0-1003.37.0.0-1001.1
Show 6 moreShow less
7.0.0-1003.37.0.0-1004.47.0.0-1006.67.0.0-1008.87.0.0-1009.97.0.0-1010.10
7.0.0-1011.11
linux-azure
Ubuntu:Pro:26.04:LTS
From an advisory covering 150 CVEs
 before 7.0.0-1012.12, plus listed versions
6.17.0-1003.36.17.0-1004.46.19.0-1001.16.19.0-1002.27.0.0-1001.1
Show 7 moreShow less
7.0.0-1002.27.0.0-1003.37.0.0-1004.47.0.0-1007.77.0.0-1009.97.0.0-1010.107.0.0-1011.11
7.0.0-1012.12
linux-gcp
Ubuntu:Pro:26.04:LTS
From an advisory covering 150 CVEs
 before 7.0.0-1010.10, plus listed versions
6.17.0-1002.26.17.0-1003.36.19.0-1001.17.0.0-1001.17.0.0-1002.2
Show 4 moreShow less
7.0.0-1003.37.0.0-1005.57.0.0-1007.77.0.0-1008.8
7.0.0-1010.10
linux
Ubuntu:Pro:26.04:LTS
From an advisory covering 150 CVEs
 before 7.0.0-30.30, plus listed versions
6.17.0-5.56.17.0-6.66.17.0-8.86.18.0-8.86.18.0-9.9
Show 14 moreShow less
6.19.0-3.36.19.0-5.56.19.0-6.66.19.0-9.97.0.0-7.77.0.0-10.107.0.0-12.127.0.0-13.137.0.0-14.147.0.0-15.157.0.0-22.227.0.0-27.277.0.0-28.287.0.0-29.29
7.0.0-30.30
kernel
Mageia:9
From an advisory covering 240 CVEs
 before 6.6.130-1.mga9
6.6.130-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 240 CVEs
 before 7.1.14-15.mga9
7.1.14-15.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 240 CVEs
 before 3.24-89.mga9
3.24-89.mga9
kernel-linus
Mageia:9
From an advisory covering 240 CVEs
 before 6.6.130-1.mga9
6.6.130-1.mga9
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 59 CVEs
 before 5.10.0-317.0.0.220.oe2203sp4
5.10.0-317.0.0.220.oe2203sp4
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 101 CVEs
 before 6.6.0-145.1.14.152.oe2403sp1
6.6.0-145.1.14.152.oe2403sp1
kernel
openEuler:24.03-LTS-SP3
From an advisory covering 150 CVEs
 before 6.6.0-145.3.14.145.oe2403sp3
6.6.0-145.3.14.145.oe2403sp3
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-zfcpdump-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
python3-perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-tools-libs-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
python3-perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.el8_10
0:4.18.0-553.107.1.el8_10
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.rt7.448.el8_10
0:4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.rt7.448.el8_10
0:4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.rt7.448.el8_10
0:4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.rt7.448.el8_10
0:4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.rt7.448.el8_10
0:4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.rt7.448.el8_10
0:4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.rt7.448.el8_10
0:4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.rt7.448.el8_10
0:4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.rt7.448.el8_10
0:4.18.0-553.107.1.rt7.448.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 5 CVEs
 before 0:4.18.0-553.107.1.rt7.448.el8_10
0:4.18.0-553.107.1.rt7.448.el8_10
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
rootio-linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-default
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1.150400.24.98.3
5.14.21-150400.24.194.1.150400.24.98.3
kernel-default
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1.150400.24.98.3
5.14.21-150400.24.194.1.150400.24.98.3
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-livepatch-SLE15-SP4_Update_48
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 380 CVEs
 before 1-150400.9.7.1
1-150400.9.7.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1.150400.24.98.3
5.14.21-150400.24.194.1.150400.24.98.3
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1.150400.24.98.3
5.14.21-150400.24.194.1.150400.24.98.3
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1.150400.24.98.3
5.14.21-150400.24.194.1.150400.24.98.3
kernel-docs
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1.150400.24.98.3
5.14.21-150400.24.194.1.150400.24.98.3
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 380 CVEs
 before 5.14.21-150400.24.194.1
5.14.21-150400.24.194.1
kernel-default
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 13 CVEs
 before 5.3.18-150300.59.238.1
5.3.18-150300.59.238.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 13 CVEs
 before 5.3.18-150300.59.238.1.150300.18.142.1
5.3.18-150300.59.238.1.150300.18.142.1
kernel-rt
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 15 CVEs
 before 5.3.18-150300.238.1
5.3.18-150300.238.1
kernel-source-rt
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 15 CVEs
 before 5.3.18-150300.238.1
5.3.18-150300.238.1
kernel-livepatch-SLE15-SP7-RT_Update_10
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 153 CVEs
 before 1-150700.1.3.1
1-150700.1.3.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 153 CVEs
 before 6.4.0-150700.7.34.1
6.4.0-150700.7.34.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 153 CVEs
 before 6.4.0-150700.7.34.1
6.4.0-150700.7.34.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 153 CVEs
 before 6.4.0-150700.7.34.1
6.4.0-150700.7.34.1
kernel-default
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 13 CVEs
 before 5.14.21-150500.55.141.1
5.14.21-150500.55.141.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 13 CVEs
 before 5.14.21-150500.55.141.1.150500.6.69.2
5.14.21-150500.55.141.1.150500.6.69.2
kernel-source
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 13 CVEs
 before 5.14.21-150500.55.141.1
5.14.21-150500.55.141.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 13 CVEs
 before 5.14.21-150500.55.141.1
5.14.21-150500.55.141.1
kernel-livepatch-SLE15-SP5_Update_36
SUSE:Linux Enterprise Live Patching 15 SP5
From an advisory covering 13 CVEs
 before 1-150500.11.5.1
1-150500.11.5.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 13 CVEs
 before 5.14.21-150500.55.141.1
5.14.21-150500.55.141.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 13 CVEs
 before 5.14.21-150500.55.141.1
5.14.21-150500.55.141.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 13 CVEs
 before 5.14.21-150500.55.141.1.150500.6.69.2
5.14.21-150500.55.141.1.150500.6.69.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 13 CVEs
 before 5.14.21-150500.55.141.1
5.14.21-150500.55.141.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1.150600.12.42.2
6.4.0-150600.23.92.1.150600.12.42.2
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 27 CVEs
 before 6.4.0-150600.23.92.1
6.4.0-150600.23.92.1
linux
Ubuntu:Pro:14.04:LTS
 before 3.13.0-212.263, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
3.13.0-212.263
linux-aws
Ubuntu:Pro:14.04:LTS
 before 4.4.0-1153.159, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
4.4.0-1153.159
linux-azure
Ubuntu:Pro:14.04:LTS
 before 4.15.0-1199.214~14.04.1, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
4.15.0-1199.214~14.04.1
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 before 4.4.0-279.313~14.04.1, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
4.4.0-279.313~14.04.1
linux
Ubuntu:Pro:16.04:LTS
 before 4.4.0-279.313, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-279.313
linux-aws
Ubuntu:Pro:16.04:LTS
 before 4.4.0-1191.206, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
4.4.0-1191.206
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1190.203~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1190.203~16.04.1
linux-azure
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1200.215~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1200.215~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1183.200~16.04.2, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1183.200~16.04.2
linux-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-248.260~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-248.260~16.04.1
linux-kvm
Ubuntu:Pro:16.04:LTS
 before 4.4.0-1154.165, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
4.4.0-1154.165
linux-oracle
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1153.164~16.04.1, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
4.15.0-1153.164~16.04.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 before 4.4.0-1123.130, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
4.4.0-1123.130
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:Pro:18.04:LTS
 before 4.15.0-248.260, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-248.260
linux-aws
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1190.203, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1190.203
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1.160000.2.8
6.12.0-160000.27.1.160000.2.8
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 176 CVEs
 before 6.12.0-160000.27.1
6.12.0-160000.27.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affected
affected, aliases, aliases_more, referencesOSV
affected, factsOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-23074 is a high vulnerability (CVSS 7.8) in Linux, published February 4, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 8th percentile. Fixed in kernel 6.6.126.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 989 package rows, 2,779 versions, 3,548 references and the rest of 12 source descriptions. The JSON record has them. Also not on the record: 107 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 156 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open